Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.230exploits catalogados

36.424CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.465Referência 23.022GitHub PoC 15.031VulnCheck XDB 8.860Nuclei 4.361Metasploit 3.491✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Gretech GOM Encoder 1.0.0.11 - '.Subtitle' Buffer Overflow (PoC)

CVE-2009-1022—doswindows

Heap-based buffer overflow in the Preview/ Set Segment function in Gretech GOMlab GOM Encoder 1.0.0.11 and earlier allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

iziContents rc6 - Local/Remote File Inclusion

CVE-2005-4600—webappsphp

Directory traversal vulnerability in tiny_mce_gzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

KnowledgeBuilder 2.2 - 'visEdit_root' Remote File Inclusion

CVE-2006-5919—webappsphp

PHP remote file inclusion vulnerability in admin/e_data/visEdit_control.class.php in ActiveCampaign KnowledgeBuilder 2.2

23RISCO

abrir ↗

Referência✓ VexDay Proof

IrfanView 4.00 - '.iff' Local Buffer Overflow

CVE-2007-2363—localwindows

Buffer overflow in IrfanView 4.00 and earlier allows user-assisted remote attackers to execute arbitrary code via a craf

23RISCO

abrir ↗

Referência✓ VexDay Proof

Exodus 0.10 - URI Handler Arbitrary Parameter Injection (2)

CVE-2008-6936—remotewindows

Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, over

23RISCO

abrir ↗

Referência✓ VexDay Proof

Beerwin's PHPLinkAdmin 1.0 - Remote File Inclusion / SQL Injection

CVE-2009-1024—webappsphp

Multiple SQL injection vulnerabilities in Beerwin PHPLinkAdmin 1.0 allow remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

Beerwin's PHPLinkAdmin 1.0 - Remote File Inclusion / SQL Injection

CVE-2009-1025—webappsphp

PHP remote file inclusion vulnerability in linkadmin.php in Beerwin PHPLinkAdmin 1.0 allows remote attackers to execute

35RISCO

abrir ↗

Referência✓ VexDay Proof

webid 0.5.4 - Multiple Vulnerabilities

CVE-2008-7117—webappsphp

eledicss.php in WeBid auction script 0.5.4 allows remote attackers to modify arbitrary cascading style sheets (CSS) file

23RISCO

abrir ↗

Referência✓ VexDay Proof

Kim Websites 1.0 - Authentication Bypass

CVE-2009-1026—webappsphp

Multiple SQL injection vulnerabilities in login.php in Kim Websites 1.0 allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

eZip Wizard 3.0 - Local Stack Buffer Overflow (PoC) (SEH)

CVE-2009-1028—doswindows

Stack-based buffer overflow in ediSys eZip Wizard 3.0 allows remote attackers to execute arbitrary code via a crafted .z

50RISCO

abrir ↗

Referência✓ VexDay Proof

Confixx Pro 3.3.1 - 'saveserver.php' Remote File Inclusion

CVE-2007-4009—webappsphp

PHP remote file inclusion vulnerability in admin/business_inc/saveserver.php in SWSoft Confixx Pro 2.0.12 through 3.3.1

23RISCO

abrir ↗

Referência✓ VexDay Proof

Alt-N SecurityGateway 1.00-1.01 - Remote Stack Overflow

CVE-2008-4193—remotewindows

Stack-based buffer overflow in SecurityGateway.dll in Alt-N Technologies SecurityGateway 1.0.1 allows remote attackers t

60RISCO

abrir ↗

Referência✓ VexDay Proof

TurnkeyForms Web Hosting Directory - Multiple Vulnerabilities

CVE-2008-6939—webappsphp

TurnkeyForms Web Hosting Directory allows remote attackers to bypass authentication and (1) gain administrative privileg

23RISCO

abrir ↗

Referência✓ VexDay Proof

POP Peeper 3.4.0.0 - Date Remote Buffer Overflow

CVE-2009-1029—remotewindows

Stack-based buffer overflow in POP Peeper 3.4.0.0 and earlier allows remote POP3 servers to execute arbitrary code via a

