Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.305exploits catalogados

36.465CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8.883Nuclei 4.361Metasploit 3.493✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Enthrallweb eCars 1.0 - 'types.asp' SQL Injection

CVE-2006-6803—webappsasp

SQL injection vulnerability in Types.asp in Enthrallweb eCars 1.0 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

Dragon Business Directory 3.01.12 - 'ID' SQL Injection

CVE-2006-6804—webappsasp

SQL injection vulnerability in bus_details.asp in Dragon Business Directory - Pro (aka Dragon Internet Business Search D

23RISCO

abrir ↗

Referência✓ VexDay Proof

Enthrallweb eJobs - 'newsdetail.asp' SQL Injection

CVE-2006-6805—webappsasp

SQL injection vulnerability in newsdetail.asp in Enthrallweb eJobs allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ananda Real Estate 3.4 - 'agent' SQL Injection

CVE-2006-6807—webappsasp

SQL injection vulnerability in list.asp in Softwebs Nepal (aka Ananda Raj Pandey) Ananda Real Estate 3.4 and earlier all

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bubla 1.0.0rc2 - '/bu/process.php' Remote File Inclusion

CVE-2006-6809—webappsphp

Multiple PHP remote file inclusion vulnerabilities in process.php in Vladimir Menshakov buratinable templator (aka bubla

23RISCO

abrir ↗

Referência✓ VexDay Proof

Nitrotech 0.0.3a - Remote Code Execution

CVE-2006-6938—webappsphp

Directory traversal vulnerability in includes/common.php in NitroTech 0.0.3a, as distributed before 2006, allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

FreeWebShop.org script 2.2.2 - Multiple Vulnerabilities

CVE-2006-6941—webappsphp

index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to obtain sensitive information via an invalid action

23RISCO

abrir ↗

Referência✓ VexDay Proof

SCart 2.0 - 'page' Remote Code Execution

CVE-2006-7012—webappsphp

scart.cgi in SCart 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the page parame

23RISCO

abrir ↗

Referência✓ VexDay Proof

FlashBB 1.1.8 - 'phpbb_root_path' Remote File Inclusion

CVE-2006-7032—webappsphp

PHP remote file inclusion vulnerability in phpbb/getmsg.php in FlashBB 1.1.5 and earlier allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

TinyPHP Forum 3.6 - 'profile.php' Remote Code Execution

CVE-2006-7063—webappsphp

Directory traversal vulnerability in profile.php in TinyPHPforum 3.6 and earlier allows remote attackers to include and

23RISCO

abrir ↗

Referência✓ VexDay Proof

exV2 < 2.0.4.3 - 'extract()' Remote Command Execution

CVE-2006-7080—webappsphp

Directory traversal vulnerability in the avatar upload feature in exV2 2.0.4.3 and earlier allows remote attackers to de

23RISCO

abrir ↗

Referência✓ VexDay Proof

PhpNews 1.0 - 'Include' Remote File Inclusion

CVE-2006-7081—webappsphp

Multiple PHP remote file inclusion vulnerabilities in PhpNews 1.0 allow remote attackers to execute arbitrary PHP code v

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPWind 5.0.1 - 'AdminUser' Blind SQL Injection

CVE-2006-7101—webappsphp

SQL injection vulnerability in admin.php in PHPWind 5.0.1 and earlier allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Power Phlogger 2.0.9 - 'config.inc.php3' File Inclusion

CVE-2006-7106—webappsphp

PHP remote file inclusion vulnerability in config.inc.php3 in Power Phlogger 2.0.9 and earlier allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

FreePBX 2.1.3 - 'upgrade.php' Remote File Inclusion

CVE-2006-7107—webappsphp

PHP remote file inclusion vulnerability in upgrade.php in Coalescent Systems freePBX 2.1.3 allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

MDPro 1.0.76 - 'Cookie PNSVlang' Local File Inclusion

CVE-2006-7112—webappsphp

Directory traversal vulnerability in error.php in MD-Pro 1.0.76 and earlier allows remote authenticated users to read an

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPGiggle 12.08 - 'CFG_PHPGIGGLE_ROOT' File Inclusion

CVE-2006-7119—webappsphp

PHP remote file inclusion vulnerability in kernel/system/startup.php in J. He PHPGiggle 12.08 and earlier, as distribute

23RISCO

abrir ↗

Referência✓ VexDay Proof

JAF CMS 4.0 RC2 - Multiple Remote File Inclusions

CVE-2006-7127—webappsphp

Multiple PHP remote file inclusion vulnerabilities in JAF CMS 4.0 and 4.0 RC2 allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

JAF CMS 4.0 RC1 - 'forum.php' Remote File Inclusion

CVE-2006-7128—webappsphp

PHP remote file inclusion vulnerability in forum/forum.php JAF CMS 4.0 RC1 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Jinzora 2.6 - '/extras/mt.php' Remote File Inclusion

CVE-2006-7131—webappsphp

PHP remote file inclusion vulnerability in extras/mt.php in Jinzora 2.6 allows remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpPC 1.04 - Multiple Remote File Inclusions

CVE-2006-7136—webappsphp

Multiple PHP remote file inclusion vulnerabilities in PHP Poll Creator (phpPC) 1.04 and earlier allow remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Stats 0.1.9.1b - 'PC-REMOTE-ADDR' SQL Injection

CVE-2006-7172—webappsphp

Multiple SQL injection vulnerabilities in php-stats.recphp.php in PHP-Stats 0.1.9.1b and earlier allow remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component com_forum 1.2.4RC3 - Remote File Inclusion

CVE-2006-7208—webappsphp

PHP remote file inclusion vulnerability in download.php in the Adam van Dongen Forum (com_forum) component (aka phpBB co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows - '.png' IHDR Block Denial of Service (PoC) (1)

CVE-2006-7210—doswindows

Microsoft Windows 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (cpu consumption) via a

28RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows - '.png' IHDR Block Denial of Service (PoC) (2)

CVE-2006-7210—doswindows

Microsoft Windows 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (cpu consumption) via a

28RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows - '.png' IHDR Block Denial of Service (PoC) (3)

CVE-2006-7210—doswindows

Microsoft Windows 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (cpu consumption) via a

28RISCO

abrir ↗

Referência✓ VexDay Proof

Apple QuickTime - 'rtsp URL Handler' Remote Stack Buffer Overflow

CVE-2007-0015—remotemultiple

Buffer overflow in Apple QuickTime 7.1.3 allows remote attackers to execute arbitrary code via a long rtsp:// URI.

50RISCO

abrir ↗

Referência✓ VexDay Proof

AllMyLinks 0.5.0 - 'index.php' Remote File Inclusion

CVE-2007-0171—webappsphp

PHP remote file inclusion vulnerability in index.php in AllMyLinks 0.5.0 and earlier allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

MOTIONBORG Web Real Estate 2.1 - SQL Injection

CVE-2007-0196—webappsasp

SQL injection vulnerability in admin_check_user.asp in Motionborg Web Real Estate 2.1 and earlier allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

uniForum 4 - 'wbsearch.aspx' SQL Injection

CVE-2007-0226—webappsphp

SQL injection vulnerability in wbsearch.aspx in uniForum 4 and earlier allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.