Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.697exploits catalogados

36.715CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.475Referência 23.264GitHub PoC 15.172VulnCheck XDB 8.920Nuclei 4.373Metasploit 3.493✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Apple Mac OSX Safari 2.0.3 (417.9.2) - 'ROWSPAN' Denial of Service (PoC)

CVE-2006-2019—dososx

Apple Mac OS X Safari 2.0.3, 1.3.1, and possibly other versions allows remote attackers to cause a denial of service (CP

23RISCO

abrir ↗

Referência✓ VexDay Proof

Limbo CMS 1.0.4.2 - 'sql.php' Remote File Inclusion

CVE-2006-2142—webappsphp

PHP remote file inclusion vulnerability in classes/adodbt/sql.php in Limbo CMS 1.04 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Aardvark Topsites PHP 4.2.2 - 'lostpw.php' Remote File Inclusion

CVE-2006-2149—webappsphp

PHP remote file inclusion vulnerability in sources/lostpw.php in Aardvark Topsites PHP 4.2.2 and earlier, when register_

23RISCO

abrir ↗

Referência✓ VexDay Proof

ACal 2.2.6 - 'day.php' Remote File Inclusion

CVE-2006-2261—webappsphp

PHP remote file inclusion vulnerability in day.php in ACal 2.2.6 allows remote attackers to execute arbitrary PHP code v

23RISCO

abrir ↗

Referência✓ VexDay Proof

pafileDB 2.0.1 - 'mxBB'/'phpBB' Remote File Inclusion

CVE-2006-2361—webappsphp

PHP remote file inclusion vulnerability in pafiledb_constants.php in Download Manager (mxBB pafiledb) integration, as us

23RISCO

abrir ↗

Referência✓ VexDay Proof

Limbo CMS 1.0.4.2 - 'catid' SQL Injection

CVE-2006-2363—webappsphp

SQL injection vulnerability in the weblinks option (weblinks.html.php) in Limbo CMS allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

metajour 2.1 - 'system_path' Remote File Inclusion

CVE-2006-2768—webappsphp

PHP remote file inclusion vulnerability in METAjour 2.1, when register_globals is enabled, allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

gxine 0.5.6 - HTTP Plugin Remote Buffer Overflow (PoC)

CVE-2006-2802—doslinux

Buffer overflow in the HTTP Plugin (xineplug_inp_http.so) for xine-lib 1.1.1 allows remote attackers to cause a denial o

28RISCO

abrir ↗

Referência✓ VexDay Proof

gnopaste 0.5.3 - 'common.php' Remote File Inclusion

CVE-2006-2834—webappsphp

PHP remote file inclusion vulnerability in includes/common.php in gnopaste 0.5.3 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Redaxo 3.2 - 'INCLUDE_PATH' Remote File Inclusion

CVE-2006-2845—webappsphp

PHP remote file inclusion vulnerability in Redaxo 3.0 up to 3.2 allows remote attackers to execute arbitrary PHP code vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

aspWebLinks 2.0 - SQL Injection / Admin Pass Change

CVE-2006-2848—webappsasp

links.asp in aspWebLinks 2.0 allows remote attackers to change the administrative password, possibly via a direct reques

23RISCO

abrir ↗

Referência✓ VexDay Proof

SmartSite CMS 1.0 - 'root' Remote File Inclusion

CVE-2006-3162—webappsphp

PHP remote file inclusion vulnerability in include/inc_foot.php in SmartSiteCMS 1.0 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

The Bible Portal Project 2.12 - 'destination' File Inclusion

CVE-2006-3177—webappsphp

PHP remote file inclusion vulnerability in Admin/rtf_parser.php in The Bible Portal Project 2.12 and earlier allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

BlueShoes Framework 4.6 - Remote File Inclusion

CVE-2006-2864—webappsphp

Multiple PHP remote file inclusion vulnerabilities in BlueShoes Framework 4.6 allow remote attackers to execute arbitrar

