Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.338exploits catalogados

36.057CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.721GitHub PoC 14.491VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

TR News 2.1 - 'nb' SQL Injection

CVE-2008-1957—webappsphp

SQL injection vulnerability in news.php in Tr Script News 2.1 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP iCalendar 2.24 - 'cookie_language' Local File Inclusion / Arbitrary File Upload

CVE-2008-5968—webappsphp

Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and earlier allows remote attackers to include and

23RISCO

abrir ↗

Referência✓ VexDay Proof

AllMyGuests 0.4.1 - 'AMG_id' SQL Injection

CVE-2008-1961—webappsphp

SQL injection vulnerability in index.php in Voice Of Web AllMyGuests 0.4.1 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Aterr 0.9.1 - PHP5 Local File Inclusion

CVE-2008-1962—webappsphp

Multiple directory traversal vulnerabilities in Aterr 0.9.1 allow remote attackers to include and execute arbitrary loca

23RISCO

abrir ↗

Referência✓ VexDay Proof

Acidcat CMS 3.4.1 - Multiple Vulnerabilities

CVE-2008-1990—webappsphp

Multiple SQL injection vulnerabilities in Acidcat CMS 3.4.1 allow remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Watchfire Appscan 7.0 - ActiveX Multiple Insecure Methods

CVE-2008-2015—remotewindows

Multiple absolute path traversal vulnerabilities in certain ActiveX controls in WatchFire AppScan 7.0 allow remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

Megabbs Forum 2.2 - SQL Injection / Cross-Site Scripting

CVE-2008-2023—webappsasp

Multiple SQL injection vulnerabilities in PD9 Software MegaBBS 2.2 allow remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

Uploader & Downloader 3.0 - 'id_user' SQL Injection

CVE-2006-6716—webappsphp

SQL injection vulnerability in administration/administre2.php in Eric GUILLAUME uploader&downloader 3 allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bandwebsite 1.5 - 'LOGIN' Remote Add Admin

CVE-2006-6722—webappsphp

Bandwebsite (aka Bandsite portal system) 1.5 allows remote attackers to create administrative accounts via a direct requ

23RISCO

abrir ↗

Referência✓ VexDay Proof

MiniBB 2.2 - Cross-Site Scripting / SQL Injection / Full Path Disclosure

CVE-2008-2024—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in miniBB 2.2, and possibly earlier, when register_globals is enab

23RISCO

abrir ↗

Referência✓ VexDay Proof

MiniBB 2.2 - Cross-Site Scripting / SQL Injection / Full Path Disclosure

CVE-2008-2029—webappsphp

Multiple SQL injection vulnerabilities in (1) setup_mysql.php and (2) setup_options.php in miniBB 2.2 and possibly earli

23RISCO

abrir ↗

Referência✓ VexDay Proof

Siteman 2.x - Code Execution / Local File Inclusion / Cross-Site Scripting

CVE-2008-2081—webappsphp

Directory traversal vulnerability in index.php in Siteman 2.0.x2 allows remote authenticated administrators to include a

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Forge 3 Beta 2 - 'id' SQL Injection

CVE-2008-2088—webappsphp

SQL injection vulnerability in admin/news.php in PHP Forge 3.0 beta 2 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component FlippingBook 1.0.4 - SQL Injection

CVE-2008-2095—webappsphp

SQL injection vulnerability in index.php in the FlippingBook (com_flippingbook) 1.0.4 component for Joomla! allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

BackLinkSpider 1.1 - 'cat_id' SQL Injection

CVE-2008-2096—webappsphp

SQL injection vulnerability in BackLinkSpider allows remote attackers to execute arbitrary SQL commands via the cat_id p

23RISCO

abrir ↗

Referência✓ VexDay Proof

Netartmedia Jobs Portal 1.3 - Multiple SQL Injections

CVE-2008-6030—webappsphp

Multiple SQL injection vulnerabilities in NetArtMedia Jobs Portal 1.3 allow remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

WSN Links 2.22/2.23 - 'vote.php' SQL Injection

CVE-2008-6031—webappsphp

SQL injection vulnerability in vote.php in WSN Links 2.22 and 2.23 allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pre Shopping Mall 1.1 - 'search.php' SQL Injection

CVE-2008-2114—webappsphp

SQL injection vulnerability in emall/search.php in Pre Shopping Mall 1.1 allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

MusicBox 2.3.7 - 'artistId' SQL Injection

CVE-2008-2125—webappsphp

SQL injection vulnerability in viewalbums.php in Musicbox 2.3.6 and 2.3.7 allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

Galleristic 1.0 - 'cat' SQL Injection

CVE-2008-2129—webappsphp

SQL injection vulnerability in index.php in Galleristic 1.0, when magic_quotes_gpc is disabled, allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

PostcardMentor - 'cat_fldAuto' SQL Injection

CVE-2008-2132—webappsasp

SQL injection vulnerability in step1.asp in Systementor PostcardMentor allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

BlogMe PHP 1.1 - 'comments.php' SQL Injection

CVE-2008-2175—webappsphp

SQL injection vulnerability in comments.php in Gamma Scripts BlogMe PHP 1.1 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cplinks 1.03 - Authentication Bypass / SQL Injection / Cross-Site Scripting

CVE-2008-2180—webappsphp

Multiple SQL injection vulnerabilities in cpLinks 1.03, when magic_quotes_gpc is disabled, allow remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

PostNuke Module pnEncyclopedia 0.2.0 - SQL Injection

CVE-2008-2191—webappsphp

SQL injection vulnerability in the pnEncyclopedia module 0.2.0 and earlier for PostNuke allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

LoudBlog 0.8.0a - 'ajax.php' SQL Injection

CVE-2008-6077—webappsphp

SQL injection vulnerability in loudblog/ajax.php in LoudBlog 0.8.0a and earlier allows remote authenticated users to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Miniweb 2.0 - 'historymonth' SQL Injection

CVE-2008-2197—webappsphp

SQL injection vulnerability in the blogwriter module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Content Management System for Phprojekt 0.6.1 - File Disclosure

CVE-2008-2217—webappsphp

Directory traversal vulnerability in cm/graphie.php in Content Management System 0.6.1 for Phprojekt allows remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows - InternalOpenColorProfile Heap Overflow (PoC) (MS08-046)

CVE-2008-2245—doswindows

Heap-based buffer overflow in the InternalOpenColorProfile function in mscms.dll in Microsoft Windows Image Color Manage

35RISCO

abrir ↗

Referência✓ VexDay Proof

Informium 0.12.0 - 'common-menu.php' Remote File Inclusion

CVE-2006-2818—webappsphp

PHP remote file inclusion vulnerability in common-menu.php in Cameron McKay Informium 0.12.0 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Linkspile - 'cat_id' SQL Injection

CVE-2008-2263—webappsphp

SQL injection vulnerability in linking.page.php in Automated Link Exchange Portal allows remote attackers to execute arb

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.