Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.631exploits catalogados

34.540CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.579GitHub PoC 13.698VulnCheck XDB 8.216Nuclei 4.228Metasploit 3.467✓ só verificadosrecentes populares risco

21.554 exploits

Referência✓ VexDay Proof

Tuned Studios Templates - Local File Inclusion

CVE-2008-0231—webappsphp

Multiple directory traversal vulnerabilities in index.php in Tuned Studios (1) Subwoofer, (2) Freeze Theme, (3) Orange C

23RISCO

abrir ↗

Referência✓ VexDay Proof

BigACE 2.4 - Multiple Remote File Inclusions

CVE-2008-2520—webappsphp

Multiple PHP remote file inclusion vulnerabilities in BigACE 2.4, when register_globals is enabled, allow remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Ring Webring System 0.9.1 - Insecure Cookie Handling

CVE-2008-3602—webappsphp

admin/wr_admin.php in PHP-Ring Webring System (aka uPHP_ring_website) 0.9.1 allows remote attackers to bypass authentica

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mini Blog 1.0.1 - 'index.php' Multiple Local File Inclusions

CVE-2008-5594—webappsphp

Multiple directory traversal vulnerabilities in index.php in Mini Blog 1.0.1 allow remote attackers to include and execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

AJ Auction - Authentication Bypass

CVE-2008-6966—webappsphp

AJ Square AJ Auction Pro Platinum Skin #1 sends a redirect but does not exit when it is called directly, which allows re

23RISCO

abrir ↗

Referência

CVE-2009-3317

CVE-2009-3317—

PHP remote file inclusion vulnerability in pages/pageHeader.php in OpenSiteAdmin 0.9.7 BETA allows remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2010-2694

CVE-2010-2694—

SQL injection vulnerability in the redSHOP Component (com_redshop) 1.0 for Joomla! allows remote attackers to execute ar

23RISCO

abrir ↗

Referência

CVE-2016-2782

CVE-2016-2782—

The treo_attach function in drivers/usb/serial/visor.c in the Linux kernel before 4.5 allows physically proximate attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

AssoCIateD CMS 1.1.3 - 'ROOT_PATH' Remote File Inclusion

CVE-2006-2841—webappsphp

Multiple PHP remote file inclusion vulnerabilities in AssoCIateD (aka ACID) CMS 1.1.3 allow remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2014-5284

CVE-2014-5284—

host-deny.sh in OSSEC before 2.8.1 writes to temporary files with predictable filenames without verifying ownership, whi

23RISCO

abrir ↗

Referência

CVE-2018-9173

CVE-2018-9173—

Cross-site scripting (XSS) vulnerability in admin/template/js/uploadify/uploadify.swf in GetSimple CMS 3.3.13 allows rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

Phaos 0.9.2 - 'basename()' Remote Command Execution

CVE-2006-4420—webappsphp

Directory traversal vulnerability in include_lang.php in Phaos 0.9.2 allows remote attackers to include arbitrary local

23RISCO

abrir ↗

Referência

CVE-2016-1000125

CVE-2016-1000125—

Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla

23RISCO

abrir ↗

Referência✓ VexDay Proof

NuralStorm Webmail 0.98b - 'process.php' Remote File Inclusion

CVE-2006-5386—webappsphp

PHP remote file inclusion vulnerability in process.php in NuralStorm Webmail 0.98b and earlier, when register_globals is

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ultimate HelpDesk - Cross-Site Scripting / Local File Disclosure

CVE-2006-6381—webappsasp

Directory traversal vulnerability in getfile.asp in Ultimate HelpDesk allows remote attackers to read arbitrary files vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASP-Nuke Community 1.5 - Cookie Privilege Escalation

CVE-2006-7152—webappsasp

default.asp in ASP-Nuke Community 1.5 and earlier allows remote attackers to gain privileges by setting certain pseudo c

23RISCO

abrir ↗

Referência✓ VexDay Proof

McGallery 0.5b - 'download.php' Arbitrary File Download

CVE-2007-1478—webappsphp

download.php in McGallery 0.5b allows remote attackers to read arbitrary files and obtain script source code via the fil

23RISCO

abrir ↗

Referência✓ VexDay Proof

PBLang 4.67.16.a - Remote Code Execution

CVE-2007-3096—webappsphp

Directory traversal vulnerability in login.php in PBLang (PBL) 4.67.16.a and earlier, when magic_quotes_gpc is disabled,

23RISCO

abrir ↗

Referência✓ VexDay Proof

MD-Pro 1.0.76 - SQL Injection

CVE-2007-5222—webappsphp

SQL injection vulnerability in index.php in MAXdev MDPro (MD-Pro) 1.0.76 allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

Evilsentinel 1.0.9 - Multiple Vulnerabilities Disable

CVE-2008-0350—webappsphp

admin/index.php in Evilsentinel 1.0.9 and earlier sends a redirect to the web browser but does not exit, which allows re

23RISCO

abrir ↗

Referência✓ VexDay Proof

freePHPgallery 0.6 - Cookie Local File Inclusion

CVE-2008-0818—webappsphp

Multiple directory traversal vulnerabilities in freePHPgallery 0.6 allow remote attackers to include and execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Crawler 0.8 - Remote File Inclusion

CVE-2008-4137—webappsphp

PHP remote file inclusion vulnerability in footer.php in PHP-Crawler 0.8 allows remote attackers to execute arbitrary PH

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyBlog 0.9.8 - Insecure Cookie Handling

CVE-2008-4341—webappsphp

add.php in MyBlog 0.9.8 and earlier allows remote attackers to bypass authentication and gain administrative access by s

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fuzzylime CMS 3.03 - 'track.php' Local File Inclusion

CVE-2008-5291—webappsphp

Directory traversal vulnerability in code/track.php in FuzzyLime 3.03 allows remote attackers to include and execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

Maran PHP Shop - 'admin.php' Insecure Cookie Handling

CVE-2008-6296—webappsphp

admin.php in Maran PHP Shop allows remote attackers to bypass authentication and gain administrative access by setting t

23RISCO

abrir ↗

Referência✓ VexDay Proof

OpenForum 0.66 Beta - Remote Reset Admin Password

CVE-2008-7066—webappsphp

OpenForum 0.66 Beta allows remote attackers to bypass authentication and reset passwords of other users via a direct req

23RISCO

abrir ↗

Referência✓ VexDay Proof

pivot 1.40.4-7 - Multiple Vulnerabilities

CVE-2009-2134—webappsphp

pivot/tb.php in Pivot 1.40.4 and 1.40.7 allows remote attackers to obtain sensitive information via an invalid url param

23RISCO

abrir ↗

Referência

CVE-2012-4266

CVE-2012-4266—

Cross-site scripting (XSS) vulnerability in client_details.php in Proman Xpress 5.0.1 allows remote attackers to inject

23RISCO

abrir ↗

Referência

CVE-2011-5209

CVE-2011-5209—

Cross-site scripting (XSS) vulnerability in search/ in GraphicsClone Script, possibly 1.11, allows remote attackers to i

23RISCO

abrir ↗

Referência

CVE-2012-4278

CVE-2012-4278—

Multiple cross-site scripting (XSS) vulnerabilities in Free Realty 3.1-0.6 allow remote attackers to inject arbitrary we

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.