Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.305exploits catalogados

36.465CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8.883Nuclei 4.361Metasploit 3.493✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

MiniBill 20061010 - 'menu_builder.php' File Inclusion

CVE-2006-5620—webappsphp

PHP remote file inclusion vulnerability in include/menu_builder.php in MiniBILL 2006-10-10 (1.2.3) and earlier, when reg

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Upload Center 2.0 - 'activate.php' File Inclusion

CVE-2006-6360—webappsphp

PHP remote file inclusion vulnerability in activate.php in PHP Upload Center 2.0 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Zomplog 3.8.1 - Arbitrary File Upload

CVE-2007-5278—webappsphp

Zomplog 3.8.1 and earlier stores potentially sensitive information under the web root with insufficient access control,

23RISCO

abrir ↗

Referência✓ VexDay Proof

FlashChat 4.5.7 - 'aedating4CMS.php' Remote File Inclusion

CVE-2006-4583—webappsphp

Multiple PHP remote file inclusion vulnerabilities in FlashChat before 4.6.2 allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Orbit Downloader 2.8.7 - Arbitrary File Deletion

CVE-2009-1064—remotewindows

Argument injection vulnerability in orbitmxt.dll 2.1.0.2 in the Orbit Downloader 2.8.7 and earlier ActiveX control allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

R2K Gallery 1.7 - 'galeria.php?lang2' Local File Inclusion

CVE-2007-2642—webappsphp

Directory traversal vulnerability in galeria.php in R2K Gallery 1.7 allows remote attackers to read arbitrary files via

23RISCO

abrir ↗

Referência✓ VexDay Proof

@lex Guestbook 4.0.2 - Remote Command Execution

CVE-2007-0202—webappsphp

SQL injection vulnerability in index.php in @lex Guestbook 4.0.2 and earlier, when magic_quotes_gpc is disabled, allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

Acidcat CMS 3.4.1 - Multiple Vulnerabilities

CVE-2008-1993—webappsphp

Acidcat CMS 3.4.1 does not restrict access to the FCKEditor component, which allows remote attackers to upload arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Google Chrome 0.2.149.27 - Inspect Element Denial of Service

CVE-2008-6997—doswindows

Google Chrome 0.2.149.27 allows user-assisted remote attackers to cause a denial of service (browser crash) via an IMG t

23RISCO

abrir ↗

Referência✓ VexDay Proof

EDraw Flowchart ActiveX Control 2.0 - Insecure Method

CVE-2007-5826—remotewindows

Absolute path traversal vulnerability in the EDraw Flowchart ActiveX control in EDImage.ocx 2.0.2005.1104 allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

bloofox 0.3 - SQL Injection / File Disclosure

CVE-2008-0427—webappsphp

Directory traversal vulnerability in file.php in bloofoxCMS 0.3 allows remote attackers to read arbitrary files via a ..

23RISCO

abrir ↗

Referência✓ VexDay Proof

AJ HYIP ACME - 'topic_detail.php' SQL Injection

CVE-2008-2532—webappsphp

SQL injection vulnerability in forum/topic_detail.php in AJ Square aj-hyip (aka AJ HYIP Acme) allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Phoenix View CMS Pre Alpha2 - SQL Injection / Local File Inclusion / Cross-Site Scripting

CVE-2008-2533—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

openPHPNuke 2.3.3 - Remote File Inclusion

CVE-2006-2137—webappsphp

PHP remote file inclusion vulnerability in master.php in OpenPHPNuke and 2.3.3 earlier allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

Synactis All_IN_THE_BOX ActiveX 3.0 - Null Byte File Overwrite

CVE-2009-0465—remotewindows

The SaveDoc method in the All_In_The_Box.AllBox ActiveX control in ALL_IN_THE_BOX.OCX in Synactis ALL In-The-Box ActiveX

23RISCO

abrir ↗

Referência✓ VexDay Proof

DynamicPAD 1.02.18 - 'HomeDir' Remote File Inclusion

CVE-2007-2527—webappsphp

Multiple PHP remote file inclusion vulnerabilities in DynamicPAD before 1.03.31 allow remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

TinyFTPD 1.4 - 'USER' Remote Buffer Overflow (Denial of Service) (PoC)

CVE-2006-7007—doswindows

Buffer overflow in Tiny FTPd 1.4 and earlier allows remote attackers to cause a denial of service (daemon crash) via a l

23RISCO

abrir ↗

Referência✓ VexDay Proof

HispaH Model Search - 'cat.php?cat' SQL Injection

CVE-2008-2537—webappsphp

SQL injection vulnerability in cat.php in HispaH Model Search allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Battle Blog 1.25 - 'uploadform.asp' Arbitrary File Upload

CVE-2009-1609—webappsphp

Unrestricted file upload vulnerability in admin/uploadform.asp in Battle Blog 1.25 allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

XCMS 1.82 - Local/Remote File Inclusion

CVE-2007-6604—webappsphp

Multiple directory traversal vulnerabilities in index.php in XCMS 1.82 and earlier allow remote attackers to read arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpEventMan 1.0.2 - 'level' Remote File Inclusion

CVE-2007-0702—webappsphp

Multiple PHP remote file inclusion vulnerabilities in phpEventMan 1.0.2 allow remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência✓ VexDay Proof

PhpHostBot 1.06 - 'svr_rootscript' Remote File Inclusion

CVE-2007-4231—webappsphp

PHP remote file inclusion vulnerability in order/login.php in IDevSpot PhpHostBot 1.06 and earlier allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

e107 module 123 flash chat 6.8.0 - Remote File Inclusion

CVE-2008-1989—webappsphp

PHP remote file inclusion vulnerability in 123flashchat.php in the 123 Flash Chat 6.8.0 module for e107, when register_g

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Jotloader 1.2.1.a - Blind SQL Injection

CVE-2008-2564—webappsphp

SQL injection vulnerability in the JotLoader (com_jotloader) component 1.2.1.a and earlier for Joomla! allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

FlashBlog - 'articulo_id' SQL Injection

CVE-2008-2572—webappsphp

SQL injection vulnerability in php/leer_comentarios.php in FlashBlog allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

ISPworker 1.21 - 'download.php' Remote File Disclosure

CVE-2007-5813—webappsphp

Multiple directory traversal vulnerabilities in download.php in ISPworker 1.21 allow remote attackers to read arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component acctexp 0.12.x - Blind SQL Injection

CVE-2008-2632—webappsphp

SQL injection vulnerability in the acctexp (com_acctexp) component 0.12.x and earlier for Joomla! allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pre News Manager 1.0 - 'id' SQL Injection

CVE-2006-2763—webappsphp

SQL injection vulnerability in Pre News Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the (1

23RISCO

abrir ↗

Referência✓ VexDay Proof

SAPID 1.2.3.05 - 'ROOT_PATH' Remote File Inclusion

CVE-2006-4026—webappsphp

PHP remote file inclusion vulnerability in SAPID CMS 123 rc3 allows remote attackers to execute arbitrary PHP code via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpCMS 1.2.2 - 'file' Remote File Disclosure

CVE-2008-0513—webappsphp

Directory traversal vulnerability in parser/include/class.cache_phpcms.php in phpCMS 1.2.2 allows remote attackers to re

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.