Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.230exploits catalogados

36.424CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.465Referência 23.022GitHub PoC 15.031VulnCheck XDB 8.860Nuclei 4.361Metasploit 3.491✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

N/X WCMS 4.1 - 'nxheader.inc.php' Remote File Inclusion

CVE-2006-5625—webappsphp

PHP remote file inclusion vulnerability in wwwdev/nxheader.inc.php in N/X 2002 Professional Edition Web Content Manageme

23RISCO

abrir ↗

Referência✓ VexDay Proof

Creasito E-Commerce Content Manager - 'admin' Authentication Bypass

CVE-2006-5777—webappsphp

Creasito E-Commerce Content Manager 1.3.08 allows remote attackers to bypass authentication and perform privileged funct

23RISCO

abrir ↗

Referência✓ VexDay Proof

Omni-NFS Server 5.2 - 'nfsd.exe' Remote Stack Overflow (Metasploit)

CVE-2006-5780—remotewindows

Stack-based buffer overflow in nfsd.exe in XLink Omni-NFS Server 5.2 allows remote attackers to execute arbitrary code v

50RISCO

abrir ↗

Referência✓ VexDay Proof

FreeWebShop.org script 2.2.2 - Multiple Vulnerabilities

CVE-2006-5773—webappsphp

Directory traversal vulnerability in index.php in FreeWebshop 2.2.1 and earlier allows remote attackers to read arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

SAP Web Application Server 6.40 - Arbitrary File Disclosure

CVE-2006-5784—remotewindows

Unspecified vulnerability in enserver.exe in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 a

23RISCO

abrir ↗

Referência✓ VexDay Proof

iPrimal Forums - '/admin/index.php' Change User Password

CVE-2006-5787—webappsphp

admin/index.php in IPrimal Forums as of 20061105 allows remote attackers to bypass authentication and modify user passwo

23RISCO

abrir ↗

Referência✓ VexDay Proof

iPrimal Forums - '/admin/index.php' Remote File Inclusion

CVE-2006-5788—webappsphp

PHP remote file inclusion vulnerability in (1) index.php and (2) admin/index.php in IPrimal Forums as of 20061105 allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

OpenEMR 2.8.1 - 'srcdir' Multiple Remote File Inclusions

CVE-2006-5795—webappsphp

Multiple PHP remote file inclusion vulnerabilities in OpenEMR 2.8.1 and earlier, when register_globals is enabled, allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

Soholaunch Pro 4.9 r36 - Remote File Inclusion

CVE-2006-5796—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Soholaunch Pro Edition 4.9 r46 and earlier, when register_globals

23RISCO

abrir ↗

Referência✓ VexDay Proof

OpenEMR 2.8.1 - 'srcdir' Multiple Remote File Inclusions

CVE-2006-5811—webappsphp

PHP remote file inclusion vulnerability in library/translation.inc.php in OpenEMR 2.8.1, with register_globals enabled,

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASP Smiley 1.0 - 'default.asp' Authentication Bypass / SQL Injection

CVE-2006-5952—webappsasp

SQL injection vulnerability in admin/default.asp in ASP Smiley 1.0 allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

blogme 3.0 - Cross-Site Scripting / Authentication Bypass

CVE-2006-5975—webappsasp

Multiple cross-site scripting (XSS) vulnerabilities in comments.asp in BlogMe 3.0 allow remote attackers to inject arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

FipsCMS 4.5 - 'index.asp' SQL Injection

CVE-2006-6115—webappsasp

SQL injection vulnerability in index.asp in fipsCMS 4.5 and earlier allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

fipsForum 2.6 - 'default2.asp' SQL Injection

CVE-2006-6116—webappsasp

SQL injection vulnerability in default2.asp in fipsForum 2.6 and earlier allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

SimpleBlog 2.3 - '/admin/edit.asp' SQL Injection

CVE-2006-6191—webappsasp

SQL injection vulnerability in admin/edit.asp in 8pixel.net simpleblog 2.3 and earlier allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

PEGames - 'index.php' Remote File Inclusion

CVE-2006-6213—webappsphp

index.php in PEGames uses the extract function to overwrite critical variables, which allows remote attackers to conduct

23RISCO

abrir ↗

Referência✓ VexDay Proof

Wallpaper Complete Website 1.0.09 - SQL Injection

CVE-2006-6214—webappsphp

SQL injection vulnerability in wallpaper.php in Wallpaper Website (Wallpaper Complete Website) 1.0.09 allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

Hacks List phpBB Mod 1.21 - SQL Injection

CVE-2006-6216—webappsphp

SQL injection vulnerability in admin_hacks_list.php in the Nivisec Hacks List 1.21 and earlier phpBB module allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

Recipes Complete Website 1.1.14 - SQL Injection

CVE-2006-6220—webappsphp

Multiple SQL injection vulnerabilities in Recipes Website (Recipes Complete Website) 1.1.14 allow remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

S9Y Serendipity 1.0.3 - 'comment.php' Local File Inclusion

CVE-2006-6242—webappsphp

Multiple directory traversal vulnerabilities in Serendipity 1.0.3 and earlier allow remote attackers to read or include

23RISCO

abrir ↗

Referência✓ VexDay Proof

CoolPlayer 2.17 - '.m3u' Local Stack Overflow

CVE-2006-6288—localwindows

Multiple buffer overflows in Niek Albers CoolPlayer 216 and earlier allow remote attackers to execute arbitrary code via

23RISCO

abrir ↗

Referência✓ VexDay Proof

F-Prot AntiVirus 4.6.6 - CHM Heap Overflow (PoC)

CVE-2006-6293—doslinux

Heap-based buffer overflow in FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to exec

28RISCO

abrir ↗

Referência✓ VexDay Proof

torrentflux 2.2 - Arbitrary File Create/ Execute/Delete

CVE-2006-6330—webappsphp

index.php for TorrentFlux 2.2 allows remote registered users to execute arbitrary commands via shell metacharacters in t

23RISCO

abrir ↗

Referência✓ VexDay Proof

CM68 News 12.02.06 - 'addpth' Remote File Inclusion

CVE-2006-6462—webappsphp

PHP remote file inclusion vulnerability in engine/oldnews.inc.php in CM68 News 12.02.06 allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

HR Assist 1.05 - 'vdateUsr.asp' Remote Authentication Bypass

CVE-2006-6524—webappsasp

SQL injection vulnerability in vdateUsr.asp in EzHRS HR Assist 1.05 and earlier allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

Gizzar 03162002 - 'index.php' Remote File Inclusion

CVE-2006-6526—webappsphp

PHP remote file inclusion vulnerability in index.php in Gizzar 03162002 and earlier allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

D-Link DWL-2000AP 2.11 - ARP Flood Remote Denial of Service

CVE-2006-6538—doshardware

D-LINK DWL-2000AP+ firmware 2.11 allows remote attackers to cause (1) a denial of service (device reset) via a flood of

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fantastic News 2.1.4 - 'news.php' SQL Injection

CVE-2006-6542—webappsphp

SQL injection vulnerability in news.php in Fantastic News 2.1.4 and earlier allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

SpotLight CRM 1.0 - 'login.asp' SQL Injection

CVE-2006-6543—webappsasp

Multiple SQL injection vulnerabilities in login.asp in AppIntellect SpotLight CRM 1.0 allow remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

mxBB Module ErrorDocs 1.0 - 'common.php' Remote File Inclusion

CVE-2006-6545—webappsphp

PHP remote file inclusion vulnerability in includes/common.php in the ErrorDocs 1.0.0 and earlier module for mxBB (mx_er

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.