Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.589exploits catalogados

34.508CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.554GitHub PoC 13.689VulnCheck XDB 8.216Nuclei 4.223Metasploit 3.464✓ só verificadosrecentes populares risco

21.534 exploits

Referência✓ VexDay Proof

Webavis 0.1.1 - 'class.php?root' Remote File Inclusion

CVE-2007-2943—webappsphp

PHP remote file inclusion vulnerability in class/class.php in Webavis 0.1.1 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Somery 0.4.6 - 'skin_dir' Remote File Inclusion

CVE-2007-0704—webappsphp

PHP remote file inclusion vulnerability in install.php in Somery 0.4.6 allows remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência✓ VexDay Proof

LimeSurvey 1.52 - 'language.php' Remote File Inclusion

CVE-2007-5573—webappsphp

PHP remote file inclusion vulnerability in classes/core/language.php in LimeSurvey 1.5.2 and earlier allows remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyForum 1.3 - Insecure Cookie Handling

CVE-2008-5040—webappsphp

Graphiks MyForum 1.3 allows remote attackers to bypass authentication and gain administrative access by setting the (1)

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ninja Blog 4.8 - Remote Information Disclosure

CVE-2009-0325—webappsphp

Directory traversal vulnerability in entries/index.php in Ninja Blog 4.8, when magic_quotes_gpc is disabled, allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpYabs 0.1.2 - 'Azione' Remote File Inclusion

CVE-2009-0639—webappsphp

PHP remote file inclusion vulnerability in moduli/libri/index.php in phpyabs 0.1.2 allows remote attackers to execute ar

23RISCO

abrir ↗

Referência

CVE-2010-2508

CVE-2010-2508—

SQL injection vulnerability in user-profile.php in 2daybiz Video Community Portal Script allows remote attackers to exec

23RISCO

abrir ↗

Referência

CVE-2012-6643

CVE-2012-6643—

Multiple SQL injection vulnerabilities in the update_counter function in includes/functions.php in ClipBucket 2.6 allow

23RISCO

abrir ↗

Referência

CVE-2010-2510

CVE-2010-2510—

SQL injection vulnerability in customize.php in 2daybiz Web Template Software allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

CVE-2010-2511

CVE-2010-2511—

SQL injection vulnerability in viewnews.php in 2daybiz Multi Level Marketing (MLM) Software allows remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2013-5694

CVE-2013-5694—

SQL injection vulnerability in status/service/acknowledge in Opsview before 4.4.1 allows remote attackers to execute arb

23RISCO

abrir ↗

Referência

CVE-2013-5694

CVE-2013-5694—

SQL injection vulnerability in status/service/acknowledge in Opsview before 4.4.1 allows remote attackers to execute arb

23RISCO

abrir ↗

Referência

CVE-2017-9979

CVE-2017-9979—

On the OSNEXUS QuantaStor v4 virtual appliance before 4.3.1, if the REST call invoked does not exist, an error will be t

23RISCO

abrir ↗

Referência

CVE-2017-9979

CVE-2017-9979—

On the OSNEXUS QuantaStor v4 virtual appliance before 4.3.1, if the REST call invoked does not exist, an error will be t

23RISCO

abrir ↗

Referência

CVE-2009-5103

CVE-2009-5103—

Cross-site scripting (XSS) vulnerability in ATCOM Netvolution 1.0 ASP allows remote attackers to inject arbitrary web sc

23RISCO

abrir ↗

Referência

CVE-2018-16156

CVE-2018-16156—

In PaperStream IP (TWAIN) 1.42.0.5685 (Service Update 7), the FJTWSVIC service running with SYSTEM privilege processes u

23RISCO

abrir ↗

Referência

CVE-2017-11823

CVE-2017-11823—

The Microsoft Device Guard on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security

23RISCO

abrir ↗

Referência✓ VexDay Proof

Explay CMS 2.1 - Insecure Cookie Handling

CVE-2008-6411—webappsphp

Explay CMS 2.1 and earlier allows remote attackers to bypass authentication and gain administrative access by setting th

23RISCO

abrir ↗

Referência✓ VexDay Proof

Vivvo Article Manager 3.2 - 'id' SQL Injection

CVE-2006-4715—webappsphp

SQL injection vulnerability in pdf_version.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and earl

23RISCO

abrir ↗

Referência✓ VexDay Proof

Enthrallweb eCoupons 1.0 - 'myprofile.asp' Remote Pass Change

CVE-2006-6820—webappsasp

myprofile.asp in Enthrallweb eCoupons does not properly validate the MM_recordId parameter during profile updates, which

23RISCO

abrir ↗

Referência✓ VexDay Proof

Stash 1.0.3 - Insecure Cookie Handling

CVE-2008-4081—webappsphp

admin/login.php in Stash 1.0.3 allows remote attackers to bypass authentication and gain administrative access by settin

23RISCO

abrir ↗

Referência✓ VexDay Proof

Enthrallweb eNews 1.0 - Remote User Pass Change

CVE-2006-6821—webappsasp

myprofile.asp in Enthrallweb eNews does not properly validate the MM_recordId parameter during profile updates, which al

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bux.to Clone Script - Insecure Cookie Handling

CVE-2008-6162—webappsphp

Bux.to Clone script allows remote attackers to bypass authentication and gain administrative access by setting the logge

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyPicGallery 1.0 - Arbitrary Add Admin

CVE-2008-2347—webappsphp

MyPicGallery 1.0 allows remote attackers to bypass application authentication and gain administrative access by setting

23RISCO

abrir ↗

Referência✓ VexDay Proof

Atomic Photo Album 1.1.0pre4 - Insecure Cookie Handling

CVE-2008-4714—webappsphp

Atomic Photo Album 1.1.0 pre4 does not properly handle the apa_cookie_login and apa_cookie_password cookies, which proba

23RISCO

abrir ↗

Referência✓ VexDay Proof

A+ PHP Scripts - Nms Insecure Cookie Handling

CVE-2008-6667—webappsphp

A+ PHP Scripts News Management System (NMS) allows remote attackers to bypass authentication and gain administrator priv

23RISCO

abrir ↗

Referência✓ VexDay Proof

SG Real Estate Portal 2.0 - Insecure Cookie Handling

CVE-2008-6009—webappsphp

SG Real Estate Portal 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the

23RISCO

abrir ↗

Referência✓ VexDay Proof

OpenInvoice 0.9 - Arbitrary Change User Password

CVE-2008-6523—webappsphp

auth.php in openInvoice 0.90 beta and earlier allows remote attackers to bypass authentication and gain privileges by se

23RISCO

abrir ↗

Referência✓ VexDay Proof

Esqlanelapse Software Project 2.6.2 - Insecure Cookie Handling

CVE-2008-7019—webappsphp

Esqlanelapse 2.6.1 and 2.6.2 allows remote attackers to bypass authentication and gain privileges via modified (1) enomb

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyShoutPro 1.2 - Final Insecure Cookie Handling

CVE-2008-6738—webappsphp

MyShoutPro 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the admin_acce

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.