Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.794exploits catalogados

36.057CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.459Referência 22.721GitHub PoC 14.946VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

TorrentTrader Classic 1.04 - Blind SQL Injection

CVE-2008-4494—webappsphp

SQL injection vulnerability in completed-advance.php in TorrentTrader Classic 1.08 and 1.04 and earlier allows remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

Built2Go PHP Realestate 1.5 - 'event_detail.php' SQL Injection

CVE-2008-4497—webappsphp

SQL injection vulnerability in event_detail.php in Built2Go Real Estate Listings 1.5 allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

ABC-View Manager 1.42 - '.psp' Local Buffer Overflow

CVE-2007-2284—localwindows

Buffer overflow in ABC-View Manager 1.42 allows user-assisted remote attackers to execute arbitrary code via a crafted .

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Autos 2.9.1 - 'catid' SQL Injection

CVE-2008-4498—webappsphp

SQL injection vulnerability in searchresults.php in PHP Autos 2.9.1 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

IP Reg 0.4 - Blind SQL Injection

CVE-2008-4523—webappsphp

SQL injection vulnerability in login.php in IP Reg 0.4 and earlier allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

audioCMS arash 0.1.4 - 'arashlib_dir' Remote File Inclusion

CVE-2007-2301—webappsphp

Multiple PHP remote file inclusion vulnerabilities in audioCMS arash 0.1.4 allow remote attackers to execute arbitrary P

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Fusion Mod recept - 'kat_id' SQL Injection

CVE-2008-4527—webappsphp

SQL injection vulnerability in recept.php in the Recepies (Recept) module 1.1 for PHP-Fusion allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

RiotPix 0.61 - 'forumid' Blind SQL Injection

CVE-2009-0110—webappsphp

SQL injection vulnerability in read.php in RiotPix 0.61 and earlier allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

pPIM 1.01 - 'notes.php' Local File Inclusion

CVE-2008-4528—webappsphp

Directory traversal vulnerability in notes.php in Phlatline's Personal Information Manager (pPIM) 1.01 allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPBandManager 0.8 - 'index.php?pg' Remote File Inclusion

CVE-2007-2341—webappsphp

PHP remote file inclusion vulnerability in suite/index.php in phpBandManager 0.8 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

asiCMS alpha 0.208 - Multiple Remote File Inclusions

CVE-2008-4529—webappsphp

Multiple PHP remote file inclusion vulnerabilities in asiCMS alpha 0.208 allow remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência✓ VexDay Proof

Absolute Poll Manager XE 4.1 - 'xlacomments.asp' SQL Injection

CVE-2008-4569—webappsasp

SQL injection vulnerability in xlacomments.asp in XIGLA Software Absolute Poll Manager XE 4.1 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ayco Okul Portali - 'linkid' SQL Injection

CVE-2008-4574—webappsasp

SQL injection vulnerability in default.asp in Ayco Okul Portali allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft HTML Workshop 4.74 - Universal Buffer Overflow

CVE-2009-0133—localwindows

Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary

50RISCO

abrir ↗

Referência✓ VexDay Proof

Chilkat FTP ActiveX 2.0 - 'ChilkatCert.dll' Insecure Method

CVE-2008-4583—remotewindows

Insecure method vulnerability in the Chilkat FTP 2.0 ActiveX component (ChilkatCert.dll) allows remote attackers to over

23RISCO

abrir ↗

Referência✓ VexDay Proof

Macrovision FlexNet DownloadManager - Insecure Methods

CVE-2008-4587—remotewindows

Insecure method vulnerability in the MSVNClientDownloadManager61Lib.DownloadManager.1 ActiveX control (ISDM.exe 6.1.100.

28RISCO

abrir ↗

Referência✓ VexDay Proof

PHPWebGallery 1.3.4 - Cross-Site Scripting / Local File Inclusion

CVE-2008-4591—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in admin/include/isadmin.inc.php in PhpWebGallery 1.3.4 allow remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sports Clubs Web Panel 0.0.1 - 'p' Local File Inclusion

CVE-2008-4592—webappsphp

Directory traversal vulnerability in index.php in Sports Clubs Web Panel 0.0.1 allows remote attackers to include and ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

iGaming CMS 2.0 Alpha 1 - 'search.php' SQL Injection

CVE-2008-4603—webappsphp

SQL injection vulnerability in search.php in iGaming CMS 2.0 Alpha 1 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

CafeEngine - Multiple SQL Injections

CVE-2008-4605—webappsphp

SQL injection vulnerability in CafeEngine allows remote attackers to execute arbitrary SQL commands via the id parameter

23RISCO

abrir ↗

Referência✓ VexDay Proof

PortalApp 4.0 - SQL Injection / Cross-Site Scripting / Authentication Bypass

CVE-2008-4614—webappsasp

PortalApp 4.0 does not require authentication for (1) forums.asp and (2) content.asp, which allows remote attackers to c

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpMyNewsletter 0.8 (beta5) - Multiple Vulnerabilities

CVE-2007-2372—webappsphp

admin/send_mod.php in Gregory Kokanosky phpMyNewsletter 0.8 beta5 and earlier prints a Location header but does not exit

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpFastNews 1.0.0 - Insecure Cookie Handling

CVE-2008-4622—webappsphp

The isLoggedIn function in fastnews-code.php in phpFastNews 1.0.0 allows remote attackers to bypass authentication and g

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fast Click SQL 1.1.7 Lite - 'init.php' Remote File Inclusion

CVE-2008-4624—webappsphp

PHP remote file inclusion vulnerability in init.php in Fast Click SQL Lite 1.1.7, when register_globals is enabled, allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin st_newsletter - 'stnl_iframe.php' SQL Injection

CVE-2008-4625—webappsphp

SQL injection vulnerability in stnl_iframe.php in the ShiftThis Newsletter (st_newsletter) plugin for WordPress allows r

23RISCO

abrir ↗

Referência✓ VexDay Proof

Yappa-ng 2.3.3-beta0 - 'album' Local File Inclusion

CVE-2008-4626—webappsphp

Directory traversal vulnerability in index.php in Fritz Berger yet another php photo album - next generation (yappa-ng)

23RISCO

abrir ↗

Referência✓ VexDay Proof

WBB Plugin rGallery 1.09 - 'itemID' Blind SQL Injection

CVE-2008-4627—webappsphp

SQL injection vulnerability in the rGallery plugin 1.09 for WoltLab Burning Board (WBB) allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

VUPlayer 2.49 - '.asx' HREF Local Buffer Overflow (1)

CVE-2009-0174—localwindows

Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in th

28RISCO

abrir ↗

Referência✓ VexDay Proof

miniBloggie 1.0 - 'del.php' Blind SQL Injection

CVE-2008-4628—webappsphp

SQL injection vulnerability in del.php in myWebland miniBloggie 1.0 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

mystats - 'hits.php' Multiple Vulnerabilities

CVE-2008-4643—webappsphp

SQL injection vulnerability in hits.php in myWebland myStats allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.