Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.958exploits catalogados

36.206CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.832GitHub PoC 14.991VulnCheck XDB 8.829Nuclei 4.357Metasploit 3.489✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Iamma Simple Gallery 1.0/2.0 - Arbitrary File Upload

CVE-2008-6084—webappsphp

Unrestricted file upload vulnerability in pages/download.php in Iamma Simple Gallery 1.0 and 2.0 allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Camera Life 2.6.2b4 - SQL Injection / Cross-Site Scripting

CVE-2008-6086—webappsphp

SQL injection vulnerability in album.php in Camera Life 2.6.2b4 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Joomtracker 1.01 - SQL Injection

CVE-2008-6088—webappsphp

SQL injection vulnerability in the Joomtracker (com_joomtracker) 1.01 module for Joomla! allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

BMForum 5.6 - 'tagname' SQL Injection

CVE-2008-6091—webappsphp

SQL injection vulnerability in plugins.php in BMForum 5.6, when magic_quotes_gpc is disabled, allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpscripts Ranking Script - Insecure Cookie Handling

CVE-2008-6092—webappsphp

phpscripts Ranking Script allows remote attackers to bypass authentication and gain administrative access by sending an

23RISCO

abrir ↗

Referência✓ VexDay Proof

Noname CMS 1.0 - Multiple SQL Injections

CVE-2008-6093—webappsphp

SQL injection vulnerability in index.php in Noname CMS 1.0, when magic_quotes_gpc is disabled, allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Discussion Forums 2k 3.3 - Multiple SQL Injections

CVE-2008-6100—webappsphp

Multiple SQL injection vulnerabilities in Discussion Forums 2k 3.3, when magic_quotes_gpc is disabled, allow remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

ZeroShell 1.0beta11 - Remote Code Execution

CVE-2009-0545—remotehardware

cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell meta

60RISCO

abrir ↗

Referência✓ VexDay Proof

e107 Plugin ZoGo-Shop 1.15.4 - 'product' SQL Injection

CVE-2008-6114—webappsphp

SQL injection vulnerability in product_details.php in the Mytipper Zogo-shop 1.15.4 plugin for e107 allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Thyme 1.0 - SQL Injection

CVE-2008-6116—webappsphp

SQL injection vulnerability in the EXtrovert Software Thyme (com_thyme) 1.0 component for Joomla! allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

Goople CMS 1.7 - Insecure Cookie Handling

CVE-2008-6118—webappsphp

win/content/upload.php in Goople CMS 1.7 allows remote attackers to bypass authentication and gain administrative access

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Generic library & Framework - 'INCLUDE_PATH' Remote File Inclusion

CVE-2007-0584—webappsphp

PHP remote file inclusion vulnerability in membres/membreManager.php in PhP Generic Library & Framework for comm (g-neri

35RISCO

abrir ↗

Referência✓ VexDay Proof

EnjoySAP ActiveX kweditcontrol.kwedit.1 - Remote Stack Overflow (PoC)

CVE-2007-3605—doswindows

Stack-based buffer overflow in the kweditcontrol.kwedit.1 ActiveX control in FrontEnd\SapGui\kwedit.dll in the EnjoySAP

50RISCO

abrir ↗

Referência✓ VexDay Proof

Novell eDirectory < 8.7.3 SP 10 / 8.8.2 - HTTP headers Denial of Service

CVE-2008-0927—doswindows

dhost.exe in Novell eDirectory 8.7.3 before sp10 and 8.8.2 allows remote attackers to cause a denial of service (CPU con

45RISCO

abrir ↗

Referência✓ VexDay Proof

Full PHP Emlak Script - 'arsaprint.php' SQL Injection

CVE-2008-6133—webappsphp

SQL injection vulnerability in arsaprint.php in Full PHP Emlak Script allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebBiscuits Modules Controller 1.1 - Remote File Inclusion / Remote File Disclosure

CVE-2008-6139—webappsphp

Directory traversal vulnerability in faqsupport/wce.download.php in WebBiscuits Modules Controller 1.1 allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

Flexphpic 0.0.x - Authentication Bypass

CVE-2008-6142—webappsphp

Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPic 0.0.4 and FlexPHPic Pro 0.0.3, and other 0.0.

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpMyAdmin - '/scripts/setup.php' PHP Code Injection

CVE-2009-1151CRITICALsob ataquewebappsphp

Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows remo

100RISCO

abrir ↗

Referência✓ VexDay Proof

OwenPoll 1.0 - Insecure Cookie Handling

CVE-2008-6143—webappsphp

OwenPoll 1.0 allows remote attackers to bypass authentication and obtain administrative access via a modified account na

23RISCO

abrir ↗

Referência✓ VexDay Proof

DeluxeBB 1.2 - Blind SQL Injection

CVE-2008-6146—webappsphp

SQL injection vulnerability in pm.php in DeluxeBB 1.2 and earlier, when magic_quotes_gpc is disabled, allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Live Ticker 1.0 - Blind SQL Injection

CVE-2008-6148—webappsphp

SQL injection vulnerability in the Live Ticker (com_liveticker) module 1.0 for Joomla! allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sepcity Classified - 'ID' SQL Injection

CVE-2008-6150—webappsasp

SQL injection vulnerability in classdis.asp in SepCity Classified Ads allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sepcity Shopping Mall - SQL Injection

CVE-2008-6151—webappsasp

SQL injection vulnerability in shpdetails.asp in SepCity Shopping Mall allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sepcity Lawyer Portal - SQL Injection

CVE-2008-6152—webappsasp

SQL injection vulnerability in deptdisplay.asp in SepCity Faculty Portal allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pixel8 Web Photo Album 3.0 - SQL Injection

CVE-2008-6153—webappsasp

SQL injection vulnerability in Photo.asp in Jay Patel Pixel8 Web Photo Album 3.0 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

HispaH textlinksads - 'index.php' SQL Injection

CVE-2008-6154—webappsphp

SQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

AdMan 1.1.20070907 - 'campaignId' SQL Injection

CVE-2008-6156—webappsphp

SQL injection vulnerability in editCampaign.php in AdMan 1.1.20070907 allows remote authenticated users to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bux.to Clone Script - Insecure Cookie Handling

CVE-2008-6162—webappsphp

Bux.to Clone script allows remote attackers to bypass authentication and gain administrative access by setting the logge

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Kbase 1.0 - SQL Injection

CVE-2008-6166—webappsphp

SQL injection vulnerability in the KBase (com_kbase) 1.2 component for Joomla! allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

miniPortail 2.2 - Cross-Site Scripting / Local File Inclusion

CVE-2008-6167—webappsphp

Directory traversal vulnerability in search.php in miniPortail 2.2 and earlier allows remote attackers to include and ex

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.