Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.526exploits catalogados

36.593CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.475Referência 23.152GitHub PoC 15.158VulnCheck XDB 8.883Nuclei 4.365Metasploit 3.493✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

e107 - 'include()' Remote File Upload

CVE-2004-2262—webappsphp

ImageManager in e107 before 0.617 does not properly check the types of uploaded files, which allows remote attackers to

28RISCO

abrir ↗

Referência✓ VexDay Proof

Brim 1.2.1 - 'renderer' Multiple Remote File Inclusions

CVE-2006-5429—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Barry Nauta BRIM 1.2.1 and earlier allow remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPPowerCards 2.10 - 'txt.inc.php' Remote Code Execution

CVE-2006-5432—webappsphp

Multiple direct static code injection vulnerabilities in db/txt.inc.php in phpPowerCards 2.10, when register_globals is

23RISCO

abrir ↗

Referência✓ VexDay Proof

ActualAnalyzer - 'ant' Cookie Command Execution (Metasploit)

CVE-2014-5470CRITICALremoteunix

Actual Analyzer through 2014-08-29 allows code execution via shell metacharacters because untrusted input is used for pa

68RISCO

abrir ↗

Referência✓ VexDay Proof

PHPMyRing 4.2.1 - 'cherche.php' SQL Injection

CVE-2006-5638—webappsphp

Multiple SQL injection vulnerabilities in cherche.php in PHPMyRing 4.2.1 and earlier allow remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Techno Dreams Guestbook 1.0 - 'key' SQL Injection

CVE-2006-5640—webappsasp

SQL injection vulnerability in guestbookview.asp in Techno Dreams Guest Book 1.0 earlier allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

Techno Dreams Announcement - 'key' SQL Injection

CVE-2006-5641—webappsasp

SQL injection vulnerability in MainAnnounce2.asp in Techno Dreams Announcement allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

DataTrac Activity Console - Denial of Service

CVE-2005-1667—doswindows

DataTrac Activity Console 1.1 allows remote attackers to cause a denial of service via a long HTTP GET request.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Visual Basic Enterprise 6 SP6 - '.dsr' File Handling Buffer Overflow

CVE-2008-0392—localwindows

Multiple buffer overflows in Microsoft Visual Basic Enterprise Edition 6.0 SP6 allow user-assisted remote attackers to e

35RISCO

abrir ↗

Referência✓ VexDay Proof

Gradman 0.1.3 - 'info.php' Local File Inclusion

CVE-2008-0393—webappsphp

Directory traversal vulnerability in info.php in GradMan 0.1.3 and earlier allows remote attackers to include and execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

Toshiba Surveillance - 'MeIpCamX.dll 1.0.0.4' Remote Buffer Overflow

CVE-2008-0399—remotewindows

Multiple buffer overflows in Toshiba Surveillance (Surveillix) RecordSend ActiveX control (MeIpCamX.DLL 1.0.0.4) allow r

23RISCO

abrir ↗

Referência✓ VexDay Proof

Invision Gallery 2.0.7 - SQL Injection

CVE-2008-0421—webappsphp

SQL injection vulnerability in Invision Gallery 2.0.7 and earlier allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

Frimousse 0.0.2 - 'explorerdir.php' Local Directory Traversal

CVE-2008-0425—webappsphp

Absolute path traversal vulnerability in explorerdir.php in Frimousse 0.0.2 allows remote attackers to read arbitrary fi

23RISCO

abrir ↗

Referência✓ VexDay Proof

bloofox 0.3 - SQL Injection / File Disclosure

CVE-2008-0428—webappsphp

Multiple SQL injection vulnerabilities in the login function in system/class_permissions.php in bloofoxCMS 0.3 allow rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

360 Web Manager 3.0 - 'IDFM' SQL Injection

CVE-2008-0430—webappsphp

SQL injection vulnerability in form.php in 360 Web Manager 3.0 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

IDM-OS 1.0 - 'Filename' File Disclosure

CVE-2008-0431—webappsphp

Directory traversal vulnerability in administrator/download.php in IDMOS (aka Phoenix) 1.0 allows remote attackers to re

23RISCO

abrir ↗

Referência✓ VexDay Proof

flinx 1.3 - 'id' SQL Injection

CVE-2008-0468—webappsphp

SQL injection vulnerability in category.php in Flinx 1.3 and earlier allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Move Networks Upgrade Manager Control - Remote Buffer Overflow

CVE-2008-0477—remotewindows

Stack-based buffer overflow in the QMPUpgrade.Upgrade.1 ActiveX control in QMPUpgrade.dll 1.0.0.1 in Move Networks Upgra

28RISCO

abrir ↗

Referência✓ VexDay Proof

Web Wiz Forums 9.07 - 'sub' Directory Traversal

CVE-2008-0480—webappsasp

Multiple directory traversal vulnerabilities in Web Wiz Forums 9.07 and earlier allow remote attackers to list arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyBulletinBoard (MyBB) 1.03 - 'misc.php' SQL Injection

CVE-2006-0959—webappsphp

SQL injection vulnerability in misc.php in MyBulletinBoard (MyBB) 1.03, when register_globals is enabled, allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

CilemNews System 1.1 - 'yazdir.asp' haber_id SQL Injection

CVE-2006-0961—webappsasp

SQL injection vulnerability in yazdir.asp in Cilem Hiber 1.1 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

File Store PRO 3.2 - Multiple Blind SQL Injections

CVE-2006-1278—webappsphp

SQL injection vulnerability in @1 File Store 2006.03.07 allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP iCalendar 2.21 - 'publish.ical.php' Remote Code Execution

CVE-2006-1291—webappsphp

publish.ical.php in Jim Hu and Chad Little PHP iCalendar 2.21 and earlier does not require authentication for write acce

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP iCalendar 2.21 - 'cookie' Remote Code Execution

CVE-2006-1292—webappsphp

Directory traversal vulnerability in Jim Hu and Chad Little PHP iCalendar 2.21 and earlier allows remote attackers to in

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simple Forum 3.2 - File Disclosure / Cross-Site Scripting

CVE-2008-0541—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in forum.php in Gerd Tentler Simple Forum 3.2 allow remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simple Forum 3.2 - File Disclosure / Cross-Site Scripting

CVE-2008-0542—webappsphp

Directory traversal vulnerability in thumbnail.php in Gerd Tentler Simple Forum 3.2 allows remote attackers to read arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component 'com_newsletter' 4.5 - 'listid' SQL Injection

CVE-2008-0510—webappsphp

SQL injection vulnerability in index.php in the Newsletter (com_newsletter) component for Mambo 4.5 and Joomla! allows r

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component 'com_mamml' - 'listid' SQL Injection

CVE-2008-0511—webappsphp

SQL injection vulnerability in index.php in the MaMML (com_mamml) component for Mambo and Joomla! allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component 'com_fq' - 'listid' SQL Injection

CVE-2008-0512—webappsphp

SQL injection vulnerability in index.php in the fq (com_fq) component for Mambo and Joomla! allows remote attackers to e

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component 'com_glossary' 2.0 - 'catid' SQL Injection

CVE-2008-0514—webappsphp

SQL injection vulnerability in index.php in the Glossary (com_glossary) 2.0 component for Mambo and Joomla! allows remot

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.