Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.230exploits catalogados

36.424CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.465Referência 23.022GitHub PoC 15.031VulnCheck XDB 8.860Nuclei 4.361Metasploit 3.491✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

nweb2fax 0.2.7 - Multiple Vulnerabilities

CVE-2008-6669—webappsphp

viewrq.php in nweb2fax 0.2.7 and earlier allows remote attackers to execute arbitrary code via shell metacharacters in t

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebChat 0.77 - 'defines.php?WEBCHATPATH' Remote File Inclusion

CVE-2007-0485—webappsphp

PHP remote file inclusion vulnerability in defines.php in WebChat 0.77 allows remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apartment Search Script - Arbitrary File Upload / Cross-Site Scripting

CVE-2008-6683—webappsphp

Cross-site scripting (XSS) vulnerability in listtest.php in Apartment Search Script allows remote attackers to inject ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

TeamSpeak 2.0 (Windows Release) - Remote Denial of Service

CVE-2007-3956—doswindows

TeamSpeak WebServer 2.0 for Windows does not validate parameter value lengths and does not expire TCP sessions, which al

23RISCO

abrir ↗

Referência✓ VexDay Proof

MiGCMS 2.0.5 - Multiple Remote File Inclusions

CVE-2008-2888—webappsphp

Multiple PHP remote file inclusion vulnerabilities in MiGCMS 2.0.5, when register_globals is enabled, allow remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

U&M Software Signup 1.1 - Authentication Bypass

CVE-2008-6717—webappsphp

U&M Software Signup 1.0 and 1.1 does not require administrative authentication for all scripts in the admin/ directory,

23RISCO

abrir ↗

Referência✓ VexDay Proof

U&M Software Event Lister 1.0 - Authentication Bypass

CVE-2008-6719—webappsphp

U&M Software Event Lister (aka JustListIt) 1.0 does not require administrative authentication for all scripts in the adm

23RISCO

abrir ↗

Referência✓ VexDay Proof

Durian Web Application Server 3.02 - Denial of Service

CVE-2006-6853—doswindows

Buffer overflow in Durian Web Application Server 3.02 freeware on Windows allows remote attackers to execute arbitrary c

23RISCO

abrir ↗

Referência✓ VexDay Proof

RunCMS 1.5.2 - 'debug_show.php' SQL Injection

CVE-2007-2539—webappsphp

The show_files function in RunCms 1.5.2 and earlier allows remote attackers to obtain sensitive information (file existe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mini Web Calendar 1.2 - File Disclosure / Cross-Site Scripting

CVE-2008-5062—webappsphp

Directory traversal vulnerability in php/cal_pdf.php in Mini Web Calendar (mwcal) 1.2 allows remote attackers to read ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPmotion 2.1 - Cross-Site Request Forgery

CVE-2008-6729—webappsphp

Multiple cross-site request forgery (CSRF) vulnerabilities in password.php in PHPmotion 2.1 and earlier allow remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

Flexphplink Pro - Arbitrary File Upload

CVE-2008-6731—webappsphp

Unrestricted file upload vulnerability in submitlink.php in FlexPHPLink Pro 0.0.7 allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

Keller Web Admin CMS 0.94 Pro - Local File Inclusion (2)

CVE-2008-6734—webappsphp

Directory traversal vulnerability in Public/index.php in Keller Web Admin CMS 0.94 Pro allows remote attackers to includ

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyShoutPro 1.2 - Final Insecure Cookie Handling

CVE-2008-6738—webappsphp

MyShoutPro 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the admin_acce

23RISCO

abrir ↗

Referência✓ VexDay Proof

Downline Goldmine Builder - SQL Injection

CVE-2008-4178—webappsphp

SQL injection vulnerability in tr.php in DownlineGoldmine Special Category Addon, Downline Builder Pro, New Addon, and D

23RISCO

abrir ↗

Referência✓ VexDay Proof

Shadows Rising RPG 0.0.5b - Remote File Inclusion

CVE-2006-4329—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Shadows Rising RPG (Pre-Alpha) 0.0.5b and earlier allow remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

Autodesk DWF Viewer Control / LiveUpdate Module - Remote Code Execution

CVE-2008-4472—remotewindows

The UpdateEngine class in the LiveUpdate ActiveX control (LiveUpdate16.DLL 17.2.56), as used in Revit Architecture 2009

23RISCO

abrir ↗

Referência✓ VexDay Proof

BlogPHP 2.0 - Privilege Escalation / SQL Injection

CVE-2008-6745—webappsphp

index.php in BlogPHP 2.0 allows remote attackers to gain administrator privileges via a crafted email parameter in a reg

23RISCO

abrir ↗

Referência✓ VexDay Proof

Megacubo 5.0.7 - 'mega://' Remote 'eval()' Injection

CVE-2008-6748—remotewindows

Eval injection vulnerability in Megacubo 5.0.7 allows remote attackers to inject and execute arbitrary PHP code via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

SendStudio 2004.14 - 'ROOTDIR' Remote File Inclusion

CVE-2007-1060—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Interspire SendStudio 2004.14 and earlier, when register_globals a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Imageview 5.3 - 'fileview.php?album' Local File Inclusion

CVE-2007-2425—webappsphp

Directory traversal vulnerability in fileview.php in Imageview 5.3 allows remote attackers to read arbitrary files via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

CGX 20050314 - 'pathCGX' Remote File Inclusion

CVE-2007-2611—webappsphp

Multiple PHP remote file inclusion vulnerabilities in CGX 20050314 allow remote attackers to execute arbitrary PHP code

23RISCO

abrir ↗

Referência✓ VexDay Proof

Woltlab Burning Board Addon JGS-Treffen 2.0.2 - SQL Injection

CVE-2008-1640—webappsphp

SQL injection vulnerability in jgs_treffen.php in the JGS-XA JGS-Treffen 2.0.2 and earlier addon for Woltlab Burning Boa

23RISCO

abrir ↗

Referência✓ VexDay Proof

SFS EZ Gaming Directory - 'cat_id' SQL Injection

CVE-2008-6781—webappsphp

SQL injection vulnerability in directory.php in Sites for Scripts (SFS) Gaming Directory allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

Oracle 10g - MDSYS.SDO_TOPO_DROP_FTBL SQL Injection (Metasploit)

CVE-2008-3979—localmultiple

Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.2 allows remote authent

50RISCO

abrir ↗

Referência✓ VexDay Proof

SFS EZ Home Business Directory - 'cat_id' SQL Injection

CVE-2008-6783—webappsphp

SQL injection vulnerability in directory.php in Sites for Scripts (SFS) EZ Home Business Directory allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

MindDezign Photo Gallery 2.2 - SQL Injection

CVE-2008-6788—webappsphp

SQL injection vulnerability in MindDezign Photo Gallery 2.2, when magic_quotes_gpc is disabled, allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

EnjoySAP ActiveX rfcguisink.rfcguisink.1 - Remote Heap Overflow (PoC)

CVE-2007-3606—doswindows

Heap-based buffer overflow in the rfcguisink.rfcguisink.1 ActiveX control in the EnjoySAP SAP GUI, on systems using ASCI

23RISCO

abrir ↗

Referência✓ VexDay Proof

jspwiki 2.4.104/2.5.139 - Multiple Vulnerabilities

CVE-2008-1231—webappsjsp

Directory traversal vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to include and exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

AuraCMS 2.x - '/user.php' Security Code Bypass / Arbitrary Add Administrator

CVE-2008-1715—webappsphp

SQL injection vulnerability in content/user.php in AuraCMS 2.2.1 and earlier, when magic_quotes_gpc is disabled, allows

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.