Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.697exploits catalogados

36.715CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.475Referência 23.264GitHub PoC 15.172VulnCheck XDB 8.920Nuclei 4.373Metasploit 3.493✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Lanifex DMO 2.3b - '_incMgr' Remote File Inclusion

CVE-2006-4604—webappsphp

PHP remote file inclusion vulnerability in LFXlib/access_manager.php in Lanifex Database of Managed Objects (DMO) 2.3 Be

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-revista 1.1.2 - Remote File Inclusion / SQL Injection / Authentication Bypass / Cross-Site Scripting

CVE-2006-4605—webappsphp

PHP remote file inclusion vulnerability in index.php in Longino Jacome php-Revista 1.1.2 allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-revista 1.1.2 - Multiple SQL Injections

CVE-2006-4606—webappsphp

Multiple SQL injection vulnerabilities in Longino Jacome php-Revista 1.1.2 allow remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-revista 1.1.2 - Remote File Inclusion / SQL Injection / Authentication Bypass / Cross-Site Scripting

CVE-2006-4606—webappsphp

Multiple SQL injection vulnerabilities in Longino Jacome php-Revista 1.1.2 allow remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-revista 1.1.2 - Remote File Inclusion / SQL Injection / Authentication Bypass / Cross-Site Scripting

CVE-2006-4607—webappsphp

admin/index.php in Longino Jacome php-Revista 1.1.2 allows remote attackers to bypass authentication controls by setting

23RISCO

abrir ↗

Referência✓ VexDay Proof

ACGV News 0.9.1 - 'article.php' Remote File Inclusion

CVE-2006-4638—webappsphp

PHP remote file inclusion vulnerability in article.php in ACGV News 0.9.1 and earlier allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Muratsoft Haber Portal 3.6 - 'tr' SQL Injection

CVE-2006-4641—webappsasp

SQL injection vulnerability in kategori.asp in Muratsoft Haber Portal 3.6 allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

Akarru 0.4.3.34 - 'bm_content' Remote File Inclusion

CVE-2006-4645—webappsphp

PHP remote file inclusion vulnerability in akarru.gui/main_content.php in Akarru Social BookMarking Engine 0.4.3.34 and

23RISCO

abrir ↗

Referência✓ VexDay Proof

Shadowed Portal 5.599 - 'root' Remote File Inclusion

CVE-2006-4826—webappsphp

PHP remote file inclusion vulnerability in bottom.php in Shadowed Portal 5.599 and earlier allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

WTools 0.0.1a - 'INCLUDE_PATH' Remote File Inclusion

CVE-2006-4764—webappsphp

PHP remote file inclusion vulnerability in common.php in Thomas LETE WTools 0.0.1-ALPH allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

MiniPort@l 0.1.5 Beta - 'skiny' Remote File Inclusion

CVE-2006-4770—webappsphp

PHP remote file inclusion vulnerability in menu.php in MiniPort@l 2.0 and earlier allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

Vitrax Pre-modded 1.0.6-r3 - Remote File Inclusion

CVE-2006-4779—webappsphp

PHP remote file inclusion vulnerability in includes/functions_portal.php in Vitrax Premodded phpBB 1.0.6-R3 and earlier

23RISCO

abrir ↗

Referência✓ VexDay Proof

openmovieeditor 0.0.20060901 - 'name' Local Buffer Overflow

CVE-2006-4789—locallinux

Buffer overflow in Open Movie Editor 0.0.20060901 allows local users to cause a denial of service (system crash) or exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

TualBLOG 1.0 - 'icerikno' SQL Injection

CVE-2006-4793—webappsasp

Multiple SQL injection vulnerabilities in icerik.asp in TualBLOG 1.0 allow remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

TeamCal Pro 2.8.001 - 'app_root' Remote File Inclusion

CVE-2006-4845—webappsphp

PHP remote file inclusion vulnerability in includes/footer.html.inc.php in TeamCal Pro 2.8.001 and earlier allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Quicksilver Forums 1.2.1 - Remote File Inclusion

CVE-2006-4824—webappsphp

PHP remote file inclusion vulnerability in lib/activeutil.php in Quicksilver Forums (QSF) 1.2.1 and earlier allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pie Cart Pro - 'Home_Path' Remote File Inclusion

CVE-2006-4970—webappsphp

PHP remote file inclusion vulnerability in enc/content.php in WAHM E-Commerce Pie Cart Pro allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpQuiz 0.1.2 - SQL Injection / Code Execution

CVE-2006-4978—webappsphp

Multiple SQL injection vulnerabilities in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Blue Dragon CMS 2.9.1 - Cross-Site Scripting / SQL Injection Code Execution

CVE-2006-4962—webappsphp

Directory traversal vulnerability in pbd_engine.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to read

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Blue Dragon CMS 3.0.0 - Remote Code Execution

CVE-2006-4962—webappsphp

Directory traversal vulnerability in pbd_engine.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to read

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpQuestionnaire 3.12 - 'phpQRootDir' Remote File Inclusion

CVE-2006-4966—webappsphp

PHP remote file inclusion vulnerability in inc/ifunctions.php in chumpsoft phpQuestionnaire (phpQ) 3.12 allows remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

PNPHPBB2 < 1.2g - 'phpbb_root_path' Remote File Inclusion

CVE-2006-4968—webappsphp

PHP remote file inclusion vulnerability in includes/functions_admin.php in PNphpBB 1.2g allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

faceStones personal 2.0.42 - 'fs_form_links.php' File Inclusion

CVE-2006-5070—webappsphp

PHP remote file inclusion vulnerability in fsl2/objects/fs_form_links.php in faceStones Personal 2.0.42 and earlier allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Polaring 0.04.03 - 'general.php' Remote File Inclusion

CVE-2006-5078—webappsphp

PHP remote file inclusion vulnerability in view/general.php in Kristian Niemi Polaring 00.04.03 and earlier allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

paBugs 2.0 Beta 3 - 'class.mysql.php' Remote File Inclusion

CVE-2006-5079—webappsphp

PHP remote file inclusion vulnerability in class.mysql.php in Matt Humphrey paBugs 2.0 Beta 3 and earlier allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

evoBB 0.3 - 'path' Remote File Inclusion

CVE-2006-5087—webappsphp

Multiple PHP remote file inclusion vulnerabilities in evoBB 0.3 and earlier allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

A-Blog 2.0 - 'menu.php' Remote File Inclusion

CVE-2006-5092—webappsphp

PHP remote file inclusion vulnerability in navigation/menu.php in A-Blog 2 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

TagIt! Tagboard 2.1.b b2 - 'index.php' Remote File Inclusion

CVE-2006-5093—webappsphp

PHP remote file inclusion vulnerability in index.php in Tagmin Control Center in TagIt! Tagboard 2.1.B Build 2 allows re

23RISCO

abrir ↗

Referência✓ VexDay Proof

Linksys WRT54G Firmware 1.00.9 - Security Bypass (2)

CVE-2006-5202—remotehardware

Linksys WRT54g firmware 1.00.9 does not require credentials when making configuration changes, which allows remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

Invision Gallery 2.0.7 - 'readfile()' / SQL Injection

CVE-2006-5206—webappsphp

SQL injection vulnerability in Invision Gallery 2.0.7 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.