Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.305exploits catalogados
36.465CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8.883Nuclei 4.361Metasploit 3.493✓ só verificadosrecentespopularesrisco
5.629 exploits
Referência✓ VexDay Proof
Microsoft Windows Explorer - '.AVI' File Denial of Service
CVE-2007-0562—doswindows
Windows Explorer (explorer.exe) 6.0.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause
28RISCO
abrir ↗
Referência✓ VexDay Proof
phpEmployment - 'PHP Upload' Arbitrary File Upload
CVE-2008-6920—webappsphp
Unrestricted file upload vulnerability in auth.php in phpEmployment 1.8 allows remote attackers to execute arbitrary cod
23RISCO
abrir ↗
Referência✓ VexDay Proof
Maian Recipe 1.0 - 'path_to_folder' Remote File Inclusion
CVE-2007-0848—webappsphp
PHP remote file inclusion vulnerability in classes/class_mail.inc.php in Maian Recipe 1.0 allows remote attackers to exe
23RISCO
abrir ↗
Referência✓ VexDay Proof
Realtor 747 - 'index.php?categoryId' SQL Injection
CVE-2007-3810—webappsphp
SQL injection vulnerability in index.php in Realtor 747 allows remote attackers to execute arbitrary SQL commands via th
23RISCO
abrir ↗
Referência✓ VexDay Proof
WordPress Plugin Photoracer 1.0 - 'id' SQL Injection
CVE-2009-2122—webappsphp
SQL injection vulnerability in viewimg.php in the Paolo Palmonari Photoracer plugin 1.0 for WordPress allows remote atta
23RISCO
abrir ↗
Referência✓ VexDay Proof
eSyndiCat Directory Software - Multiple SQL Injections
CVE-2007-3811—webappsphp
Multiple SQL injection vulnerabilities in eSyndiCat allow remote attackers to execute arbitrary SQL commands via (1) the
23RISCO
abrir ↗
Referência✓ VexDay Proof
PHP JOBWEBSITE PRO - 'JobSearch3.php' SQL Injection
CVE-2008-2914—webappsphp
SQL injection vulnerability in jobseekers/JobSearch3.php (aka the search module) in PHP JOBWEBSITE PRO allows remote att
23RISCO
abrir ↗
Referência✓ VexDay Proof
WholeHogSoftware Password Protect - Authentication Bypass
CVE-2009-0459—webappsphp
Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Password Protect: Enhanced 1.x allow remot
23RISCO
abrir ↗
Referência✓ VexDay Proof
Mx Module Smartor Album FAP 2.0 RC 1 - Remote File Inclusion
CVE-2007-2189—webappsphp
PHP remote file inclusion vulnerability in admin/admin_album_otf.php in the MX Smartor Full Album Pack (FAP) 2.0 RC1 mod
23RISCO
abrir ↗
Referência✓ VexDay Proof
FlashBB 1.1.8 - 'sendmsg.php' Remote File Inclusion
CVE-2007-3697—webappsphp
PHP remote file inclusion vulnerability in phpbb/sendmsg.php in FlashBB 1.1.8 and earlier allows remote attackers to exe
28RISCO
abrir ↗
Referência✓ VexDay Proof
WholeHogSoftware Password Protect - Insecure Cookie Handling
CVE-2009-0461—webappsphp
Whole Hog Password Protect: Enhanced 1.x allows remote attackers to bypass authentication and obtain administrative acce
23RISCO
abrir ↗
Referência✓ VexDay Proof
ClickCart 6.0 - Authentication Bypass
CVE-2009-0462—webappsphp
Multiple SQL injection vulnerabilities in customer_login_check.asp in ClickTech ClickCart 6.0 allow remote attackers to
23RISCO
abrir ↗
Referência✓ VexDay Proof
Axiom Photo/News Gallery 0.8.6 - Remote File Inclusion
CVE-2007-0200—webappsphp
PHP remote file inclusion vulnerability in template.php in Geoffrey Golliher Axiom Photo/News Gallery (axiompng) 0.8.6 a
23RISCO
abrir ↗
Referência✓ VexDay Proof
GLLCTS2 - 'sort' Blind SQL Injection
CVE-2008-2919—webappsphp
SQL injection vulnerability in listing.php in Gryphon gllcTS2 4.2.4 allows remote attackers to execute arbitrary SQL com
23RISCO
abrir ↗
Referência✓ VexDay Proof
Profense Web Application Firewall 2.6.2 - Cross-Site Request Forgery / Cross-Site Scripting
CVE-2009-0468—remotewindows
Multiple cross-site request forgery (CSRF) vulnerabilities in ajax.html in Profense Web Application Firewall 2.6.2 and 2
