Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.305exploits catalogados

36.465CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8.883Nuclei 4.361Metasploit 3.493✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

CMS NetCat 3.12 - Multiple Vulnerabilities

CVE-2008-5729—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to inject arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

BabbleBoard 1.1.6 - Cross-Site Request Forgery/Cookie Grabber

CVE-2008-6906—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in BabbleBoard 1.1.6 allows remote attackers to inject arbitrary w

23RISCO

abrir ↗

Referência✓ VexDay Proof

chipmunk topsites - Authentication Bypass / Cross-Site Scripting

CVE-2008-7072—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in Chipmunk Topsites allows remote attackers to inject arbitrary w

23RISCO

abrir ↗

Referência✓ VexDay Proof

Lightweight news portal (LNP) 1.0b - Multiple Vulnerabilities

CVE-2008-7171—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in Lightweight news portal (LNP) 1.0b allow remote attackers to inje

23RISCO

abrir ↗

Referência✓ VexDay Proof

Venalsur on-line Booking Centre - Cross-Site Scripting / SQL Injection

CVE-2008-6216—webappsphp

SQL injection vulnerability in cadena_ofertas_ext.php in Venalsur Booking Centre Booking System for Hotels Group allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

VP-ASP 6.00 - 'shopcurrency.asp' SQL Injection

CVE-2006-2263—webappsasp

SQL injection vulnerability in shopcurrency.asp in VP-ASP 6.00 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Acoustica Mixcraft 4.2 Build 98 - 'mx4' Local Buffer Overflow

CVE-2008-3877—localwindows

Stack-based buffer overflow in Acoustica Mixcraft 4.1 Build 96 and 4.2 Build 98 allows user-assisted attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pc4Uploader 9.0 - Blind SQL Injection

CVE-2009-1742—webappsphp

code.php in PC4Arb Pc4 Uploader 9.0 and earlier makes it easier for remote attackers to conduct SQL injection attacks vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPNS 1.1 - 'shownews.php?id' SQL Injection

CVE-2007-4628—webappsphp

SQL injection vulnerability in shownews.php in phpns 1.1 allows remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cahier de texte 2.0 - 'lire.php' SQL Injection

CVE-2006-5221—webappsphp

Multiple SQL injection vulnerabilities in Cahier de texte 2.0 allow remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

CMME 1.12 - Local File Inclusion / Cross-Site Scripting / Cross-Site Request Forgery/Download Backup/Make Directory

CVE-2008-3924—webappsphp

The "Make a backup" functionality in Content Management Made Easy (CMME) 1.12 stores sensitive information under the web

23RISCO

abrir ↗

Referência✓ VexDay Proof

UStore 1.0 - 'detail.asp' SQL Injection

CVE-2006-5891—webappsasp

SQL injection vulnerability in detail.asp in Superfreaker Studios UStore 1.0 allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Estate Agent Manager 1.3 - 'default.asp' Authentication Bypass

CVE-2006-5934—webappsasp

SQL injection vulnerability in admin/default.asp in Estate Agent Manager 1.3 and earlier allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pre Shopping Mall 1.0 - SQL Injection

CVE-2007-2674—webappsphp

SQL injection vulnerability in detail.php in Pre Shopping Mall 1.0 allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

AJ HYIP ACME - 'readarticle.php' SQL Injection

CVE-2008-4044—webappsphp

SQL injection vulnerability in article/readarticle.php in AJ Square aj-hyip (aka AJ HYIP Acme) allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

aspWebLinks 2.0 - SQL Injection / Admin Pass Change

CVE-2006-2847—webappsasp

SQL injection vulnerability in links.asp in aspWebLinks 2.0 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

campus virtual-lms - Cross-Site Scripting / SQL Injection

CVE-2009-2149—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in Campus Virtual-LMS allow remote attackers to inject arbitrary web

23RISCO

abrir ↗

Referência✓ VexDay Proof

bwired - 'index.php?newsID' SQL Injection

CVE-2007-3977—webappsphp

Cross-site scripting (XSS) vulnerability in bwired allows remote attackers to inject arbitrary web script or HTML via un

23RISCO

abrir ↗

Referência✓ VexDay Proof

NoseRub 0.5.2 - Login SQL Injection

CVE-2007-6602—webappsphp

SQL injection vulnerability in app/models/identity.php in NoseRub 0.5.2 and earlier allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Friendly Technologies - 'fwRemoteCfg.dll' ActiveX Command Execution

CVE-2008-4049—remotewindows

A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

FlexBB 0.5.5 - '/inc/start.php?_COOKIE' SQL Bypass

CVE-2006-1978—webappsphp

SQL injection vulnerability in inc/start.php in FlexBB 0.5.5 and earlier allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

iG Calendar 1.0 - 'user.php?id' SQL Injection

CVE-2007-0130—webappsphp

SQL injection vulnerability in user.php in iGeneric iG Calendar 1.0 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

Okul Web Otomasyon Sistemi 4.0.1 - SQL Injection

CVE-2007-0305—webappsasp

SQL injection vulnerability in etkinlikbak.asp in Okul Web Otomasyon Sistemi 4.0.1 allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

FreeBSD mcweject 0.9 'Eject' - Local Buffer Overflow / Local Privilege Escalation

CVE-2007-1719—localbsd

Buffer overflow in eject.c in Jason W. Bacon mcweject 0.9 on FreeBSD, and possibly other versions, allows local users to

23RISCO

abrir ↗

Referência✓ VexDay Proof

wolioCMS - Authentication Bypass / SQL Injection

CVE-2007-4156—webappsphp

Multiple SQL injection vulnerabilities in wolioCMS allow remote attackers to execute arbitrary SQL commands via (1) the

23RISCO

abrir ↗

Referência✓ VexDay Proof

AdaptCMS Lite 1.3 - Blind SQL Injection

CVE-2008-4524—webappsphp

SQL injection vulnerability in the "Check User" feature (includes/check_user.php) in AdaptCMS Lite and AdaptCMS Pro 1.3

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpDatingClub 3.7 - SQL Injection / Cross-Site Scripting Injection

CVE-2009-2178—webappsphp

Cross-site scripting (XSS) vulnerability in website.php in phpDatingClub 3.7 allows remote attackers to inject arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

DZCP (deV!L_z Clanportal) 1.34 - 'id' SQL Injection

CVE-2006-3347—webappsphp

SQL injection vulnerability in index.php in deV!Lz Clanportal DZCP 1.3.4 allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

OpenLD 1.2.2 - 'index.php?id' SQL Injection

CVE-2007-3682—webappsphp

SQL injection vulnerability in index.php in OpenLD 1.2.2 and earlier allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

RiteCMS 2.2.1 - Authenticated Remote Code Execution

CVE-2020-23934—webappsphp

An issue was discovered in RiteCMS 2.2.1. An authenticated user can directly execute system commands by uploading a php

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.