Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.955exploits catalogados

36.205CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.832GitHub PoC 14.988VulnCheck XDB 8.829Nuclei 4.357Metasploit 3.489✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

phpTrafficA 1.4.2 - 'pageid' SQL Injection

CVE-2007-3427—webappsphp

SQL injection vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

Active Business Directory 2 - Blind SQL Injection

CVE-2008-5972—webappsphp

SQL injection vulnerability in default.asp in Active Business Directory 2 allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

Active Web Mail 4 - Authentication Bypass

CVE-2008-5973—webappsasp

SQL injection vulnerability in login.aspx in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

Active Price Comparison 4 - Authentication Bypass

CVE-2008-5974—webappsasp

Multiple SQL injection vulnerabilities in login.aspx in Active Price Comparison 4.0 allow remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ocean12 Mailing List Manager Gold - File Disclosure / SQL Injection / Cross-Site Scripting

CVE-2008-5978—webappsphp

Multiple SQL injection vulnerabilities in Ocean12 Mailing List Manager Gold allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Jetik Emlak ESA 2.0 - Multiple SQL Injections

CVE-2008-5992—webappsphp

Multiple SQL injection vulnerabilities in Jetik Emlak Sistem A (ESA) 2.0 allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

webcp 0.5.7 - 'filelocation' Remote File Disclosure

CVE-2008-6002—webappsphp

Absolute path traversal vulnerability in sendfile.php in web-cp 0.5.7, when register_globals is enabled, allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

SuperCali PHP Event Calendar 0.4.0 - SQL Injection

CVE-2007-3582—webappsphp

SQL injection vulnerability in index.php in SuperCali PHP Event Calendar 0.4.0 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Easy RM to MP3 Converter - Universal Stack Overflow

CVE-2009-1330—localwindows

Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long fil

28RISCO

abrir ↗

Referência✓ VexDay Proof

AJ Auction Pro Platinum - 'seller_id' SQL Injection

CVE-2008-6003—webappsphp

SQL injection vulnerability in sellers_othersitem.php in AJ Auction Pro Platinum 2 allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

BookMarks Favourites Script - 'id' SQL Injection

CVE-2008-6007—webappsphp

SQL injection vulnerability in view_group.php in QuidaScript BookMarks Favourites Script (APB) allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

SG Real Estate Portal 2.0 - Blind SQL Injection

CVE-2008-6011—webappsphp

SQL injection vulnerability in index.php in SG Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

SG Real Estate Portal 2.0 - Blind SQL Injection / Local File Inclusion

CVE-2008-6011—webappsphp

SQL injection vulnerability in index.php in SG Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Oracle APEX 3.2 - Unprivileged DB users can see APEX Password hashes

CVE-2009-0981—localmultiple

Unspecified vulnerability in the Application Express component in Oracle Database 11.1.0.7 allows remote authenticated u

23RISCO

abrir ↗

Referência✓ VexDay Proof

DeluxeBB 1.3 - 'qorder' SQL Injection

CVE-2009-1033—webappsphp

SQL injection vulnerability in misc.php in DeluxeBB 1.3 and earlier allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

I-Rater Basic - SQL Injection

CVE-2008-6017—webappsphp

SQL injection vulnerability in messages.php in I-Rater Basic allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBG 0.9.1 - 'rootdir' Remote File Inclusion

CVE-2007-4636—webappsphp

Multiple PHP remote file inclusion vulnerabilities in phpBG 0.9.1 allow remote attackers to execute arbitrary PHP code v

45RISCO

abrir ↗

Referência✓ VexDay Proof

Fez 1.3/2.0 RC1 - 'list.php' SQL Injection

CVE-2008-6028—webappsphp

SQL injection vulnerability in list.php in University of Queensland Library Fez 1.3 and 2.0 RC1 allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

BuzzyWall 1.3.1 - 'search' SQL Injection

CVE-2008-6029—webappsphp

SQL injection vulnerability in search.php in BuzzyWall 1.3.1 and earlier, when magic_quotes_gpc is disabled, allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Powl 0.94 - 'htmledit.php' Remote File Inclusion

CVE-2007-3371—webappsphp

PHP remote file inclusion vulnerability in plugins/widgets/htmledit/htmledit.php in Powl 0.94 allows remote attackers to

45RISCO

abrir ↗

Referência✓ VexDay Proof

WSN Links Free 4.0.34P - 'comments.php' Blind SQL Injection

CVE-2008-6032—webappsphp

SQL injection vulnerability in comments.php in WSN Links Free 4.0.34P allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bloginator 1a - Cookie Bypass / SQL Injection

CVE-2009-1049—webappsphp

SQL injection vulnerability in articleCall.php in Bloginator 1A allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

WSN Links 2.20 - 'comments.php' SQL Injection

CVE-2008-6033—webappsphp

SQL injection vulnerability in comments.php in WSN Links 2.20 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

AvailScript Article Script - 'view.php' SQL Injection

CVE-2008-6037—webappsphp

SQL injection vulnerability in view.php in AvailScript Article Script allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

PowerCHM 5.7 - Long URL Local Stack Overflow (PoC)

CVE-2009-1352—doswindows

Stack-based buffer overflow in Dawningsoft PowerCHM 5.7 allows remote attackers to cause a denial of service (applicatio

23RISCO

abrir ↗

Referência✓ VexDay Proof

Netartmedia Real Estate Portal 1.2 - SQL Injection

CVE-2008-6042—webappsphp

SQL injection vulnerability in the re_search module in NetArtMedia Real Estate Portal 2.0 allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

DomPHP 0.81 - 'cat' SQL Injection

CVE-2008-6064—webappsphp

Multiple SQL injection vulnerabilities in DomPHP 0.81 allow remote attackers to execute arbitrary SQL commands via the c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component JoomlaDate 1.2 - 'user' SQL Injection

CVE-2008-6068—webappsphp

SQL injection vulnerability in the JoomlaDate (com_joomladate) component 1.2 for Joomla! allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Daily Message 1.0.3 - 'id' SQL Injection

CVE-2008-6076—webappsphp

SQL injection vulnerability in the Daily Message (com_dailymessage) 1.0.3 component for Joomla! allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simple Customer 1.2 - 'contact.php' SQL Injection

CVE-2008-6081—webappsphp

SQL injection vulnerability in contact.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.