Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.305exploits catalogados

36.465CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8.883Nuclei 4.361Metasploit 3.493✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

bwired - 'index.php?newsID' SQL Injection

CVE-2007-3978—webappsphp

Session fixation vulnerability in bwired allows remote attackers to hijack web sessions by setting the PHPSESSID paramet

23RISCO

abrir ↗

Referência✓ VexDay Proof

ATutor 1.6.1-pl1 - 'import.php' Remote File Inclusion

CVE-2008-3368—webappsphp

PHP remote file inclusion vulnerability in tools/packages/import.php in ATutor 1.6.1 pl1 and earlier allows remote authe

23RISCO

abrir ↗

Referência✓ VexDay Proof

KISGB 5.1.1 - 'Authenticate.php' Remote File Inclusion

CVE-2006-6764—webappsphp

PHP remote file inclusion vulnerability in authenticate.php in Keep It Simple Guest Book (KISGB), when executing PHP thr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Openfire Server 3.6.0a - Authentication Bypass / SQL Injection / Cross-Site Scripting

CVE-2008-6509—webappsjsp

SQL injection vulnerability in CallLogDAO in SIP Plugin in Openfire 3.6.0a and earlier allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component joovideo 1.2.2 - 'id' SQL Injection

CVE-2008-1460—webappsphp

SQL injection vulnerability in the Joovideo (com_joovideo) 1.0 and 1.2.2 component for Mambo and Joomla! allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Classifieds Script 05122008 - SQL Injection

CVE-2008-2453—webappsphp

Multiple SQL injection vulnerabilities in PHP Classifieds Script allow remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

RunCMS Newbb_plus 0.92 - Client IP SQL Injection

CVE-2008-0224—webappsphp

SQL injection vulnerability in index.php in the Newbb_plus 0.92 and earlier module in RunCMS 1.6.1 allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

FizzMedia 1.51.2 - SQL Injection

CVE-2008-3378—webappsphp

SQL injection vulnerability in comment.php in Fizzmedia 1.51.2 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Ignite Gallery 0.8.3 - SQL Injection

CVE-2008-6182—webappsphp

SQL injection vulnerability in the Ignite Gallery (com_ignitegallery) component 0.8.0 through 0.8.3 for Joomla! allows r

23RISCO

abrir ↗

Referência✓ VexDay Proof

Peel Shopping 3.1 - 'rubid' SQL Injection

CVE-2008-6892—webappsphp

SQL injection vulnerability in lire/index.php in Peel 3.1 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Help Agent 1.1 - 'content' Local File Inclusion

CVE-2008-3385—webappsphp

Directory traversal vulnerability in include/head_chat.inc.php in php Help Agent 1.0 and 1.1 Full allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

Tribiq CMS 5.0.10a (Windows) - Local File Inclusion

CVE-2008-4894—webappsphp

Directory traversal vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.10

23RISCO

abrir ↗

Referência✓ VexDay Proof

Squirrelcart 2.2.0 - 'cart_content.php' Remote File Inclusion

CVE-2006-2483—webappsphp

PHP remote file inclusion vulnerability in cart_content.php in Squirrelcart 2.2.2 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

CMS NetCat 3.12 - Multiple Vulnerabilities

CVE-2008-5728—webappsphp

Multiple directory traversal vulnerabilities in AIST NetCat 3.12 and earlier, when magic_quotes_gpc is disabled and regi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Osprey 1.0 - 'GetRecord.php' Remote File Inclusion

CVE-2006-6631—webappsphp

PHP remote file inclusion vulnerability in lib/xml/oai/GetRecord.php in osprey 1.0 and earlier allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

MultiCart 1.0 - Blind SQL Injection

CVE-2007-5261—webappsphp

Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

Softbiz Freelancers Script 1 - SQL Injection

CVE-2007-6124—webappsphp

Cross-site scripting (XSS) vulnerability in signin.php in Softbiz Freelancers Script 1 allows remote attackers to inject

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fusion News 1.0 (fil_config) - Remote File Inclusion

CVE-2006-3387—webappsphp

Directory traversal vulnerability in sources/post.php in Fusion News 1.0, when register_globals is enabled, allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

smeweb 1.4b - SQL Injection / Cross-Site Scripting

CVE-2008-2644—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in SMEWeb 1.4b and 1.4f allow remote attackers to inject arbitrary w

23RISCO

abrir ↗

Referência✓ VexDay Proof

mm chat 1.5 - Local File Inclusion / Cross-Site Scripting

CVE-2008-2974—webappsphp

Directory traversal vulnerability in chatconfig.php in MM Chat 1.5, when register_globals is enabled, allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

nzFotolog 0.4.1 - 'action_file' Local File Inclusion

CVE-2008-3405—webappsphp

Directory traversal vulnerability in index.php in Ricardo Amaral nzFotolog 0.4.1 allows remote attackers to include and

23RISCO

abrir ↗

Referência✓ VexDay Proof

Zanfi CMS lite 1.2 - Multiple Local File Inclusions

CVE-2008-4158—webappsphp

Multiple directory traversal vulnerabilities in index.php in Zanfi CMS lite 1.2 allow remote attackers to include and ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

gCards 1.46 - SQL Injection / Remote Code Execution

CVE-2007-2971—webappsphp

SQL injection vulnerability in getnewsitem.php in gCards 1.46 and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

TurnkeyForms Text Link Sales - 'id' Cross-Site Scripting / SQL Injection

CVE-2008-5487—webappsphp

Cross-site scripting (XSS) vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to inject

23RISCO

abrir ↗

Referência✓ VexDay Proof

myPHPscripts Login Session 2.0 - Cross-Site Scripting / Database Disclosure

CVE-2008-5854—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in login.php in myPHPscripts Login Session 2.0 allow remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

Flexphplink 0.0.x - Authentication Bypass

CVE-2008-6730—webappsphp

Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPLink Pro 0.0.6 and 0.0.7, when magic_quotes_gpc

23RISCO

abrir ↗

Referência✓ VexDay Proof

MindDezign Photo Gallery 2.2 - Arbitrary Add Admin

CVE-2008-6790—webappsphp

The admin module in MindDezign Photo Gallery 2.2 allows remote attackers to add administrative users and gain privileges

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mole 2.1.0 - 'viewsource.php' Remote File Disclosure

CVE-2008-1857—webappsphp

Multiple directory traversal vulnerabilities in viewsource.php in Make our Life Easy (Mole) 2.1.0 allow remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

SiteAdmin CMS - 'art' SQL Injection

CVE-2008-3414—webappsphp

SQL injection vulnerability in line2.php in SiteAdmin allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpclanwebsite 1.23.3 fix pack #5 - Multiple Vulnerabilities

CVE-2008-5878—webappsphp

Multiple directory traversal vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, when magic_quote

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.