Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.526exploits catalogados

36.593CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.475Referência 23.152GitHub PoC 15.158VulnCheck XDB 8.883Nuclei 4.365Metasploit 3.493✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

ZeroCMS 1.0 Alpha - Arbitrary File Upload / SQL Injection

CVE-2008-0233—webappsphp

Unrestricted file upload vulnerability in Zero CMS 1.0 Alpha and earlier allows remote attackers to bypass intended acce

23RISCO

abrir ↗

Referência✓ VexDay Proof

QuickTime Player 7.3.1.70 - 'RTSP' Buffer Overflow (PoC)

CVE-2008-0234—doswindows

Buffer overflow in Apple Quicktime Player 7.3.1.70 and other versions before 7.4.1, when RTSP tunneling is enabled, allo

28RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Rich Textbox Control 6.0-SP6 - 'SaveFile()' Insecure Method

CVE-2008-0237—remotewindows

The Microsoft Rich Textbox ActiveX Control (RICHTX32.OCX) 6.1.97.82 allows remote attackers to execute arbitrary command

28RISCO

abrir ↗

Referência✓ VexDay Proof

Evilsentinel 1.0.9 - Multiple Vulnerabilities Disable

CVE-2008-0351—webappsphp

admin/config.php in Evilsentinel 1.0.9 and earlier allows remote attackers to bypass the CAPTCHA test by omitting the es

23RISCO

abrir ↗

Referência✓ VexDay Proof

StreamAudio ChainCast ProxyManager - 'ccpm_0237.dll' Remote Buffer Overflow

CVE-2008-0248—remotewindows

Buffer overflow in an ActiveX control in ccpm_0237.dll for StreamAudio ChainCast ProxyManager allows remote attackers to

28RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Visual InterDev 6.0 SP6 - '.sln' Local Buffer Overflow

CVE-2008-0250—localwindows

Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arbitrary code via a St

28RISCO

abrir ↗

Referência✓ VexDay Proof

PixelPost 1.7 - Blind SQL Injection

CVE-2008-0358—webappsphp

SQL injection vulnerability in index.php in Pixelpost 1.7 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Crystal Reports XI Release 2 (Enterprise Tree Control) - ActiveX Buffer Overflow (Denial of Service) (PoC)

CVE-2008-0379—doswindows

Race condition in the Enterprise Tree ActiveX control (EnterpriseControls.dll 11.5.0.313) in Crystal Reports XI Release

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyBulletinBoard (MyBB) 1.2.10 - Multiple Vulnerabilities

CVE-2008-0382—webappsphp

Multiple eval injection vulnerabilities in MyBB 1.2.10 and earlier allow remote attackers to execute arbitrary code via

35RISCO

abrir ↗

Referência✓ VexDay Proof

phpdaily - SQL Injection / Cross-Site Scripting / Local File Download

CVE-2008-4757—webappsphp

Multiple SQL injection vulnerabilities in PHP-Daily allow remote attackers to execute arbitrary SQL commands via the (1)

23RISCO

abrir ↗

Referência✓ VexDay Proof

Forum82 < 2.5.2b - 'repertorylevel' Multiple File Inclusions

CVE-2006-5148—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Forum82 2.5.2b and earlier allow remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

VideoDB 2.2.1 - 'pdf.php' Remote File Inclusion

CVE-2006-5155—webappsphp

PHP remote file inclusion vulnerability in core/pdf.php in VideoDB 2.2.1 and earlier allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bandwebsite 1.5 - SQL Injection / Cross-Site Scripting

CVE-2008-5337—webappsphp

SQL injection vulnerability in lyrics.php in Bandwebsite (aka Bandsite portal system) 1.5 allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpMyWebmin 1.0 - 'target' Remote File Inclusion

CVE-2006-5181—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Travelsized CMS 0.4 - 'FrontPage.php' Remote File Inclusion

CVE-2006-5182—webappsphp

PHP remote file inclusion vulnerability in frontpage.php in Dan Jensen Travelsized CMS 0.4 and earlier allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

4Images 1.7.1 - Local File Inclusion / Remote Code Execution

CVE-2006-0899—webappsphp

Directory traversal vulnerability in index.php in 4Images 1.7.1 and earlier allows remote attackers to read and include

23RISCO

abrir ↗

Referência✓ VexDay Proof

FastStone Image Viewer 3.6 - '.BMP' Image Crash

CVE-2008-5870—doswindows

FastStone Image Viewer 3.6 allows user-assisted attackers to cause a denial of service (application crash) via a malform

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB Security Suite Mod 1.0.0 - 'logger_engine.php' Remote File Inclusion

CVE-2006-5224—webappsphp

PHP remote file inclusion vulnerability in includes/logger_engine.php in Dimitri Seitz Security Suite IP Logger 1.0.0 in

23RISCO

abrir ↗

Referência✓ VexDay Proof

Freenews 1.1 - 'moteur.php' Remote File Inclusion

CVE-2006-5226—webappsphp

PHP remote file inclusion vulnerability in moteur/moteur.php in Prologin.fr Freenews 1.1 and earlier allows remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

Rianxosencabos CMS 0.9 - Blind SQL Injection

CVE-2008-6014—webappsphp

SQL injection vulnerability in scripts/links.php in Rianxosencabos CMS 0.9 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Vlog System 1.1 - SQL Injection

CVE-2008-6111—webappsphp

SQL injection vulnerability in blog.php in NetArt Media Vlog System 1.1 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Download-Engine 1.4.2 - 'spaw' Remote File Inclusion

CVE-2006-5291—webappsphp

PHP remote file inclusion vulnerability in admin/includes/spaw/spaw_control.class.php in Download-Engine 1.4.2 allows re

23RISCO

abrir ↗

Referência✓ VexDay Proof

CSPartner 1.0 - Delete All Users / SQL Injection

CVE-2008-6165—webappsphp

SQL injection vulnerability in gestion.php in CSPartner 0.1, when magic_quotes_gpc is disabled, allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

JASmine 0.0.2 - 'index.php' Remote File Inclusion

CVE-2006-5318—webappsphp

PHP remote file inclusion vulnerability in index.php in Nayco JASmine (aka Jasmine-Web) allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

Foafgen 0.3 - 'redir.php' Local Source Disclosure

CVE-2006-5319—webappsphp

Directory traversal vulnerability in redir.php in Foafgen 0.3 allows remote attackers to read arbitrary files via a .. (

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ultrastats 0.2.144/0.3.11 - 'serverid' SQL Injection

CVE-2008-6260—webappsphp

SQL injection vulnerability in index.php in Ultrastats 0.2.144 and 0.3.11 allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apoll 0.7b - Authentication Bypass

CVE-2008-6270—webappsphp

SQL injection vulnerability in admin/index.php in Dragan Mitic Apoll 0.7 beta and 0.7.5 allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

YaBBSM 3.0.0 - 'Offline.php' Remote File Inclusion

CVE-2006-5413—webappsphp

Multiple PHP remote file inclusion vulnerabilities in SuperMod 3.0.0 for YABB (YaBBSM) allow remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apoll 0.7b - Authentication Bypass

CVE-2008-6272—webappsphp

SQL injection vulnerability in admin/index.php in Dragan Mitic Apoll 0.7 beta and 0.7.5 allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

e107 - 'include()' Remote File Upload

CVE-2004-2262—webappsphp

ImageManager in e107 before 0.617 does not properly check the types of uploaded files, which allows remote attackers to

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.