Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.230exploits catalogados

36.424CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.465Referência 23.022GitHub PoC 15.031VulnCheck XDB 8.860Nuclei 4.361Metasploit 3.491✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Mozilla Firefox XSL - Parsing Remote Memory Corruption (PoC) (1)

CVE-2009-1169—dosmultiple

The txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and SeaMonkey before 1.1.16 allows r

28RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Nuke - 'iframe.php' Remote File Inclusion

CVE-2007-1626—webappsphp

PHP remote file inclusion vulnerability in iframe.php in the iFrame Module for PHP-NUKE allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

Moodle < 1.6.9/1.7.7/1.8.9/1.9.5 - File Disclosure

CVE-2009-1171—webappsphp

The TeX filter in Moodle 1.6 before 1.6.9+, 1.7 before 1.7.7+, 1.8 before 1.8.9, and 1.9 before 1.9.5 allows user-assist

23RISCO

abrir ↗

Referência✓ VexDay Proof

PrecisionID Datamatrix - ActiveX Arbitrary File Overwrite

CVE-2009-1212—remotewindows

Multiple insecure method vulnerabilities in PRECIS~2.DLL in the PrecisionID Datamatrix ActiveX control (DMATRIXLib.Datam

23RISCO

abrir ↗

Referência✓ VexDay Proof

FOSS Gallery Admin 1.0 - Arbitrary File Upload

CVE-2008-4509—webappsphp

Unrestricted file upload vulnerability in processFiles.php in FOSS Gallery Admin and FOSS Gallery Public 1.0 beta allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

FOSS Gallery Public 1.0 - Arbitrary File Upload

CVE-2008-4509—webappsphp

Unrestricted file upload vulnerability in processFiles.php in FOSS Gallery Admin and FOSS Gallery Public 1.0 beta allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Mac OSX xnu 1228.3.13 - 'zip-notify' Remote Kernel Overflow (PoC)

CVE-2009-1236—dososx

Heap-based buffer overflow in the AppleTalk networking stack in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and e

23RISCO

abrir ↗

Referência✓ VexDay Proof

Chilkat Mail ActiveX 7.8 - 'ChilkatCert.dll' Insecure Method

CVE-2008-4584—remotewindows

Insecure method vulnerability in Chilkat Mail 7.8 ActiveX control (ChilkatCert.dll) allows remote attackers to overwrite

23RISCO

abrir ↗

Referência✓ VexDay Proof

Macrovision FlexNet - 'isusweb.dll' DownloadAndExecute Method

CVE-2008-4586—remotewindows

Insecure method vulnerability in the MVSNCLientWebAgent61.WebAgent.1 ActiveX control (isusweb.dll 6.1.100.61372) in Macr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Mac OSX xnu 1228.x - 'vfssysctl' Local Kernel Denial of Service (PoC)

CVE-2009-1238—dososx

Race condition in the HFS vfs sysctl interface in XNU 1228.8.20 and earlier on Apple Mac OS X 10.5.6 and earlier allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

Hitweb 4.2.1 - 'REP_INC' Remote File Inclusion

CVE-2006-4113—webappsphp

PHP remote file inclusion vulnerability in genpage-cgi.php in Brian Fraval hitweb 4.2 and possibly earlier versions allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB Journals System Mod 1.0.2 RC2 - Remote File Inclusion

CVE-2006-5306—webappsphp

Multiple PHP remote file inclusion vulnerabilities in the Journals System module 1.0.2 (RC2) and earlier for phpBB allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

acute control panel 1.0.0 - SQL Injection / Remote File Inclusion

CVE-2009-1247—webappsphp

SQL injection vulnerability in login.php in Acute Control Panel 1.0.0 allows remote attackers to execute arbitrary SQL c

28RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_Projectfork 2.0.10 - Local File Inclusion

CVE-2009-2100—webappsphp

Directory traversal vulnerability in the JoomlaPraise Projectfork (com_projectfork) component 2.0.10 for Joomla! allows

