Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.958exploits catalogados

36.206CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.832GitHub PoC 14.991VulnCheck XDB 8.829Nuclei 4.357Metasploit 3.489✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

eMeeting Online Dating Software 5.2 - SQL Injection

CVE-2007-3609—webappsphp

Multiple SQL injection vulnerabilities in eMeeting Online Dating Software 5.2 allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Amaya 11.1 - W3C Editor/Browser 'defer' Remote Stack Overflow

CVE-2009-1209—remotewindows

Stack-based buffer overflow in W3C Amaya Web Browser 11.1 allows remote attackers to execute arbitrary code via a script

28RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component RWCards 3.0.11 - Local File Inclusion

CVE-2008-6172—webappsphp

Directory traversal vulnerability in captcha/captcha_image.php in the RWCards (com_rwcards) 3.0.11 component for Joomla!

43RISCO

abrir ↗

Referência✓ VexDay Proof

SilverSHielD 1.0.2.34 - Denial of Service

CVE-2008-6175—doswindows

SilverSHielD 1.0.2.34 allows remote attackers to cause a denial of service (application crash) via a crafted argument to

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPVID 0.9.9 - 'categories_type.php' SQL Injection

CVE-2007-3610—webappsphp

SQL injection vulnerability in categories_type.php in phpVID 0.9.9 allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

pastelcms 0.8.0 - Local File Inclusion / SQL Injection

CVE-2009-1404—webappsphp

SQL injection vulnerability in admin.php in PastelCMS 0.8.0, when magic_quotes_gpc is disabled, allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

IndexScript 3.0 - 'parent_id' SQL Injection

CVE-2008-6179—webappsphp

SQL injection vulnerability in sug_cat.php in IndexScript 3.0 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component ownbiblio 1.5.3 - 'catid' SQL Injection

CVE-2008-6184—webappsphp

SQL injection vulnerability in the OwnBiblio (com_ownbiblio) component 1.5.3 for Joomla! allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

RaidenFTPd 2.4 build 3620 - Remote Denial of Service

CVE-2008-6186—doswindows

Stack-based buffer overflow in RaidenFTPD 2.4 build 3620 allows remote authenticated users to cause a denial of service

23RISCO

abrir ↗

Referência✓ VexDay Proof

Gforge 4.6 rc1 - 'skill_edit' SQL Injection

CVE-2008-6188—webappsphp

SQL injection vulnerability in people/editprofile.php in Gforge 4.6 rc1 and earlier allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyBB Plugin Custom Pages 1.0 - SQL Injection

CVE-2008-6198—webappsphp

SQL injection vulnerability in pages.php in Custom Pages 1.0 plugin for MyBulletinBoard (MyBB) allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

SerWeb 0.9.4 - 'load_lang.php' Remote File Inclusion

CVE-2007-3358—webappsphp

PHP remote file inclusion vulnerability in html/load_lang.php in SerWeb 0.9.6 and earlier allows remote attackers to exe

35RISCO

abrir ↗

Referência✓ VexDay Proof

TotalCalendar 2.4 - 'Include' Local File Inclusion

CVE-2009-1406—webappsphp

Directory traversal vulnerability in cms_detect.php in TotalCalendar 2.4 allows remote attackers to include and execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

2532/Gigs 1.2.2 - Arbitrary Database Backup/Download

CVE-2008-6199—webappsphp

2532designs 2532|Gigs 1.2.2 and earlier allows remote attackers to trigger a backup and obtain sensitive information via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cobalt 0.1 - Multiple SQL Injections

CVE-2008-6202—webappsasp

SQL injection vulnerability in CoBaLT 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter

23RISCO

abrir ↗

Referência✓ VexDay Proof

Harlandscripts Pro Traffic One - 'mypage.php' SQL Injection

CVE-2008-6213—webappsphp

SQL injection vulnerability in mypage.php in Harlandscripts Pro Traffic One allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Venalsur on-line Booking Centre - Cross-Site Scripting / SQL Injection

CVE-2008-6215—webappsphp

Cross-site scripting (XSS) vulnerability in cadena_ofertas_ext.php in Venalsur Booking Centre Booking System for Hotels

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simple Document Management System 1.1.4 - Authentication Bypass

CVE-2008-6220—webappsphp

SQL injection vulnerability in login.php in Simple Document Management System (SDMS) 1.1.5 and 1.1.4, and possibly earli

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Auto Listings - 'pg' SQL Injection

CVE-2008-6226—webappsphp

SQL injection vulnerability in moreinfo.php in Pre Projects PHP Auto Listings Script, when magic_quotes_gpc is disabled,

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sitellite CMS 4.2.12 - '559668.php' Remote File Inclusion

CVE-2007-3228—webappsphp

PHP remote file inclusion vulnerability in saf/lib/PEAR/PhpDocumentor/Documentation/tests/bug-559668.php in Sitellite CM

35RISCO

abrir ↗

Referência✓ VexDay Proof

glFusion 1.1.2 - 'COM_applyFilter()/cookies' Blind SQL Injection

CVE-2009-1282—webappsphp

SQL injection vulnerability in private/system/lib-session.php in glFusion 1.1.2 and earlier allows remote attackers to e

23RISCO

abrir ↗

Referência✓ VexDay Proof

PreProject Multi-Vendor Shopping Malls - Multiple Vulnerabilities

CVE-2008-6228—webappsphp

Pre Multi-Vendor Shopping Malls allows remote attackers to bypass authentication and gain administrative access by setti

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pre Shopping Mall - Insecure Cookie Handling

CVE-2008-6232—webappsphp

Pre Shopping Mall allows remote attackers to bypass authentication and gain administrative access by setting the (1) adm

23RISCO

abrir ↗

Referência✓ VexDay Proof

Harlandscripts drinks - 'recid' SQL Injection

CVE-2008-6233—webappsphp

SQL injection vulnerability in index.php in Five Dollar Scripts Drinks script allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component com_Musica - 'id' SQL Injection

CVE-2008-6234—webappsphp

SQL injection vulnerability in the com_musica module in Joomla! and Mambo allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

SFS EZ Software - 'id' SQL Injection

CVE-2008-6237—webappsphp

SQL injection vulnerability in software-description.php in Scripts For Sites (SFS) Hotscripts-like Site allows remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

Flexphpsite 0.0.1 - Authentication Bypass

CVE-2008-6241—webappsphp

Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPSite 0.0.1 and 0.0.7, when magic_quotes_gpc is d

23RISCO

abrir ↗

Referência✓ VexDay Proof

SFS EZ Gaming Cheats - SQL Injection

CVE-2008-6244—webappsphp

SQL injection vulnerability in view_reviews.php in Scripts for Sites (SFS) EZ Gaming Cheats allows remote attackers to e

23RISCO

abrir ↗

Referência✓ VexDay Proof

SFS EZ Top Sites - SQL Injection

CVE-2008-6247—webappsphp

SQL injection vulnerability in topsite.php in Scripts For Sites (SFS) EZ Top Sites allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Galatolo Web Manager 1.3a - Cross-Site Scripting / SQL Injection

CVE-2008-6249—webappsphp

SQL injection vulnerability in plugins/users/index.php in Galatolo WebManager 1.3a and earlier allows remote attackers t

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.