Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.958exploits catalogados

36.206CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.832GitHub PoC 14.991VulnCheck XDB 8.829Nuclei 4.357Metasploit 3.489✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

AsteriDex 3.0 - 'callboth.php' Remote Code Execution

CVE-2007-3621—webappsphp

Multiple CRLF injection vulnerabilities in callboth.php in AsteriDex 3.0 and earlier allow remote attackers to inject ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

smcFanControl 2.1.2 (OSX) - Multiple Buffer Overflow Vulnerabilities (PoC)

CVE-2008-6252—dososx

Stack-based buffer overflow in the smc program in smcFanControl 2.1.2 allows local users to execute arbitrary code and g

23RISCO

abrir ↗

Referência✓ VexDay Proof

OpenASP 3.0 - Blind SQL Injection

CVE-2008-6257—webappsasp

SQL injection vulnerability in default.asp in Openasp 3.0 and earlier allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Q-Shop 3.0 - Cross-Site Scripting / SQL Injection

CVE-2008-6258—webappsasp

SQL injection vulnerability in users.asp in QuadComm Q-Shop 3.0, and possibly earlier, allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

Q-Shop 3.0 - Cross-Site Scripting / SQL Injection

CVE-2008-6259—webappsasp

Cross-site scripting (XSS) vulnerability in search.asp in QuadComm Q-Shop 3.0, and possibly earlier, allows remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

SaturnCMS - Blind SQL Injection

CVE-2008-6263—webappsphp

SQL injection vulnerability in lib/user/t_user.php in SaturnCMS allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cyberfolio 7.12.2 - 'theme' Local File Inclusion

CVE-2008-6265—webappsphp

Directory traversal vulnerability in portfolio/css.php in Cyberfolio 7.12.2 and earlier allows remote attackers to inclu

23RISCO

abrir ↗

Referência✓ VexDay Proof

WEBBDOMAIN WebShop 1.02 - SQL Injection / Cross-Site Scripting

CVE-2008-6268—webappsphp

SQL injection vulnerability in detail.php in WEBBDOMAIN Multi Languages WebShop Online 1.02 allows remote attackers to e

23RISCO

abrir ↗

Referência✓ VexDay Proof

Acc Real Estate 4.0 - Insecure Cookie Handling

CVE-2008-6293—webappsphp

admin/Index.php in Acc Real Estate 4.0 allows remote attackers to bypass authentication and gain administrative access b

23RISCO

abrir ↗

Referência✓ VexDay Proof

VUPlayer 2.44 - '.m3u' UNC Name Buffer Overflow

CVE-2006-6251—localwindows

Stack-based buffer overflow in VUPlayer 2.44 and earlier allows remote attackers to execute arbitrary code via a long st

50RISCO

abrir ↗

Referência✓ VexDay Proof

Aigaion 1.3.3 - 'topic topic_id' SQL Injection

CVE-2007-3683—webappsphp

SQL injection vulnerability in pagetopic.php in Aigaion 1.3.3 and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

Free Directory Script 1.1.1 - 'API_HOME_DIR' Remote File Inclusion

CVE-2008-6305—webappsphp

PHP remote file inclusion vulnerability in init.php in Free Directory Script 1.1.1, when register_globals is enabled, al

23RISCO

abrir ↗

Referência✓ VexDay Proof

E-topbiz Link Back Checker 1 - Insecure Cookie Handling

CVE-2008-6307—webappsphp

E-topbiz Link Back Checker 1 allows remote attackers to bypass authentication and gain administrative access by setting

23RISCO

abrir ↗

Referência✓ VexDay Proof

PunBB (Private Messaging System 1.2.x) - Multiple Local File Inclusions

CVE-2008-6308—webappsphp

Multiple directory traversal vulnerabilities in Private Messaging System (PMS) 1.2.3 and earlier for PunBB allow remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

TFTP Server for Windows 1.4 - ST Remote BSS Overflow

CVE-2008-2161—remotewindows

Buffer overflow in TFTP Server SP 1.4 and 1.5 on Windows, and possibly other versions, allows remote attackers to execut

50RISCO

abrir ↗

Referência✓ VexDay Proof

RevSense 1.0 - Authentication Bypass

CVE-2008-6310—webappsphp

SQL injection vulnerability in index.php in W3matter RevSense 1.0 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Mac OSX - 'mount_smbfs' Local Stack Buffer Overflow

CVE-2007-3876—localosx

Stack-based buffer overflow in SMB in Apple Mac OS X 10.4.11 allows local users to execute arbitrary code via (1) a long

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpAddEdit 1.3 - 'editform' Local File Inclusion

CVE-2008-6313—webappsphp

Directory traversal vulnerability in addedit-render.php in phpAddEdit 1.3, when magic_quotes_gpc is disabled, allows rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPmyGallery 1.0beta2 - Local/Remote File Inclusion

CVE-2008-6316—webappsphp

Directory traversal vulnerability in _conf/core/common-tpl-vars.php in PHPmyGallery 1.0 beta2 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

WM Downloader - '.m3u' Local Stack Overflow (PoC)

CVE-2009-1327—doswindows

Stack-based buffer overflow in Mini-stream WM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPmyGallery 1.5beta - '/common-tpl-vars.php' Local/Remote File Inclusion

CVE-2008-6317—webappsphp

Directory traversal vulnerability in _conf/_php-core/common-tpl-vars.php in PHPmyGallery 1.5 beta allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPmyGallery 1.5beta - '/common-tpl-vars.php' Local/Remote File Inclusion

CVE-2008-6318—webappsphp

PHP remote file inclusion vulnerability in _conf/_php-core/common-tpl-vars.php in PHPmyGallery 1.5 beta allows remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

CF_Calendar - 'calendarevent.cfm' SQL Injection

CVE-2008-6319—webappsasp

SQL injection vulnerability in calendarevent.cfm in CF_Calendar allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

ABC Advertise 1.0 - Admin Password Disclosure

CVE-2009-1550—webappsphp

Zakkis Technology ABC Advertise 1.0 does not properly restrict access to admin.inc.php, which allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

cf shopkart 5.2.2 - SQL Injection / File Disclosure

CVE-2008-6320—webappsasp

SQL injection vulnerability in index.cfm in CF Shopkart 5.2.2 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Expert Advisior - 'index.php?id' SQL Injection

CVE-2007-3882—webappsphp

SQL injection vulnerability in index.php in Expert Advisor allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

CFMBLOG - 'categorynbr' Blind SQL Injection

CVE-2008-6322—webappsasp

SQL injection vulnerability in index.cfm in CFMSource CFMBlog allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

CF_Auction - Blind SQL Injection

CVE-2008-6323—webappsasp

SQL injection vulnerability in forummessages.cfm in CFMSource CF_Auction allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mercury/32 Mail SMTPD - Remote Stack Overrun (PoC)

CVE-2007-4440—doswindows

Stack-based buffer overflow in the MercuryS SMTP server in Mercury Mail Transport System, possibly 4.51 and earlier, all

50RISCO

abrir ↗

Referência✓ VexDay Proof

CF_Forum - Blind SQL Injection

CVE-2008-6324—webappsasp

SQL injection vulnerability in forummessages.cfm in CF_Forum allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.