Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.794exploits catalogados

36.057CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.459Referência 22.721GitHub PoC 14.946VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Alstrasoft Template Seller Pro 3.25 - Remote Code Execution

CVE-2007-2777—webappsphp

Unrestricted file upload vulnerability in admin/addsptemplate.php in AlstraSoft Template Seller Pro 3.25 and earlier all

23RISCO

abrir ↗

Referência✓ VexDay Proof

Audacity 1.2.6 - '.gro' Local Buffer Overflow (PoC)

CVE-2009-0490—doswindows

Stack-based buffer overflow in the String_parse::get_nonspace_quoted function in lib-src/allegro/strparse.cpp in Audacit

28RISCO

abrir ↗

Referência✓ VexDay Proof

Libstats 1.0.3 - 'template_csv.php' Remote File Inclusion

CVE-2007-2779—webappsphp

PHP remote file inclusion vulnerability in template_csv.php in Libstats 1.0.3 and earlier allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

IPNPro3 < 1.44 - Admin Password Changing

CVE-2008-5568—webappsphp

Cross-site request forgery (CSRF) vulnerability in admin/settings.php in IPN Pro 3 1.44 and earlier allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

Professional Download Assistant 0.1 - Authentication Bypass

CVE-2008-5571—webappsasp

SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Professional Download Assistant 0.1 - Database Disclosure

CVE-2008-5572—webappsasp

Professional Download Assistant 0.1 stores sensitive information under the web root with insufficient access control, wh

23RISCO

abrir ↗

Referência✓ VexDay Proof

AdaptCMS Lite 1.4 - Cross-Site Scripting / Remote File Inclusion

CVE-2009-0526—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in index.php in AdaptCMS Lite 1.4 allow remote attackers to inject a

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebMaster Marketplace - SQL Injection

CVE-2008-5574—webappsphp

SQL injection vulnerability in member.php in Webmaster Marketplace allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

sCssBoard (Multiple Versions) - 'pwnpack' Remote s

CVE-2008-5578—webappsphp

Multiple SQL injection vulnerabilities in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allow remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

Nukedit 4.9.x - Remote Create Admin

CVE-2008-5582—webappsphp

SQL injection vulnerability in utilities/login.asp in Nukedit 4.9.x, and possibly earlier, allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

Vistered Little 1.6a - 'skin' Remote File Disclosure

CVE-2007-2934—webappsphp

Directory traversal vulnerability in skins/common.css.php in Vistered Little 1.6a allows remote attackers to read arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Rankem - Authentication Bypass

CVE-2008-5589—webappsasp

SQL injection vulnerability in processlogin.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Product Sale Framework 0.1b - SQL Injection

CVE-2008-5590—webappsphp

SQL injection vulnerability in customer.forumtopic.php in Kalptaru Infotech Product Sale Framework 0.1 beta allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

nightfall personal diary 1.0 - Cross-Site Scripting / File Disclosure

CVE-2008-5591—webappsphp

Cross-site scripting (XSS) vulnerability in login.asp in Nightfall Personal Diary 1.0 allows remote attackers to inject

23RISCO

abrir ↗

Referência✓ VexDay Proof

TROforum 0.1 - 'admin.php?site_url' Remote File Inclusion

CVE-2007-2937—webappsphp

PHP remote file inclusion vulnerability in admin/admin.php in TROforum 0.1 allows remote attackers to execute arbitrary

35RISCO

abrir ↗

Referência✓ VexDay Proof

ASPThai.Net WebBoard 6.0 - SQL Injection

CVE-2009-0703—webappsphp

SQL injection vulnerability in bview.asp in ASPThai.Net Webboard 6.0 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

QMail Mailing List Manager 1.2 - Database Disclosure

CVE-2008-5606—webappsasp

Gazatem QMail Mailing List Manager 1.2 stores sensitive information under the web root with insufficient access control,

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASP AutoDealer - Remote Database Disclosure

CVE-2008-5608—webappsasp

ASP AutoDealer stores sensitive information under the web root with insufficient access control, which allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASP AutoDealer - SQL Injection / File Disclosure

CVE-2008-5608—webappsasp

ASP AutoDealer stores sensitive information under the web root with insufficient access control, which allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mercury/32 Mail Server 4.01 - 'Pegasus' IMAP Buffer Overflow (3)

CVE-2004-2513—remotewindows

Buffer overflow in the IMAP service of Mercury (Pegasus) Mail 4.01 allows remote attackers to execute arbitrary code via

23RISCO

abrir ↗

Referência✓ VexDay Proof

XM Easy Personal FTP Server 5.6.0 - Remote Denial of Service

CVE-2008-5626—doswindows

XM Easy Personal FTP Server 5.6.0 allows remote authenticated users to cause a denial of service via a crafted argument

50RISCO

abrir ↗

Referência✓ VexDay Proof

Active Trade 2 - Authentication Bypass

CVE-2008-5627—webappsasp

SQL injection vulnerability in account.asp in Active Trade 2 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

CMS little 0.0.1 - 'term' SQL Injection

CVE-2008-5628—webappsphp

SQL injection vulnerability in index.php in CMS little 0.0.1 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

Turnkey Arcade Script - SQL Injection (1)

CVE-2008-5629—webappsphp

SQL injection vulnerability in index.php in Turnkey Arcade Script allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

eWebquiz 8 - Authentication Bypass

CVE-2008-5631—webappsasp

SQL injection vulnerability in start.asp in Active eWebquiz 8.0 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

ActiveVotes 2.2 - Authentication Bypass

CVE-2008-5633—webappsasp

SQL injection vulnerability in register.asp in ActiveVotes 2.2 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Active Membership 2 - Authentication Bypass

CVE-2008-5635—webappsasp

SQL injection vulnerability in account.asp in Active Membership 2.0 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

Active Bids 3.5 - 'itemID' Blind SQL Injection

CVE-2008-5640—webappsphp

SQL injection vulnerability in bidhistory.asp in Active Bids 3.5 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

CMS Made Simple 1.4.1 - Local File Inclusion

CVE-2008-5642—webappsphp

Directory traversal vulnerability in admin/login.php in CMS Made Simple 1.4.1 allows remote attackers to read arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

BlueBird Pre-Release - Authentication Bypass

CVE-2009-0740—webappsphp

SQL injection vulnerability in login.php in BlueBird Prelease allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.