Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.305exploits catalogados

36.465CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8.883Nuclei 4.361Metasploit 3.493✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

X7 Chat 2.0.5 - Authentication Bypass

CVE-2008-6964—webappsphp

SQL injection vulnerability in the login page in X7 Chat 2.0.5 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Links Directory 1.1 - 'cat_id' SQL Injection

CVE-2008-1871—webappsphp

SQL injection vulnerability in links.php in Scriptsagent.com Links Directory 1.1 allows remote authenticated users to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

aspwebalbum 3.2 - Multiple Vulnerabilities

CVE-2008-6978—webappsasp

Unrestricted file upload vulnerability in Full Revolution aspWebAlbum 3.2 allows remote attackers to execute arbitrary c

23RISCO

abrir ↗

Referência✓ VexDay Proof

aspwebalbum 3.2 - Arbitrary File Upload / SQL Injection / Cross-Site Scripting

CVE-2008-6978—webappsphp

Unrestricted file upload vulnerability in Full Revolution aspWebAlbum 3.2 allows remote attackers to execute arbitrary c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Google Chrome 0.2.149.27 - 'SaveAs' Remote Buffer Overflow

CVE-2008-6994—remotewindows

Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.14

28RISCO

abrir ↗

Referência✓ VexDay Proof

Google Chrome 0.2.149.27 - Automatic File Download

CVE-2008-6996—remotewindows

Google Chrome BETA (0.2.149.27) does not prompt the user before saving an executable file, which makes it easier for rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

KnowledgeQuest 2.5 - Arbitrary Add Admin

CVE-2008-1727—webappsphp

KnowledgeQuest 2.5 and 2.6 does not require authentication for access to admincheck.php, which allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Google Chrome - Carriage Return Null Object Memory Exhaustion

CVE-2008-4340—doswindows

Google Chrome 0.2.149.29 and 0.2.149.30 allows remote attackers to cause a denial of service (memory consumption) via an

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBBViet 02.03.2007 - 'phpbb_root_path' Remote File Inclusion

CVE-2007-6088—webappsphp

PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBBViet 02.03.07 and earlier allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

VideoScript 4.0.1.50 - Change Admin Password

CVE-2008-5219—webappsphp

The password change feature (admin/cp.php) in VideoScript 4.0.1.50 and earlier does not check for administrative authent

23RISCO

abrir ↗

Referência✓ VexDay Proof

falcon CMS 1.4.3 - Remote File Inclusion / Cross-Site Scripting

CVE-2007-6489—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in Falcon Series One CMS 1.4.3 allow remote attackers to inject arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

The Rat CMS Alpha 2 - Authentication Bypass

CVE-2008-7003—webappsphp

Multiple SQL injection vulnerabilities in login.php in The Rat CMS Alpha 2 allow remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

PassWiki 0.9.16 RC3 - 'site_id' Local File Inclusion

CVE-2008-6423—webappsphp

Directory traversal vulnerability in passwiki.php in PassWiki 0.9.16 RC3 and earlier allows remote attackers to read arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

SkaLinks 1.5 - 'register.php' Arbitrary Add Editor

CVE-2008-7010—webappsphp

Skalfa Software SkaLinks Exchange Script 1.5 allows remote attackers to add new administrators and gain privileges via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Photo Gallery 1.0 - 'photo_id' SQL Injection

CVE-2008-1875—webappsphp

SQL injection vulnerability in index.php in Terong PHP Photo Gallery (aka Advanced Web Photo Gallery) 1.0 allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebED 0.0.9 - 'index.php' Remote File Disclosure

CVE-2007-6213—webappsphp

Multiple directory traversal vulnerabilities in mod/chat/index.php in WebED 0.0.9 allow remote attackers to read arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

Esqlanelapse Software Project 2.6.2 - Insecure Cookie Handling

CVE-2008-7019—webappsphp

Esqlanelapse 2.6.1 and 2.6.2 allows remote attackers to bypass authentication and gain privileges via modified (1) enomb

23RISCO

abrir ↗

Referência✓ VexDay Proof

Chilkat IMAP ActiveX 7.9 - File Execution / Denial of Service

CVE-2008-7022—remotewindows

Insecure method vulnerability in ChilkatMail_v7_9.dll in the Chilkat Software IMAP ActiveX control (ChilkatMail2.Chilkat

23RISCO

abrir ↗

Referência✓ VexDay Proof

visualpic 0.3.1 - Remote File Inclusion

CVE-2008-1876—webappsphp

PHP remote file inclusion vulnerability in index.php in VisualPic 0.3.1 allows remote attackers to execute arbitrary PHP

28RISCO

abrir ↗

Referência✓ VexDay Proof

FreshView 7.15 - '.psp' Local Buffer Overflow

CVE-2007-2283—localwindows

Buffer overflow in Fresh View 7.15 allows user-assisted remote attackers to execute arbitrary code via a crafted .PSP fi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Autodesk DWF Viewer Control / LiveUpdate Module - Remote Code Execution

CVE-2008-4471—remotewindows

Directory traversal vulnerability in the CExpressViewerControl class in the DWF Viewer ActiveX control (AdView.dll 9.0.0

23RISCO

abrir ↗

Referência✓ VexDay Proof

TalkBack 2.2.7 - Multiple Remote File Inclusions

CVE-2007-6105—webappsphp

Multiple PHP remote file inclusion vulnerabilities in TalkBack 2.2.7 allow remote attackers to execute arbitrary PHP cod

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joovili 3.0.6 - 'joovili.images.php' Remote File Disclosure

CVE-2007-6620—webappsphp

Directory traversal vulnerability in include/images.inc.php in Joovili 2.x allows remote attackers to read arbitrary fil

23RISCO

abrir ↗

Referência✓ VexDay Proof

mini-pub 0.3 - File Disclosure / Code Execution

CVE-2008-5580—webappsphp

mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to execute arbitrary commands via shell metachara

23RISCO

abrir ↗

Referência✓ VexDay Proof

The Gemini Portal 4.7 - Insecure Cookie Handling

CVE-2008-7024—webappsphp

admin.php in Arz Development The Gemini Portal 4.7 and earlier allows remote attackers to bypass authentication and gain

23RISCO

abrir ↗

Referência✓ VexDay Proof

eFront 3.5.1 / build 2710 - Arbitrary File Upload

CVE-2008-7026—webappsphp

Unrestricted file upload vulnerability in filesystem3.class.php in eFront 3.5.1 build 2710 and earlier allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

RPG.Board 0.0.8Beta2 - Insecure Cookie Handling

CVE-2008-7028—webappsphp

RPG.Board 0.8 Beta2 and earlier allows remote attackers to bypass authentication and gain privileges by setting the keep

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! / Mambo Component Taskhopper 1.1 - Remote File Inclusion

CVE-2007-2005—webappsphp

Multiple PHP remote file inclusion vulnerabilities in the Taskhopper 1.1 component for Mambo and Joomla! allow remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpAtm 1.30 - 'downloadfile' Remote File Disclosure

CVE-2007-2659—webappsphp

Directory traversal vulnerability in index.php in PHP Advanced Transfer Manager (phpATM) 1.30 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

EVA-Web 1.1 < 2.2 - 'index.php3' Remote File Inclusion

CVE-2007-3460—webappsphp

Multiple PHP remote file inclusion vulnerabilities in index.php3 in EVA-Web 1.1 through 2.2 allow remote attackers to ex

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.