Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.305exploits catalogados

36.465CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8.883Nuclei 4.361Metasploit 3.493✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

syzygyCMS 0.3 - 'index.php' Local File Inclusion

CVE-2008-3593—webappsphp

Directory traversal vulnerability in index.php in SyzygyCMS 0.3 allows remote attackers to include and execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

AuraCMS 2.2 - Remote Add Administrator

CVE-2007-6552—webappsphp

Directory traversal vulnerability in index.php in AuraCMS 2.2 allows remote authenticated users to include and execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mini-CMS 1.0.1 - 'index.php' Local File Inclusion

CVE-2008-5593—webappsphp

Multiple directory traversal vulnerabilities in index.php in Mini CMS 1.0.1 allow remote attackers to include and execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

KTP Computer Customer Database CMS 1.0 - Local File Inclusion

CVE-2008-5953—webappsphp

Directory traversal vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc is disabled, all

23RISCO

abrir ↗

Referência✓ VexDay Proof

Absolute Form Processor XE-V 1.5 - Insecure Cookie Handling

CVE-2009-1504—webappsasp

Absolute Form Processor XE 1.5 allows remote attackers to bypass authentication and gain administrative access by settin

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bitweaver 2.6 - 'saveFeed()' Remote Code Execution

CVE-2009-1678—webappsphp

Directory traversal vulnerability in the saveFeed function in rss/feedcreator.class.php in Bitweaver 2.6 and earlier all

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apache Tomcat < 6.0.18 - 'utf8' Directory Traversal (PoC)

CVE-2008-2938—remotemultiple

Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16,

60RISCO

abrir ↗

Referência✓ VexDay Proof

Cahier de texte 2.2 - Bypass General Access Protection

CVE-2006-6849—webappsphp

administration/index.php in Cahier de texte (CDT) 2.2 does not properly exit when authentication fails, which allows rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

Shop-Script FREE 2.0 - Remote Command Execution

CVE-2007-4933—webappsphp

Direct static code injection vulnerability in includes/admin/sub/conf_appearence.php in Shop-Script FREE 2.0 and earlier

23RISCO

abrir ↗

Referência✓ VexDay Proof

iziContents rc6 - Local/Remote File Inclusion

CVE-2007-5055—webappsphp

Multiple directory traversal vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to include and exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

Flat PHP Board 1.2 - Multiple Vulnerabilities

CVE-2007-6396—webappsphp

Direct static code injection vulnerability in index.php in Flat PHP Board 1.2 and earlier allows remote attackers to inj

23RISCO

abrir ↗

Referência✓ VexDay Proof

X7 Chat 2.0.5 - 'day' SQL Injection

CVE-2008-0278—webappsphp

SQL injection vulnerability in index.php in X7 Chat 2.0.5 and possibly earlier allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyBlog: PHP and MySQL Blog/CMS software - SQL Injection / Cross-Site Scripting

CVE-2008-2962—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in MyBlog allow remote attackers to inject arbitrary web script or H

23RISCO

abrir ↗

Referência✓ VexDay Proof

Google Chrome 1.0.154.43 - Clickjacking

CVE-2009-0374—remotewindows

Google Chrome 1.0.154.43 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action th

23RISCO

abrir ↗

Referência✓ VexDay Proof

snetworks PHP Classifieds 5.0 - Remote File Inclusion

CVE-2008-0137—webappsphp

PHP remote file inclusion vulnerability in config.inc.php in SNETWORKS PHP CLASSIFIEDS 5.0 allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

WWWISIS 7.1 - 'IsisScript' Local File Disclosure / Cross-Site Scripting

CVE-2007-5455—webappscgi

Cross-site scripting (XSS) vulnerability in wxis.exe in WWWISIS 7.1 and earlier allows remote attackers to inject arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pixie CMS - Cross-Site Scripting / SQL Injection

CVE-2009-1066—webappsphp

SQL injection vulnerability in the referral function in admin/lib/lib_logs.php in Pixie CMS 1.01a allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simplog 0.9.2 - 's' Remote Command Execution

CVE-2006-1779—webappsphp

Cross-site scripting (XSS) vulnerability in login.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Flash Uploader 2.5.1 - Remote File Inclusion

CVE-2007-5457—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Michael Dempfle Joomla Flash Uploader (com_jfu or com_joomla_flash

35RISCO

abrir ↗

Referência✓ VexDay Proof

KwsPHP 1.0 Module Newsletter - SQL Injection

CVE-2007-5458—webappsphp

SQL injection vulnerability in index.php in the newsletter module 1.0 for KwsPHP, when magic_quotes_gpc is disabled, all

23RISCO

abrir ↗

Referência✓ VexDay Proof

Contenido 4.8.4 - Remote File Inclusion / Cross-Site Scripting

CVE-2008-2912—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Contenido CMS 4.8.4 allow remote attackers to execute arbitrary PH

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Multiple Newsletters 2.7 - Local File Inclusion / Cross-Site Scripting

CVE-2008-5570—webappsphp

Directory traversal vulnerability in index.php in PHP Multiple Newsletters 2.7, when magic_quotes_gpc is disabled, allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apache Tomcat - 'WebDAV' Remote File Disclosure

CVE-2007-5461—remotemultiple

Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.

35RISCO

abrir ↗

Referência✓ VexDay Proof

Mafia Scum Tools 2.0.0 - 'index.php?gen' Remote File Inclusion

CVE-2007-0501—webappsphp

PHP remote file inclusion vulnerability in index.php in Mafia Scum Tools 2.0.0 in Matthew Wardrop Advanced Random Genera

23RISCO

abrir ↗

Referência✓ VexDay Proof

GNU/Gallery 1.1.1.0 - 'admin.php' Local File Inclusion

CVE-2008-2353—webappsphp

Directory traversal vulnerability in admin.php in GNU/Gallery 1.1.1.0 and earlier allows remote attackers to include and

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP 4.4.6 - 'ibase_connect()' Local Buffer Overflow

CVE-2007-1475—localwindows

Multiple buffer overflows in the (1) ibase_connect and (2) ibase_pconnect functions in the interbase extension in PHP 4.

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyBlog: PHP and MySQL Blog/CMS software - SQL Injection / Cross-Site Scripting

CVE-2008-2963—webappsphp

Multiple SQL injection vulnerabilities in MyBlog allow remote attackers to execute arbitrary SQL commands via the (1) vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Integramod Nederland 1.4.2 - Remote File Inclusion

CVE-2007-5140—webappsphp

PHP remote file inclusion vulnerability in includes/archive/archive_topic.php in IntegraMOD Nederland 1.4.2 allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

K-Lite Mega Codec Pack 3.5.7.0 - Local Windows Explorer Denial of Service (PoC)

CVE-2008-5072—doswindows

vsfilter.dll in K-Lite Mega Codec Pack 3.5.7.0 allows remote attackers to cause a denial of service (application crash)

23RISCO

abrir ↗

Referência✓ VexDay Proof

teatro 1.6 - 'basePath' Remote File Inclusion

CVE-2007-5780—webappsphp

PHP remote file inclusion vulnerability in pub/pub08_comments.php in teatro 1.6 allows remote attackers to execute arbit

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.