Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.526exploits catalogados

36.593CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.475Referência 23.152GitHub PoC 15.158VulnCheck XDB 8.883Nuclei 4.365Metasploit 3.493✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

phpMyWebmin 1.0 - 'window.php' Remote File Inclusion

CVE-2006-5124—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpMyWebmin 1.0 - 'window.php' Remote File Inclusion

CVE-2006-5125—webappsphp

Directory traversal vulnerability in window.php, possibly used by home.php, in Joshua Muheim phpMyWebmin 1.0 allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

SmallNuke 2.0.4 - Pass Recovery SQL Injection

CVE-2008-0147—webappsphp

SQL injection vulnerability in index.php in SmallNuke 2.0.4 and earlier, when magic_quotes_gpc is disabled, allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

OpenSSL 0.9.8c-1 < 0.9.8g-9 (Debian and Derivatives) - Predictable PRNG Brute Force SSH

CVE-2008-0166—remotelinux

OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that ge

45RISCO

abrir ↗

Referência✓ VexDay Proof

OpenSSL 0.9.8c-1 < 0.9.8g-9 (Debian and Derivatives) - Predictable PRNG Brute Force SSH

CVE-2008-0166—remotelinux

OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that ge

45RISCO

abrir ↗

Referência✓ VexDay Proof

NetRisk 1.9.7 - Cross-Site Scripting / SQL Injection

CVE-2008-0185—webappsphp

SQL injection vulnerability in index.php in NetRisk 1.9.7 and possibly earlier versions allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

samPHPweb 4.2.2 - 'songinfo.php' SQL Injection

CVE-2008-0187—webappsphp

SQL injection vulnerability in songinfo.php in SAM Broadcaster samPHPweb, possibly 4.2.2 and earlier, allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

Uebimiau Web-Mail 2.7.10/2.7.2 - Remote File Disclosure

CVE-2008-0210—webappsphp

Uebimiau Webmail 2.7.10 and 2.7.2 does not protect authentication state variables from being set through HTTP requests,

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Webquest 2.6 - 'id_actividad' SQL Injection

CVE-2008-0219—webappsphp

SQL injection vulnerability in soporte_horizontal_w.php in PHP Webquest 2.6 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

ZeroCMS 1.0 Alpha - Arbitrary File Upload / SQL Injection

CVE-2008-0233—webappsphp

Unrestricted file upload vulnerability in Zero CMS 1.0 Alpha and earlier allows remote attackers to bypass intended acce

23RISCO

abrir ↗

Referência✓ VexDay Proof

QuickTime Player 7.3.1.70 - 'RTSP' Buffer Overflow (PoC)

CVE-2008-0234—doswindows

Buffer overflow in Apple Quicktime Player 7.3.1.70 and other versions before 7.4.1, when RTSP tunneling is enabled, allo

28RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Rich Textbox Control 6.0-SP6 - 'SaveFile()' Insecure Method

CVE-2008-0237—remotewindows

The Microsoft Rich Textbox ActiveX Control (RICHTX32.OCX) 6.1.97.82 allows remote attackers to execute arbitrary command

28RISCO

abrir ↗

Referência✓ VexDay Proof

WU-FTPD 2.6.2 - 'wuftpd-freezer.c' Remote Denial of Service

CVE-2003-0854—doslinux

ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, w

23RISCO

abrir ↗

Referência✓ VexDay Proof

VAMP Webmail 2.0beta1 - 'yesno.phtml' Remote File Inclusion

CVE-2006-5147—webappsphp

PHP remote file inclusion vulnerability in wamp_dir/setup/yesno.phtml in VAMP Webmail 2.0beta1 and earlier allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

FAQ Manager 1.2 - 'categorie.php' SQL Injection

CVE-2008-5287—webappsphp

SQL injection vulnerability in catagorie.php in Werner Hilversum FAQ Manager 1.2 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

