Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.305exploits catalogados

36.465CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8.883Nuclei 4.361Metasploit 3.493✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

WEBInsta MM 1.3e - 'cabsolute_path' Remote File Inclusion

CVE-2006-4209—webappsphp

PHP remote file inclusion vulnerability in install3.php in WEBInsta Mailing List Manager 1.3e allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Thatware 0.4.6 - 'ROOT_PATH' Remote File Inclusion

CVE-2006-4213—webappsphp

PHP remote file inclusion vulnerability in config.php in David Kent Norman Thatware 0.4.6 and possibly earlier allows re

23RISCO

abrir ↗

Referência✓ VexDay Proof

Wikepage Opus 10 < 2006.2a (lng) - Remote Command Execution

CVE-2006-4418—webappsphp

Directory traversal vulnerability in index.php for Wikepage 2006.2a Opus 10 allows remote attackers to include arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

ProManager 0.73 - 'note.php' SQL Injection

CVE-2006-4419—webappsphp

SQL injection vulnerability in note.php in ProManager 0.73 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

JiRos FAQ Manager 1.0 - 'index.asp' SQL Injection

CVE-2006-6149—webappsphp

SQL injection vulnerability in index.asp in JiRos FAQ Manager 1.0 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

Liberum Help Desk 0.97.3 - SQL Injection

CVE-2006-6160—webappsasp

SQL injection vulnerability in details.asp in Doug Luxem Liberum Help Desk 0.97.3 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component 'com_akogallery' 2.5b - SQL Injection

CVE-2008-0561—webappsphp

SQL injection vulnerability in index.php in the Arthur Konze AkoGallery (com_akogallery) 2.5 beta component for Mambo an

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sejoong Namo ActiveSquare 6 - 'NamoInstaller.dll' install Method

CVE-2008-0551—remotewindows

The NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1 and earlier in Namo Web Editor in Sejoong N

28RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component Restaurant 1.0 - SQL Injection

CVE-2008-0562—webappsphp

SQL injection vulnerability in index.php in the Restaurant (com_restaurant) 1.0 component for Mambo and Joomla! allows r

23RISCO

abrir ↗

Referência✓ VexDay Proof

MiniBill 1.22b - config[plugin_dir] Remote File Inclusion

CVE-2006-4489—webappsphp

Multiple PHP remote file inclusion vulnerabilities in MiniBill 2006-07-14 (1.2.2) allow remote attackers to execute arbi

28RISCO

abrir ↗

Referência✓ VexDay Proof

C-News 1.0.1 - 'path' Remote File Inclusion

CVE-2006-4629—webappsphp

PHP remote file inclusion vulnerability in affichage/commentaires.php in C-News.fr C-News 1.0.1 and earlier allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

MySpeach 3.0.2 - 'my_ms[root]' Remote File Inclusion

CVE-2006-4630—webappsphp

PHP remote file inclusion vulnerability in jscript.php in Sky GUNNING MySpeach 3.0.2 and earlier, when register_globals

23RISCO

abrir ↗

Referência✓ VexDay Proof

SoftBB 0.1 - 'cmd' Remote Command Execution

CVE-2006-4633—webappsphp

index.php in SoftBB 0.1, and possibly earlier, allows remote attackers to obtain the installation path via a null or inv

23RISCO

abrir ↗

Referência✓ VexDay Proof

GeekLog 1.4.0sr3 - '_CONF[path]' Remote File Inclusion

CVE-2006-6225—webappsphp

Multiple PHP remote file inclusion vulnerabilities in GeekLog 1.4 allow remote attackers to execute arbitrary code via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Woltlab Burning Board Lite 1.0.2 - 'decode_cookie()' SQL Injection

CVE-2006-6237—webappsphp

SQL injection vulnerability in the decode_cookie function in thread.php in Woltlab Burning Board Lite 1.0.2 allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