38RISCO

abrir ↗

Referência✓ VexDay Proof

PHP 5.2.3 - 'bz2 com_print_typeinfo()' Denial of Service

CVE-2007-3790—dosmultiple

The com_print_typeinfo function in the bz2 extension in PHP 5.2.3 allows context-dependent attackers to cause a denial o

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simplog 0.9.2 - 's' Remote Command Execution

CVE-2006-0147—webappsphp

Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple

28RISCO

abrir ↗

Referência✓ VexDay Proof

ClamAV < 0.94.2 - JPEG Parsing Recursive Stack Overflow (PoC)

CVE-2008-5314—dosmultiple

Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial

23RISCO

abrir ↗

Referência✓ VexDay Proof

Arab Portal 2.1 (Windows) - Remote File Disclosure

CVE-2008-5787—webappsphp

Directory traversal vulnerability in mod.php in Arab Portal 2.1 on Windows allows remote attackers to read arbitrary fil

23RISCO

abrir ↗

Referência✓ VexDay Proof

UltraISO 9.3.3.2685 - CCD/IMG Universal Buffer Overflow

CVE-2009-1257—localwindows

Heap-based buffer overflow in Magic ISO Maker 5.5 build 0274 allows remote attackers to cause a denial of service (crash

28RISCO

abrir ↗

Referência✓ VexDay Proof

AdaptBB 1.0 - 'topic_id' SQL Injection / Credentials Disclosure

CVE-2009-1259—webappsphp

SQL injection vulnerability in inc/bb/topic.php in Insane Visions AdaptBB 1.0, when magic_quotes_gpc is disabled, allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

PowerPHPBoard 1.00b - Multiple Local File Inclusions

CVE-2008-1534—webappsphp

Multiple directory traversal vulnerabilities in PowerPHPBoard 1.00b allow remote attackers to include and execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

ITechBids 7.0 gold - Cross-Site Scripting / SQL Injection

CVE-2008-3237—webappsphp

Cross-site scripting (XSS) vulnerability in forward_to_friend.php in ITechBids 7.0 Gold allows remote attackers to injec

23RISCO

abrir ↗

Referência✓ VexDay Proof

Link Request Contact Form 3.4 - Remote Code Execution

CVE-2007-3199—webappsphp

Unrestricted file upload vulnerability in Link Request Contact Form 3.4 allows remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simple Machines Forum (SMF) 1.1.3 - Blind SQL Injection

CVE-2007-5646—webappsphp

SQL injection vulnerability in Sources/Search.php in Simple Machines Forum (SMF) 1.1.3, when MySQL 5 is used, allows rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

easysite 2.3 - Multiple Vulnerabilities

CVE-2008-4155—webappsphp

Multiple directory traversal vulnerabilities in EasySite 2.3 allow remote attackers to read arbitrary files or list dire

23RISCO

abrir ↗

Referência✓ VexDay Proof

PowerPortal 2.0.13 - 'path' Local Directory Traversal

CVE-2008-4361—webappsphp

Directory traversal vulnerability in PowerPortal 2.0.13 allows remote attackers to list and possibly read arbitrary file

23RISCO

abrir ↗

Referência✓ VexDay Proof

UltraISO 9.3.3.2685 - CCD/IMG Universal Buffer Overflow

CVE-2009-1260—localwindows

Multiple stack-based buffer overflows in UltraISO 9.3.3.2685 and earlier allow remote attackers to cause a denial of ser

50RISCO

abrir ↗

Referência✓ VexDay Proof

LiteNews 0.1 - Insecure Cookie Handling

CVE-2008-3508—webappsphp

LiteNews 0.1 (aka 01), and possibly 1.2 and earlier, allows remote attackers to bypass authentication and gain administr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mosaic Commerce - 'cid' SQL Injection

CVE-2008-4599—webappsphp

SQL injection vulnerability in category.php in Mosaic Commerce allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Jamroom 4.0.2 - 't' Local File Inclusion

CVE-2009-1318—webappsphp

Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.