Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.794exploits catalogados

36.057CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.459Referência 22.721GitHub PoC 14.946VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

PHPWebGallery 1.7.2 - Session Hijacking / Code Execution

CVE-2008-4645—webappsphp

plugins/event_tracer/event_list.php in PhpWebGallery 1.7.2 and earlier allows remote authenticated administrators to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Real Estate Manager 1.01 - 'cat_id' SQL Injection

CVE-2008-4674—webappsphp

SQL injection vulnerability in realestate-index.php in Conkurent Real Estate Manager 1.01 allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPcounter 1.3.2 - 'index.php' SQL Injection

CVE-2008-4675—webappsphp

SQL injection vulnerability in index.php in PHPcounter 1.3.2 and earlier allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

Wireshark 1.0.x - '.ncf' Packet Capture Local Denial of Service

CVE-2008-4682—dosmultiple

wtap.c in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service (application abort) via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mantis Bug Tracker 1.1.3 - Remote Code Execution

CVE-2008-4687—webappsphp

manage_proj_page.php in Mantis before 1.1.4 allows remote authenticated users to execute arbitrary code via a sort param

50RISCO

abrir ↗

Referência✓ VexDay Proof

Opera 9.60 - Persistent Cross-Site Scripting

CVE-2008-4696—remotewindows

Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary w

50RISCO

abrir ↗

Referência✓ VexDay Proof

Peachtree Accounting 2004 - 'PAWWeb11.ocx' ActiveX Insecure Method

CVE-2008-4699—remotewindows

Insecure method vulnerability in the ActiveX control (PAWWeb11.ocx) in Peachtree Accounting 2004 allows remote attackers

28RISCO

abrir ↗

Referência✓ VexDay Proof

Vbgooglemap Hotspot Edition 1.0.3 - SQL Injection

CVE-2008-4706—webappsphp

SQL injection vulnerability in VBGooglemap Hotspot Edition 1.0.3, a vBulletin module, allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pilot Group eTraining - 'news_read.php' SQL Injection

CVE-2008-4709—webappsphp

SQL injection vulnerability in news_read.php in Pilot Group (PG) eTraining allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joovili 3.0 - Multiple SQL Injections

CVE-2008-4711—webappsphp

SQL injection vulnerability in Joovili 3.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

212Cafe Board 0.07 - 'qID' SQL Injection

CVE-2008-4713—webappsphp

SQL injection vulnerability in view.php in 212cafe Board 0.07 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component JPad 1.0 - (Authenticated) SQL Injection

CVE-2008-4715—webappsphp

SQL injection vulnerability in the Jpad (com_jpad) 1.0 component for Joomla! allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Lance 1.52 - 'catid' SQL Injection

CVE-2008-4716—webappsphp

SQL injection vulnerability in show.php in BitmixSoft PHP-Lance 1.52 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Post Comments 3.0 - Insecure Cookie Handling

CVE-2008-4721—webappsphp

PHP Jabbers Post Comment 3.0 allows remote attackers to bypass authentication and gain administrative access by setting

23RISCO

abrir ↗

Referência✓ VexDay Proof

Opera 9.60 - Persistent Cross-Site Scripting

CVE-2008-4725—remotewindows

Cross-site scripting (XSS) vulnerability in Opera.dll in Opera 9.52 allows remote attackers to inject arbitrary web scri

23RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin WP Comment Remix 1.4.3 - SQL Injection

CVE-2008-4732—webappsphp

SQL injection vulnerability in ajax_comments.php in the WP Comment Remix plugin before 1.4.4 for WordPress allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

PlugSpace 0.1 - 'navi' Local File Inclusion

CVE-2008-4739—webappsphp

Directory traversal vulnerability in index.php in PlugSpace 0.1, when magic_quotes_gpc is disabled, allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

KVIrc 3.4.0 - Virgo Remote Format String (PoC)

CVE-2008-4748—doswindows

Format string vulnerability in the URI handler in KVirc 3.4.0, when set as the default application for processing IRC UR

23RISCO

abrir ↗

Referência✓ VexDay Proof

db Software Laboratory VImpX - 'VImpX.ocx' Multiple Vulnerabilities

CVE-2008-4749—remotewindows

Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control (VImpX.ocx) 4.8.8.0 in DB Software Laborato

23RISCO

abrir ↗

Referência✓ VexDay Proof

GNUBoard 4.31.03 (08.12.29) - Local File Inclusion

CVE-2009-0290—webappsphp

Directory traversal vulnerability in common.php in SIR GNUBoard 4.31.03 allows remote attackers to include and execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Wazzum Dating Software - 'userid' SQL Injection

CVE-2009-0293—webappsphp

SQL injection vulnerability in profile_view.php in Wazzum Dating Software, possibly 2.0, allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpdaily - SQL Injection / Cross-Site Scripting / Local File Download

CVE-2008-4758—webappsphp

Directory traversal vulnerability in download_file.php in PHP-Daily allows remote attackers to read arbitrary local file

23RISCO

abrir ↗

Referência✓ VexDay Proof

freeSSHd 1.2.1 - (Authenticated) SFTP 'realpath' Remote Buffer Overflow (PoC)

CVE-2008-4762—doswindows

Stack-based buffer overflow in freeSSHd 1.2.1 allows remote authenticated users to cause a denial of service (service cr

28RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_extplorer 2.0.0 RC2 - Local Directory Traversal

CVE-2008-4764—webappsphp

Directory traversal vulnerability in the eXtplorer module (com_extplorer) 2.0.0 RC2 and earlier in Joomla! allows remote

43RISCO

abrir ↗

Referência✓ VexDay Proof

QuestCMS - Cross-Site Scripting / Directory Traversal / SQL Injection

CVE-2008-4773—webappsphp

Directory traversal vulnerability in main/main.php in QuestCMS allows remote attackers to read arbitrary local files via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Dream4 Koobi Pro 6.25 Showimages - 'galid' SQL Injection

CVE-2008-4778—webappsphp

SQL injection vulnerability in the gallery module in Koobi CMS 4.3.0 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

TugZip 3.00 Archiver - '.zip' Local Buffer Overflow

CVE-2008-4779—localwindows

Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service (crash) or execute arbitrary

50RISCO

abrir ↗

Referência✓ VexDay Proof

e107 Plugin alternate_profiles - 'id' SQL Injection

CVE-2008-4785—webappsphp

SQL injection vulnerability in newuser.php in the alternate_profiles plugin, possibly 0.2, for e107 allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

e107 Plugin EasyShop - 'category_id' Blind SQL Injection

CVE-2008-4786—webappsphp

SQL injection vulnerability in easyshop.php in the EasyShop plugin for e107 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

ITLPoll 2.7 Stable2 - Blind SQL Injection

CVE-2009-0295—webappsphp

SQL injection vulnerability in index.php in Information Technology Light Poll Information (ITLPoll) 2.7 Stable 2, when m

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.