Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.794exploits catalogados

36.057CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.459Referência 22.721GitHub PoC 14.946VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Joomla! Component com_allhotels - Blind SQL Injection

CVE-2008-5874—webappsphp

Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS) for Joomla! allow remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASP-DEV Internal E-Mail System - Authentication Bypass

CVE-2008-5926—webappsasp

Multiple SQL injection vulnerabilities in login.asp in ASP-DEv Internal E-Mail System allow remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

FlexPHPNews 0.0.6 / PRO - Authentication Bypass

CVE-2008-5927—webappsphp

Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPNews 0.0.6 allow remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

VP-ASP Shopping Cart 6.50 - Database Disclosure

CVE-2008-5929—webappsasp

VP-ASP Shopping Cart 6.50 stores sensitive information under the web root with insufficient access control, which allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

the net guys aspired2blog - SQL Injection / File Disclosure

CVE-2008-5931—webappsasp

The Net Guys ASPired2Blog stores sensitive information under the web root with insufficient access control, which allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

isweb CMS 3.0 - SQL Injection / Cross-Site Scripting

CVE-2008-5934—webappsphp

SQL injection vulnerability in index.php in CMS ISWEB 3.0 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

mini-pub 0.3 - Local Directory Traversal / File Disclosure

CVE-2008-5936—webappsphp

front-end/edit.php in mini-pub 0.3 and earlier allows remote attackers to read files and obtain PHP source code via a fi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Check Point Firewall-1 - PKI Web Service HTTP Header Remote Overflow

CVE-2009-1227—doshardware

NOTE: this issue has been disputed by the vendor. Buffer overflow in the PKI Web Service in Check Point Firewall-1 PKI

23RISCO

abrir ↗

Referência✓ VexDay Proof

Arcadwy Arcade Script - 'Username' Static Cross-Site Scripting

CVE-2009-1228—webappsphp

Cross-site scripting (XSS) vulnerability in register.php in Arcadwy Arcade Script CMS allows remote attackers to inject

23RISCO

abrir ↗

Referência✓ VexDay Proof

ccTiddly 1.7.4 - 'cct_base' Remote File Inclusion

CVE-2008-5949—webappsphp

Multiple PHP remote file inclusion vulnerabilities in ccTiddly 1.7.4 and 1.7.6 allow remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

template creature - SQL Injection / File Disclosure

CVE-2008-5950—webappsphp

SQL injection vulnerability in media/media_level.asp in ASP Template Creature allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

template creature - SQL Injection / File Disclosure

CVE-2008-5951—webappsphp

ASP Template Creature stores sensitive information under the web root with insufficient access control, which allows rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

KTP Computer Customer Database CMS 1.0 - Blind SQL Injection

CVE-2008-5952—webappsphp

SQL injection vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc is disabled, allows re

23RISCO

abrir ↗

Referência✓ VexDay Proof

Active Test 2.1 - 'QuizID' Blind SQL Injection

CVE-2008-5958—webappsasp

Multiple SQL injection vulnerabilities in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Active Test 2.1 - Authentication Bypass

CVE-2008-5959—webappsasp

Multiple SQL injection vulnerabilities in start.asp in Active Test 2.1 allow remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

isiAJAX 1 - 'praises.php?id' SQL Injection

CVE-2009-0881—webappsphp

SQL injection vulnerability in ejemplo/paises.php in isiAJAX 1 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mozilla Firefox 3.0.x - XML Parser Memory Corruption / Denial of Service (PoC)

CVE-2009-1232—doswindows

Mozilla Firefox 3.0.8 and earlier 3.0.x versions allows remote attackers to cause a denial of service (memory corruption

23RISCO

abrir ↗

Referência✓ VexDay Proof

Gravity Board X 2.0 Beta - SQL Injection / (Authenticated) Code Execution

CVE-2009-1277—webappsphp

SQL injection vulnerability in index.php in Gravity Board X (GBX) 2.0 BETA allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

EternalMart Guestbook 1.10 - '/admin/auth.php' Remote File Inclusion

CVE-2003-1314—webappsphp

PHP remote file inclusion vulnerability in admin/auth.php in EternalMart Guestbook (EMGB) 1.1 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpTrafficA 1.4.2 - 'pageid' SQL Injection

CVE-2007-3427—webappsphp

SQL injection vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ocean12 Mailing List Manager Gold - File Disclosure / SQL Injection / Cross-Site Scripting

CVE-2008-5978—webappsphp

Multiple SQL injection vulnerabilities in Ocean12 Mailing List Manager Gold allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Jetik Emlak ESA 2.0 - Multiple SQL Injections

CVE-2008-5992—webappsphp

Multiple SQL injection vulnerabilities in Jetik Emlak Sistem A (ESA) 2.0 allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

webcp 0.5.7 - 'filelocation' Remote File Disclosure

CVE-2008-6002—webappsphp

Absolute path traversal vulnerability in sendfile.php in web-cp 0.5.7, when register_globals is enabled, allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

SuperCali PHP Event Calendar 0.4.0 - SQL Injection

CVE-2007-3582—webappsphp

SQL injection vulnerability in index.php in SuperCali PHP Event Calendar 0.4.0 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Easy RM to MP3 Converter - Universal Stack Overflow

CVE-2009-1330—localwindows

Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long fil

28RISCO

abrir ↗

Referência✓ VexDay Proof

WSN Links 2.20 - 'comments.php' SQL Injection

CVE-2008-6033—webappsphp

SQL injection vulnerability in comments.php in WSN Links 2.20 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

AvailScript Article Script - 'view.php' SQL Injection

CVE-2008-6037—webappsphp

SQL injection vulnerability in view.php in AvailScript Article Script allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

PowerCHM 5.7 - Long URL Local Stack Overflow (PoC)

CVE-2009-1352—doswindows

Stack-based buffer overflow in Dawningsoft PowerCHM 5.7 allows remote attackers to cause a denial of service (applicatio

23RISCO

abrir ↗

Referência✓ VexDay Proof

Netartmedia Real Estate Portal 1.2 - SQL Injection

CVE-2008-6042—webappsphp

SQL injection vulnerability in the re_search module in NetArtMedia Real Estate Portal 2.0 allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

DomPHP 0.81 - 'cat' SQL Injection

CVE-2008-6064—webappsphp

Multiple SQL injection vulnerabilities in DomPHP 0.81 allow remote attackers to execute arbitrary SQL commands via the c

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.