Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.305exploits catalogados

36.465CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8.883Nuclei 4.361Metasploit 3.493✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

PHPbbBook 1.3 - 'bbcode.php?l' Local File Inclusion

CVE-2009-0442—webappsphp

Directory traversal vulnerability in bbcode.php in PHPbbBook 1.3 and 1.3h allows remote attackers to include and execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

DreamPics Photo/Video Gallery - Blind SQL Injection

CVE-2009-0445—webappsphp

SQL injection vulnerability in index.php in Dreampics Gallery Builder allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

FipsCMS Light 2.1 - 'db.mdb' Remote Database Disclosure

CVE-2009-2022—webappsasp

fipsCMS Light 2.1 stores sensitive information under the web root with insufficient access control, which allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Carscripts Classifieds - 'cat' SQL Injection

CVE-2008-2844—webappsphp

SQL injection vulnerability in index.php in Carscripts Classifieds allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

Agora 1.4 RC1 - 'MysqlfinderAdmin.php' Remote File Inclusion

CVE-2006-7194—webappsphp

PHP remote file inclusion vulnerability in modules/Mysqlfinder/MysqlfinderAdmin.php in Agora 1.4 RC1, when register_glob

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows Explorer - '.AVI' File Denial of Service

CVE-2007-0562—doswindows

Windows Explorer (explorer.exe) 6.0.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause

28RISCO

abrir ↗

Referência✓ VexDay Proof

phpEmployment - 'PHP Upload' Arbitrary File Upload

CVE-2008-6920—webappsphp

Unrestricted file upload vulnerability in auth.php in phpEmployment 1.8 allows remote attackers to execute arbitrary cod

23RISCO

abrir ↗

Referência✓ VexDay Proof

Maian Recipe 1.0 - 'path_to_folder' Remote File Inclusion

CVE-2007-0848—webappsphp

PHP remote file inclusion vulnerability in classes/class_mail.inc.php in Maian Recipe 1.0 allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Realtor 747 - 'index.php?categoryId' SQL Injection

CVE-2007-3810—webappsphp

SQL injection vulnerability in index.php in Realtor 747 allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin Photoracer 1.0 - 'id' SQL Injection

CVE-2009-2122—webappsphp

SQL injection vulnerability in viewimg.php in the Paolo Palmonari Photoracer plugin 1.0 for WordPress allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

eSyndiCat Directory Software - Multiple SQL Injections

CVE-2007-3811—webappsphp

Multiple SQL injection vulnerabilities in eSyndiCat allow remote attackers to execute arbitrary SQL commands via (1) the

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP JOBWEBSITE PRO - 'JobSearch3.php' SQL Injection

CVE-2008-2914—webappsphp

SQL injection vulnerability in jobseekers/JobSearch3.php (aka the search module) in PHP JOBWEBSITE PRO allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

WholeHogSoftware Password Protect - Authentication Bypass

CVE-2009-0459—webappsphp

Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Password Protect: Enhanced 1.x allow remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mx Module Smartor Album FAP 2.0 RC 1 - Remote File Inclusion

CVE-2007-2189—webappsphp

PHP remote file inclusion vulnerability in admin/admin_album_otf.php in the MX Smartor Full Album Pack (FAP) 2.0 RC1 mod

23RISCO

abrir ↗

Referência✓ VexDay Proof

FlashBB 1.1.8 - 'sendmsg.php' Remote File Inclusion

CVE-2007-3697—webappsphp

PHP remote file inclusion vulnerability in phpbb/sendmsg.php in FlashBB 1.1.8 and earlier allows remote attackers to exe

28RISCO

abrir ↗

Referência✓ VexDay Proof

WholeHogSoftware Password Protect - Insecure Cookie Handling

CVE-2009-0461—webappsphp

Whole Hog Password Protect: Enhanced 1.x allows remote attackers to bypass authentication and obtain administrative acce

23RISCO

abrir ↗

Referência✓ VexDay Proof

ClickCart 6.0 - Authentication Bypass

CVE-2009-0462—webappsphp

Multiple SQL injection vulnerabilities in customer_login_check.asp in ClickTech ClickCart 6.0 allow remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

PayProCart 1146078425 - Multiple Remote File Inclusions

CVE-2006-4672—webappsphp

PHP remote file inclusion vulnerability in profitCode ppalCart 2.5 EE, possibly a component of PayProCart, allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

E-Smart Cart - 'productsofcat.asp' SQL Injection

CVE-2008-2917—webappsasp

SQL injection vulnerability in productsofcat.asp in E-SMART CART allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

QK SMTP 3.01 - 'RCPT TO' Remote Denial of Service

CVE-2006-5551—doswindows

Stack-based buffer overflow in QK SMTP 3.01 and earlier might allow remote attackers to execute arbitrary code via a lon

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBLASTER CMS 1.0 RC1 - Multiple Local File Inclusions

CVE-2008-5171—webappsphp

Multiple directory traversal vulnerabilities in admin/minibb/index.php in phpBLASTER CMS 1.0 RC1, when register_globals

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ultimate PHP Board 2.0 - 'header_simple.php' File Inclusion

CVE-2006-7169—webappsphp

PHP remote file inclusion vulnerability in includes/header_simple.php in Ultimate PHP Board (UPB) 2.0 and earlier allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

KVIrc 3.4.2 Shiny - URI handler Remote Command Execution

CVE-2008-7070—remotewindows

Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary co

23RISCO

abrir ↗

Referência✓ VexDay Proof

groone's Guestbook 2.0 - Remote File Inclusion

CVE-2009-0464—webappsphp

PHP remote file inclusion vulnerability in includes/header.php in Groone GBook 2.0 allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Euphonics Audio Player 1.0 - '.pls' Local Buffer Overflow

CVE-2009-0476—localwindows

Stack-based buffer overflow in MultiMedia Soft AdjMmsEng.dll 7.11.1.0 and 7.11.2.7, as distributed in multiple MultiMedi

50RISCO

abrir ↗

Referência✓ VexDay Proof

Extcalendar 2 - 'profile.php' Remote User Pass Change

CVE-2007-0681—webappsphp

profile.php in ExtCalendar 2 and earlier allows remote attackers to change the passwords of arbitrary users without prov

23RISCO

abrir ↗

Referência✓ VexDay Proof

Euphonics Audio Player 1.0 - '.pls' Universal Local Buffer Overflow

CVE-2009-0476—localwindows

Stack-based buffer overflow in MultiMedia Soft AdjMmsEng.dll 7.11.1.0 and 7.11.2.7, as distributed in multiple MultiMedi

50RISCO

abrir ↗

Referência✓ VexDay Proof

study planner (studiewijzer) 0.15 - Remote File Inclusion

CVE-2007-1628—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Study planner (Studiewijzer) 0.15 and earlier, when register_globa

23RISCO

abrir ↗

Referência✓ VexDay Proof

Expert Advisior - 'index.php?id' SQL Injection

CVE-2007-3882—webappsphp

SQL injection vulnerability in index.php in Expert Advisor allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pluck CMS 4.5.3 - 'g_pcltar_lib_dir' Local File Inclusion

CVE-2008-6253—webappsphp

Directory traversal vulnerability in data/inc/lib/pcltar.lib.php in Pluck 4.5.3, when register_globals is enabled, allow

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.