50RISCO

abrir ↗

Referência✓ VexDay Proof

WebPortal CMS 0.6-beta - Remote Password Change

CVE-2008-0141—webappsphp

actions.php in WebPortal CMS 0.6-beta generates predictable passwords containing only the time of day, which makes it ea

23RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress MU < 2.7 - 'HOST' HTTP Header Cross-Site Scripting

CVE-2009-1030—webappsphp

Cross-site scripting (XSS) vulnerability in the choose_primary_blog function in wp-includes/wpmu-functions.php in WordPr

23RISCO

abrir ↗

Referência✓ VexDay Proof

RhinoSoft Serv-U FTP Server 7.4.0.1 - 'MKD' Create Arbitrary Directories

CVE-2009-1031—remotewindows

Directory traversal vulnerability in the FTP server in Rhino Software Serv-U File Server 7.0.0.1 through 7.4.0.1 allows

28RISCO

abrir ↗

Referência✓ VexDay Proof

EasyNews 40tr - SQL Injection / Cross-Site Scripting / Local File Inclusion

CVE-2008-1651—webappsphp

Directory traversal vulnerability in admin/login.php in EasyNews 4.0 allows remote attackers to include and execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

gapicms 9.0.2 - 'dirDepth' Remote File Inclusion

CVE-2008-3183—webappsphp

PHP remote file inclusion vulnerability in ktmlpro/includes/ktedit/toolbar.php in gapicms 9.0.2 allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

DBGuestbook 1.1 - 'dbs_base_path' Remote File Inclusion

CVE-2007-1165—webappsphp

Multiple PHP remote file inclusion vulnerabilities in DBGuestbook 1.1 allow remote attackers to execute arbitrary PHP co

23RISCO

abrir ↗

Referência✓ VexDay Proof

HIOX Random Ad 1.3 - Remote File Inclusion

CVE-2008-3401—webappsphp

PHP remote file inclusion vulnerability in hioxRandomAd.php in HIOX Random Ad (HRA) 1.3 allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpTrafficA 1.4.2 - 'pageid' SQL Injection

CVE-2007-3425—webappsphp

Directory traversal vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to include arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

Hotel Reservation System - 'city.asp' Blind SQL Injection

CVE-2008-4204—webappsasp

SQL injection vulnerability in city.asp in SoftAcid Hotel Reservation System (HRS) allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

YAP 1.1.1 - Blind SQL Injection / SQL Injection

CVE-2009-1038—webappsphp

Multiple SQL injection vulnerabilities in YAP Blog 1.1.1 allow remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência✓ VexDay Proof

ExBB Italiano 0.2 - exbb[home_path] Remote File Inclusion

CVE-2006-4488—webappsphp

PHP remote file inclusion vulnerability in modules/userstop/userstop.php in ExBB Italia 0.2 and earlier, when register_g

23RISCO

abrir ↗

Referência✓ VexDay Proof

Stash 1.0.3 - Multiple SQL Injections

CVE-2008-4080—webappsphp

SQL injection vulnerability in Stash 1.0.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Scriptsez Easy Image Downloader - Local File Download

CVE-2008-6089—webappsphp

Directory traversal vulnerability in main.php in ScriptsEz Easy Image Downloader allows remote attackers to read arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

FreeBSD 7.0/7.1 - 'ktimer' Local Privilege Escalation

CVE-2009-1041—localfreebsd

The ktimer feature (sys/kern/kern_time.c) in FreeBSD 7.0, 7.1, and 7.2 allows local users to overwrite arbitrary kernel

23RISCO

abrir ↗

Referência✓ VexDay Proof

WFTPD Explorer Pro 1.0 - Remote Heap Overflow (PoC)

CVE-2007-6473—doswindows

Heap-based buffer overflow in Texas Imperial Software WFTPD Pro Explorer 1.0 allows remote FTP servers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

VideoLAN VLC Media Player 0.9.8a - Web UI 'input' Remote Denial of Service

CVE-2009-1045—doswindows

requests/status.xml in VLC 0.9.8a allows remote attackers to cause a denial of service (stack consumption and crash) via

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.