28RISCO

abrir ↗

Referência✓ VexDay Proof

empris r20020923 - 'phormationdir' Remote File Inclusion

CVE-2006-2962—webappsphp

PHP remote file inclusion vulnerability in sql_fcnsOLD.php in Emergenices Personnel Information System (Empris) 20020923

23RISCO

abrir ↗

Referência✓ VexDay Proof

Enterprise Payroll Systems 1.1 - 'footer' Remote File Inclusion

CVE-2006-2982—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Enterprise Timesheet and Payroll Systems (EPS) 1.1 and earlier all

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebprojectDB 0.1.3 - 'INCDIR' Remote File Inclusion

CVE-2006-2995—webappsphp

Multiple PHP remote file inclusion vulnerabilities in WebprojectDB 0.1.3 and earlier allow remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

aePartner 0.8.3 - 'dir[data]' Remote File Inclusion

CVE-2006-2996—webappsphp

PHP remote file inclusion vulnerability in inc/design.inc.php in LoveCompass aePartner 0.8.3 and earlier allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

free QBoard 1.1 - 'qb_path' Remote File Inclusion

CVE-2006-2998—webappsphp

PHP remote file inclusion vulnerability in board/post.php in free QBoard 1.1 and earlier allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

Enthrallweb ePhotos 1.0 - 'subLevel2.asp' SQL Injection

CVE-2006-3027—webappsasp

Multiple SQL injection vulnerabilities in Enthrallwebe ePhotos 2.2 and earlier allow remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ad Manager Pro 2.6 - 'ipath' Remote File Inclusion

CVE-2006-3192—webappsphp

PHP remote file inclusion vulnerability in Ad Manager Pro 2.6 allows remote attackers to execute arbitrary PHP code via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component MoSpray 18RC1 - Remote File Inclusion

CVE-2006-3847—webappsphp

PHP remote file inclusion vulnerability in (1) admin.php, and possibly (2) details.php, (3) modify.php, (4) newgroup.php

23RISCO

abrir ↗

Referência✓ VexDay Proof

X7 Chat 2.0.4 - 'old_prefix' Blind SQL Injection

CVE-2006-3851—webappsphp

SQL injection vulnerability in upgradev1.php in X7 Chat 2.0.4 and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component User Home Pages 0.5 - Remote File Inclusion

CVE-2006-3995—webappsphp

Multiple PHP remote file inclusion vulnerabilities in (1) uhp_config.php, and possibly (2) footer.php, (3) functions.php

28RISCO

abrir ↗

Referência✓ VexDay Proof

Kayako eSupport 2.3.1 - 'subd' Remote File Inclusion

CVE-2006-4011—webappsphp

PHP remote file inclusion vulnerability in esupport/admin/autoclose.php in Kayako eSupport 2.3.1 and earlier, when regis

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyBloggie 2.1.4 - 'trackback.php' Multiple SQL Injections

CVE-2006-4042—webappsphp

Multiple SQL injection vulnerabilities in trackback.php in myWebland myBloggie 2.1.4 and earlier allow remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Torbstoff News 4 - 'pfad' Remote File Inclusion

CVE-2006-4045—webappsphp

PHP remote file inclusion vulnerability in news.php in Torbstoff News 4 allows remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência✓ VexDay Proof

Open Cubic Player 2.6.0pre6/0.1.10_rc5 - Multiple Local Buffer Overflows

CVE-2006-4046—localwindows

Multiple stack-based buffer overflows in Open Cubic Player 2.6.0pre6 and earlier for Windows, and 0.1.10_rc5 and earlier

28RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows Explorer - '.WMF' CreateBrushIndirect Denial of Service

CVE-2006-4071—doswindows

Sign extension vulnerability in the createBrushIndirect function in the GDI library (gdi32.dll) in Microsoft Windows XP,

28RISCO

abrir ↗

Referência✓ VexDay Proof

IRSR 0.2 - '_sysSessionPath' Remote File Inclusion

CVE-2006-4237—webappsphp

PHP remote file inclusion vulnerability in pageheaderdefault.inc.php in Invisionix Roaming System Remote (IRSR) 0.2 and

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.