BBaCE 3.5 - '/includes/functions.php' Remote File Inclusion

CVE-2006-5187—webappsphp

PHP remote file inclusion vulnerability in includes/functions.php in Bulletin Board Ace (BBaCE) 3.5 and earlier allows r

23RISCO

abrir ↗

Referência✓ VexDay Proof

Klinza Professional CMS 5.0.1 - 'show_hlp.php' File Inclusion

CVE-2006-5189—webappsphp

PHP remote file inclusion vulnerability in funzioni/lib/show_hlp.php in klinza professional cms 5.0.1 and earlier allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

4Images 1.7.1 - Local File Inclusion / Remote Code Execution

CVE-2006-0899—webappsphp

Directory traversal vulnerability in index.php in 4Images 1.7.1 and earlier allows remote attackers to read and include

23RISCO

abrir ↗

Referência✓ VexDay Proof

FastStone Image Viewer 3.6 - '.BMP' Image Crash

CVE-2008-5870—doswindows

FastStone Image Viewer 3.6 allows user-assisted attackers to cause a denial of service (application crash) via a malform

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB Security Suite Mod 1.0.0 - 'logger_engine.php' Remote File Inclusion

CVE-2006-5224—webappsphp

PHP remote file inclusion vulnerability in includes/logger_engine.php in Dimitri Seitz Security Suite IP Logger 1.0.0 in

23RISCO

abrir ↗

Referência✓ VexDay Proof

Freenews 1.1 - 'moteur.php' Remote File Inclusion

CVE-2006-5226—webappsphp

PHP remote file inclusion vulnerability in moteur/moteur.php in Prologin.fr Freenews 1.1 and earlier allows remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

Rianxosencabos CMS 0.9 - Blind SQL Injection

CVE-2008-6014—webappsphp

SQL injection vulnerability in scripts/links.php in Rianxosencabos CMS 0.9 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

aspwebalbum 3.2 - Multiple Vulnerabilities

CVE-2004-1553—webappsasp

SQL injection vulnerability in aspWebAlbum allows remote attackers to execute arbitrary SQL statements via (1) the usern

23RISCO

abrir ↗

Referência✓ VexDay Proof

aspwebalbum 3.2 - Arbitrary File Upload / SQL Injection / Cross-Site Scripting

CVE-2004-1553—webappsphp

SQL injection vulnerability in aspWebAlbum allows remote attackers to execute arbitrary SQL statements via (1) the usern

23RISCO

abrir ↗

Referência✓ VexDay Proof

Limbo CMS - Private Messaging Component SQL Injection

CVE-2008-6078—webappsphp

SQL injection vulnerability in open.php in the Private Messaging (com_privmsg) component for Limbo CMS allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

Minichat 6.0 - 'ftag.php' Remote File Inclusion

CVE-2006-5283—webappsphp

PHP remote file inclusion vulnerability in ftag.php in Minichat 6.0 allows remote attackers to execute arbitrary PHP cod

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cdsagenda 4.2.9 - 'SendAlertEmail.php' File Inclusion

CVE-2006-5384—webappsphp

PHP remote file inclusion vulnerability in modification/SendAlertEmail.php in CDS Software Consortium CDS Agenda 4.2.9 a

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB SpamOborona Mod 1.0b - Remote File Inclusion

CVE-2006-5385—webappsphp

PHP remote file inclusion vulnerability in admin/admin_spam.php in the SpamOborona 1.0b and earlier phpBB module allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

AROUNDMe 0.5.2 - 'templatePath' Remote File Inclusion

CVE-2006-5401—webappsphp

PHP remote file inclusion vulnerability in template/barnraiser_01/p_new_password.tpl.php in AROUNDMe 0.5.2 and earlier a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Easynews 4.4.1 - 'admin.php' Authentication Bypass

CVE-2006-5412—webappsphp

admin.php in PHP Outburst Easynews 4.4.1 and earlier, when register_globals is enabled, allows remote attackers to bypas

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.