Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.794exploits catalogados

36.057CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.459Referência 22.721GitHub PoC 14.946VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

smNews 1.0 - Authentication Bypass / Column Truncation

CVE-2009-0750—webappsphp

SQL injection vulnerability in login.php in the smNews example script for txtSQL 2.2 Final allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

Kusaba 1.0.4 - Remote Code Execution (2)

CVE-2008-5663—webappsphp

Multiple unrestricted file upload vulnerabilities in Kusaba 1.0.4 and earlier allow remote authenticated users to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

AdminBot 9.0.5 - 'live_status.lib.php' Remote File Inclusion

CVE-2007-2986—webappsphp

PHP remote file inclusion vulnerability in lib/live_status.lib.php in AdminBot MX 9.0.5 allows remote attackers to execu

35RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module xhresim - SQL Injection

CVE-2008-5665—webappsphp

SQL injection vulnerability in index.php in the xhresim module in XOOPS allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

SAWStudio 3.9i - '.prf' Local Buffer Overflow (PoC)

CVE-2008-5722—doswindows

Buffer overflow in SAWStudio 3.9i allows user-assisted remote attackers to cause a denial of service (application crash)

28RISCO

abrir ↗

Referência✓ VexDay Proof

PowerStrip 3.84 - 'pstrip.sys' Local Privilege Escalation

CVE-2008-5725—localwindows

The NT kernel-mode driver (aka pstrip.sys) 5.0.1.1 and earlier in EnTech Taiwan PowerStrip 3.84 and earlier allows local

23RISCO

abrir ↗

Referência✓ VexDay Proof

StormBoard 1.0.1 - SQL Injection

CVE-2008-5726—webappsphp

SQL injection vulnerability in thread.php in stormBoards 1.0.1 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

MDPro Module My_eGallery - 'pid' SQL Injection

CVE-2009-0728—webappsphp

SQL injection vulnerability in the My_eGallery module for MAXdev MDPro (MD-Pro) and Postnuke allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

CMS NetCat 3.12 - 'password_recovery.php' Blind SQL Injection

CVE-2008-5727—webappsphp

SQL injection vulnerability in modules/auth/password_recovery.php in AIST NetCat 3.12 and earlier, when magic_quotes_gpc

23RISCO

abrir ↗

Referência✓ VexDay Proof

CMS NetCat 3.12 - Multiple Vulnerabilities

CVE-2008-5730—webappsphp

Multiple CRLF injection vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to have an unknown impact

23RISCO

abrir ↗

Referência✓ VexDay Proof

PGP Desktop 9.0.6 - 'PGPwded.sys' Local Denial of Service

CVE-2008-5731—doswindows

The PGPwded device driver (aka PGPwded.sys) in PGP Corporation PGP Desktop 9.0.6 build 6060 and 9.9.0 build 397 allows l

23RISCO

abrir ↗

Referência✓ VexDay Proof

BLOG 1.55B - 'image_upload.php' Arbitrary File Upload

CVE-2008-5732—webappsphp

Unrestricted file upload vulnerability in lib/image_upload.php in KafooeyBlog 1.55b allows remote attackers to execute a

28RISCO

abrir ↗

Referência✓ VexDay Proof

Mynews 0.10 - Authentication Bypass

CVE-2009-0739—webappsphp

SQL injection vulnerability in login.php in MyNews 0.10 allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência✓ VexDay Proof

Calendar Script 1.1 - Authentication Bypass

CVE-2008-5737—webappsphp

SQL injection vulnerability in index.php in Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows Media Player - '.wav' Remote Crash (PoC)

CVE-2008-5745—doswindows

Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player (WMP) 9, 10, and 11, includ

28RISCO

abrir ↗

Referência✓ VexDay Proof

Google Chrome - 'ChromeHTML://' Remote Parameter Injection

CVE-2008-5750—remotewindows

Argument injection vulnerability in Microsoft Internet Explorer 8 beta 2 on Windows XP SP3 allows remote attackers to ex

28RISCO

abrir ↗

Referência✓ VexDay Proof

Alstrasoft Web Email Script Enterprise - 'id' SQL Injection

CVE-2008-5751—webappsphp

SQL injection vulnerability in index.php in AlstraSoft Web Email Script Enterprise (ESE) allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

BulletProof FTP Client - '.bps' Local Stack Overflow (PoC)

CVE-2008-5754—doswindows

Stack-based buffer overflow in BulletProof FTP Client allows user-assisted attackers to execute arbitrary code via a .bp

23RISCO

abrir ↗

Referência✓ VexDay Proof

BulletProof FTP Client 2009 - '.bps' Local Buffer Overflow (SEH)

CVE-2008-5754—localwindows

Stack-based buffer overflow in BulletProof FTP Client allows user-assisted attackers to execute arbitrary code via a .bp

23RISCO

abrir ↗

Referência✓ VexDay Proof

IntelliTamper 2.07/2.08 - '.map' Local Overwrite (SEH)

CVE-2008-5755—localwindows

Stack-based buffer overflow in IntelliTamper 2.07 and 2.08 allows remote attackers to execute arbitrary code via a MAP f

23RISCO

abrir ↗

Referência✓ VexDay Proof

Flatnux - html/JavaScript Injection Cookie Grabber

CVE-2008-5761—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allow remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simple Text-File Login script (SiTeFiLo) 1.0.6 - File Disclosure / Remote File Inclusion

CVE-2008-5763—webappsphp

PHP remote file inclusion vulnerability in slogin_lib.inc.php in Simple Text-File Login Script (SiTeFiLo) 1.0.6 allows r

35RISCO

abrir ↗

Referência✓ VexDay Proof

Gnews Publisher .NET - SQL Injection

CVE-2008-5767—webappsasp

SQL injection vulnerability in authors.asp in gNews Publisher allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Amevents - SQL Injection

CVE-2008-5768—webappsphp

SQL injection vulnerability in print.php in the AM Events (aka Amevents) module 0.22 for XOOPS allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP weather 2.2.2 - Local File Inclusion / Cross-Site Scripting

CVE-2008-5770—webappsphp

Cross-site scripting (XSS) vulnerability in config/make_config.php in PHP Weather 2.2.2 allows remote attackers to injec

23RISCO

abrir ↗

Referência✓ VexDay Proof

FLDS 1.2a - 'report.php' SQL Injection

CVE-2008-5778—webappsphp

SQL injection vulnerability in report.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Kipper 2.01 - Cross-Site Scripting / Local File Inclusion / File Disclosure

CVE-2009-0763—webappsphp

Cross-site scripting (XSS) vulnerability in default.php in Kipper 2.01 allows remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Referência✓ VexDay Proof

Forest Blog 1.3.2 - Remote Database Disclosure

CVE-2008-5780—webappsasp

Forest Blog 1.3.2 stores sensitive information under the web root with insufficient access control, which allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

V3 Chat Profiles/Dating Script 3.0.2 - Insecure Cookie Handling

CVE-2008-5784—webappsphp

V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to bypass authentication and gain administrative access b

23RISCO

abrir ↗

Referência✓ VexDay Proof

DELTAScripts PHP Classifieds 7.5 - SQL Injection

CVE-2008-5805—webappsphp

SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to exe

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.