Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.305exploits catalogados

36.465CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8.883Nuclei 4.361Metasploit 3.493✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

RunCMS Newbb_plus 0.92 - Client IP SQL Injection

CVE-2008-0224—webappsphp

SQL injection vulnerability in index.php in the Newbb_plus 0.92 and earlier module in RunCMS 1.6.1 allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

FizzMedia 1.51.2 - SQL Injection

CVE-2008-3378—webappsphp

SQL injection vulnerability in comment.php in Fizzmedia 1.51.2 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Ignite Gallery 0.8.3 - SQL Injection

CVE-2008-6182—webappsphp

SQL injection vulnerability in the Ignite Gallery (com_ignitegallery) component 0.8.0 through 0.8.3 for Joomla! allows r

23RISCO

abrir ↗

Referência✓ VexDay Proof

Peel Shopping 3.1 - 'rubid' SQL Injection

CVE-2008-6892—webappsphp

SQL injection vulnerability in lire/index.php in Peel 3.1 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Help Agent 1.1 - 'content' Local File Inclusion

CVE-2008-3385—webappsphp

Directory traversal vulnerability in include/head_chat.inc.php in php Help Agent 1.0 and 1.1 Full allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

Tribiq CMS 5.0.10a (Windows) - Local File Inclusion

CVE-2008-4894—webappsphp

Directory traversal vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.10

23RISCO

abrir ↗

Referência✓ VexDay Proof

Squirrelcart 2.2.0 - 'cart_content.php' Remote File Inclusion

CVE-2006-2483—webappsphp

PHP remote file inclusion vulnerability in cart_content.php in Squirrelcart 2.2.2 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

CMS NetCat 3.12 - Multiple Vulnerabilities

CVE-2008-5728—webappsphp

Multiple directory traversal vulnerabilities in AIST NetCat 3.12 and earlier, when magic_quotes_gpc is disabled and regi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Osprey 1.0 - 'GetRecord.php' Remote File Inclusion

CVE-2006-6631—webappsphp

PHP remote file inclusion vulnerability in lib/xml/oai/GetRecord.php in osprey 1.0 and earlier allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

MultiCart 1.0 - Blind SQL Injection

CVE-2007-5261—webappsphp

Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

Softbiz Freelancers Script 1 - SQL Injection

CVE-2007-6124—webappsphp

Cross-site scripting (XSS) vulnerability in signin.php in Softbiz Freelancers Script 1 allows remote attackers to inject

23RISCO

abrir ↗

Referência✓ VexDay Proof

Siteframe CMS 3.2.3 - 'folder.php' SQL Injection

CVE-2008-3256—webappsphp

SQL injection vulnerability in folder.php in Siteframe CMS 3.2.3 and earlier, and Siteframe Beaumont 5.0.5 and earlier,

23RISCO

abrir ↗

Referência✓ VexDay Proof

HIOX Browser Statistics 2.0 - Remote File Inclusion

CVE-2008-3402—webappsphp

Multiple PHP remote file inclusion vulnerabilities in HIOX Browser Statistics (HBS) 2.0 allow remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

clickandemail - SQL Injection / Cross-Site Scripting

CVE-2008-5893—webappsasp

Cross-site scripting (XSS) vulnerability in admin_dblayers.asp in ClickAndEmail allows remote attackers to inject arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

cwmCounter 5.1.1 - 'statistic.php' Remote File Inclusion

CVE-2006-6738—webappsphp

PHP remote file inclusion vulnerability in statistic.php in cwmCounter 5.1.1 and earlier allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simple Machines Forum (SMF) 1.1.6 - Code Execution

CVE-2008-6658—webappsphp

Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15 and 1.1 before 1.1.7 all

23RISCO

abrir ↗

Referência✓ VexDay Proof

MGB 0.5.4.5 - 'email.php?id' SQL Injection

CVE-2007-0354—webappsphp

SQL injection vulnerability in email.php in MGB OpenSource Guestbook 0.5.4.5 and earlier allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

Webyapar 2.0 - Multiple SQL Injections

CVE-2007-4068—webappsphp

Multiple SQL injection vulnerabilities in Webyapar 2.0 allow remote attackers to execute arbitrary SQL commands via (1)

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fusion News 1.0 (fil_config) - Remote File Inclusion

CVE-2006-3387—webappsphp

Directory traversal vulnerability in sources/post.php in Fusion News 1.0, when register_globals is enabled, allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

smeweb 1.4b - SQL Injection / Cross-Site Scripting

CVE-2008-2644—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in SMEWeb 1.4b and 1.4f allow remote attackers to inject arbitrary w

23RISCO

abrir ↗

Referência✓ VexDay Proof

mm chat 1.5 - Local File Inclusion / Cross-Site Scripting

CVE-2008-2974—webappsphp

Directory traversal vulnerability in chatconfig.php in MM Chat 1.5, when register_globals is enabled, allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

nzFotolog 0.4.1 - 'action_file' Local File Inclusion

CVE-2008-3405—webappsphp

Directory traversal vulnerability in index.php in Ricardo Amaral nzFotolog 0.4.1 allows remote attackers to include and

23RISCO

abrir ↗

Referência✓ VexDay Proof

Zanfi CMS lite 1.2 - Multiple Local File Inclusions

CVE-2008-4158—webappsphp

Multiple directory traversal vulnerabilities in index.php in Zanfi CMS lite 1.2 allow remote attackers to include and ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

gCards 1.46 - SQL Injection / Remote Code Execution

CVE-2007-2971—webappsphp

SQL injection vulnerability in getnewsitem.php in gCards 1.46 and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

TurnkeyForms Text Link Sales - 'id' Cross-Site Scripting / SQL Injection

CVE-2008-5487—webappsphp

Cross-site scripting (XSS) vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to inject

23RISCO

abrir ↗

Referência✓ VexDay Proof

myPHPscripts Login Session 2.0 - Cross-Site Scripting / Database Disclosure

CVE-2008-5854—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in login.php in myPHPscripts Login Session 2.0 allow remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

Flexphplink 0.0.x - Authentication Bypass

CVE-2008-6730—webappsphp

Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPLink Pro 0.0.6 and 0.0.7, when magic_quotes_gpc

23RISCO

abrir ↗

Referência✓ VexDay Proof

MindDezign Photo Gallery 2.2 - Arbitrary Add Admin

CVE-2008-6790—webappsphp

The admin module in MindDezign Photo Gallery 2.2 allows remote attackers to add administrative users and gain privileges

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mole 2.1.0 - 'viewsource.php' Remote File Disclosure

CVE-2008-1857—webappsphp

Multiple directory traversal vulnerabilities in viewsource.php in Make our Life Easy (Mole) 2.1.0 allow remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

SiteAdmin CMS - 'art' SQL Injection

CVE-2008-3414—webappsphp

SQL injection vulnerability in line2.php in SiteAdmin allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.