23RISCO
abrir ↗
Referência✓ VexDay Proof
AgerMenu 0.01 - 'top.inc.php?rootdir' Remote File Inclusion
CVE-2007-0837—webappsphp
PHP remote file inclusion vulnerability in examples/inc/top.inc.php in AgerMenu 0.03 and earlier allows remote attackers
23RISCO
abrir ↗
Referência✓ VexDay Proof
NUNE News Script 2.0pre2 - Multiple Remote File Inclusions
CVE-2007-0143—webappsphp
Multiple PHP remote file inclusion vulnerabilities in NUNE News Script 2.0pre2 allow remote attackers to execute arbitra
23RISCO
abrir ↗
Referência✓ VexDay Proof
minb 0.1.0 - Remote Code Execution
CVE-2008-7005—webappsphp
include/modules/top/1-random_quote.php in Minb Is Not a Blog (minb) 0.1.0 allows remote attackers to execute arbitrary P
23RISCO
abrir ↗
Referência✓ VexDay Proof
eFiction 3.1.1 - 'path_to_smf' Remote File Inclusion
CVE-2007-1118—webappsphp
Multiple PHP remote file inclusion vulnerabilities in eFiction 3.1.1 and earlier allow remote attackers to execute arbit
23RISCO
abrir ↗
Referência✓ VexDay Proof
Expert Advisior - 'index.php?id' SQL Injection
CVE-2007-3882—webappsphp
SQL injection vulnerability in index.php in Expert Advisor allows remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗
Referência✓ VexDay Proof
Pluck CMS 4.5.3 - 'g_pcltar_lib_dir' Local File Inclusion
CVE-2008-6253—webappsphp
Directory traversal vulnerability in data/inc/lib/pcltar.lib.php in Pluck 4.5.3, when register_globals is enabled, allow
23RISCO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component Portfol 1.2 - 'vcatid' SQL Injection
CVE-2009-0494—webappsphp
SQL injection vulnerability in the Portfol (com_portfol) 1.2 component for Joomla! allows remote attackers to execute ar
23RISCO
abrir ↗
Referência✓ VexDay Proof
OllyDBG 1.10 and ImpREC 1.7f - Export Name Buffer Overflow
CVE-2008-3148—localwindows
Stack-based buffer overflow in (1) OllyDBG 1.10 and (2) ImpREC 1.7f allows user-assisted attackers to execute arbitrary
23RISCO
abrir ↗
Referência✓ VexDay Proof
PHP-revista 1.1.2 - Remote File Inclusion / SQL Injection / Authentication Bypass / Cross-Site Scripting
CVE-2006-4608—webappsphp
Multiple cross-site scripting (XSS) vulnerabilities in Longino Jacome php-Revista 1.1.2 allow remote attackers to inject
23RISCO
abrir ↗
Referência✓ VexDay Proof
CMSmelborp Beta - 'user_standard.php' Remote File Inclusion
CVE-2006-7185—webappsphp
PHP remote file inclusion vulnerability in includes/user_standard.php in CMSmelborp Beta allows remote attackers to exec
23RISCO
abrir ↗
Referência✓ VexDay Proof
FlashGameScript 1.5.4 - 'index.php?func' Remote File Inclusion
CVE-2007-1078—webappsphp
PHP remote file inclusion vulnerability in index.php in FlashGameScript 1.5.4 allows remote attackers to execute arbitra
23RISCO
abrir ↗
Referência✓ VexDay Proof
WebXell Editor 0.1.3 - Arbitrary File Upload
CVE-2008-3178—webappsphp
Unrestricted file upload vulnerability in upload_pictures.php in WebXell Editor 0.1.3 allows remote attackers to execute
23RISCO
abrir ↗
Referência✓ VexDay Proof
CafeEngine - 'catid' SQL Injection
CVE-2009-0574—webappsphp
SQL injection vulnerability in index.php in Easy CafeEngine allows remote attackers to execute arbitrary SQL commands vi
23RISCO
abrir ↗
Referência✓ VexDay Proof
Winamp 5.21 - '.Midi' File Header Handling Buffer Overflow (PoC)
CVE-2006-3228—doswindows
Buffer overflow in in_midi.dll for WinAmp 2.90 up to 5.23, including 5.21, allows remote attackers to execute arbitrary
28RISCO
abrir ↗
Referência✓ VexDay Proof
PHP 5.x COM - Safe Mode / disable_functions Bypass
CVE-2007-5653—localwindows
The Component Object Model (COM) functions in PHP 5.x on Windows do not follow safe_mode and disable_functions restricti
23RISCO
abrir ↗
← anteriorpágina 150 / 188próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.