TIBCO Rendezvous 7.4.11 - Password Extractor

CVE-2006-4676—localwindows

TIBCO RendezVous 7.4.11 and earlier logs base64-encoded usernames and passwords in rvrd.db, which allows local users to

23RISCO

abrir ↗

Referência✓ VexDay Proof

IBM Director < 5.10 - 'Redirect.bat' Directory Traversal

CVE-2006-4681—remotewindows

Directory traversal vulnerability in Redirect.bat in IBM Director before 5.10 allows remote attackers to read arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

mxBB Module mx_tinies 1.3.0 - Remote File Inclusion

CVE-2006-6295—webappsphp

PHP remote file inclusion vulnerability in includes/mx_common.php in the mx_tinies 1.3.0 Module for MxBB Portal 1.06 all

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows - spoolss GetPrinterData() Remote Denial of Service

CVE-2006-6296—doswindows

The RpcGetPrinterData function in the Print Spooler (spoolsv.exe) service in Microsoft Windows 2000 SP4 and earlier, and

28RISCO

abrir ↗

Referência✓ VexDay Proof

torrentflux 2.2 - Arbitrary File Create/ Execute/Delete

CVE-2006-6328—webappsphp

Directory traversal vulnerability in index.php for TorrentFlux 2.2 allows remote attackers to create or overwrite arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

torrentflux 2.2 - Arbitrary File Create/ Execute/Delete

CVE-2006-6329—webappsphp

index.php for TorrentFlux 2.2 allows remote attackers to delete files by specifying the target filename in the delfile p

23RISCO

abrir ↗

Referência✓ VexDay Proof

Magic News Pro 1.0.3 - 'script_path' Remote File Inclusion

CVE-2006-4823—webappsphp

PHP remote file inclusion vulnerability in scripts/news_page.php in Reamday Enterprises Magic News Pro 1.0.3 and earlier

23RISCO

abrir ↗

Referência✓ VexDay Proof

The Classified Ad System 1.0 - 'main' SQL Injection

CVE-2006-6349—webappsasp

Multiple SQL injection vulnerabilities in PWP Technologies The Classified Ad System allow remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component ChronoForms 2.3.5 - Remote File Inclusion

CVE-2008-0567—webappsphp

Multiple PHP remote file inclusion vulnerabilities in ChronoEngine ChronoForms (com_chronocontact) 2.3.5 component for J

35RISCO

abrir ↗

Referência✓ VexDay Proof

Downstat 1.8 - 'art' Remote File Inclusion

CVE-2006-4827—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Vmist Downstat 1.8 and earlier allow remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mindmeld 1.2.0.10 - Multiple Remote File Inclusions

CVE-2008-0572—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Mindmeld 1.2.0.10 allow remote attackers to execute arbitrary PHP

28RISCO

abrir ↗

Referência✓ VexDay Proof

SafeNet 10.4.0.12 - 'IPSecDrv.sys' Local kernel Ring0 SYSTEM

CVE-2008-0573—localwindows

IPSecDrv.sys 10.4.0.12 in SafeNET HighAssurance Remote and SoftRemote allows local users to gain privileges via a crafte

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component Shambo2 - 'itemID' SQL Injection

CVE-2008-0606—webappsphp

SQL injection vulnerability in index.php in the Shambo2 (com_shambo2) component for Mambo and Joomla! allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ipswitch WS_FTP Server with SSH 6.1.0.0 - Remote Buffer Overflow (PoC)

CVE-2008-0590—doswindows

Buffer overflow in Ipswitch WS_FTP Server with SSH 6.1.0.0 allows remote authenticated users to cause a denial of servic

28RISCO

abrir ↗

Referência✓ VexDay Proof

Linux Kernel 2.6.17 < 2.6.24.1 - 'vmsplice' Local Privilege Escalation (2)

CVE-2008-0600—locallinux

The vmsplice_to_pipe function in Linux kernel 2.6.17 through 2.6.24.1 does not validate a certain userspace pointer befo

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.