Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.958exploits catalogados

36.206CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.832GitHub PoC 14.991VulnCheck XDB 8.829Nuclei 4.357Metasploit 3.489✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

PHPCOIN 1.2.3 - 'session_set.php' Remote File Inclusion

CVE-2006-4424—webappsphp

PHP remote file inclusion vulnerability in coin_includes/constants.php in phpCOIN 1.2.3 allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Office - MSODataSourceControl COM-object Buffer Overflow (PoC)

CVE-2007-3282—doswindows

Buffer overflow in the Microsoft Office MSODataSourceControl ActiveX object allows remote attackers to cause a denial of

35RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module wiwimod 0.4 - Remote File Inclusion

CVE-2007-3289—webappsphp

PHP remote file inclusion vulnerability in spaw/spaw_control.class.php in the WiwiMod 0.4 module for XOOPS allows remote

28RISCO

abrir ↗

Referência✓ VexDay Proof

LiveCMS 3.4 - 'categoria.php?cid' SQL Injection

CVE-2007-3290—webappsphp

categoria.php in LiveCMS 3.4 and earlier allows remote attackers to obtain sensitive information via a ' (quote) charact

23RISCO

abrir ↗

Referência✓ VexDay Proof

Active Trade 2 - Authentication Bypass

CVE-2008-5627—webappsasp

SQL injection vulnerability in account.asp in Active Trade 2 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

LiveCMS 3.4 - 'categoria.php?cid' SQL Injection

CVE-2007-3292—webappsphp

Unrestricted file upload vulnerability in LiveCMS 3.4 and earlier allows remote attackers to upload and execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

MiniBill 1.2.5 - 'run_billing.php' Remote File Inclusion

CVE-2007-3306—webappsphp

PHP remote file inclusion vulnerability in crontab/run_billing.php in MiniBill 1.2.5 allows remote attackers to execute

35RISCO

abrir ↗

Referência✓ VexDay Proof

Distinct TFTP 3.10 - Writable Directory Traversal Execution (Metasploit)

CVE-2012-6664CRITICALwebappswindows

Multiple directory traversal vulnerabilities in the TFTP Server in Distinct Intranet Servers 3.10 and earlier allow remo

68RISCO

abrir ↗

Referência✓ VexDay Proof

CMS little 0.0.1 - 'term' SQL Injection

CVE-2008-5628—webappsphp

SQL injection vulnerability in index.php in CMS little 0.0.1 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

AdaptCMS Lite 1.4 - Cross-Site Scripting / Remote File Inclusion

CVE-2009-0527—webappsphp

PHP remote file inclusion vulnerability in plugins/rss_importer_functions.php in AdaptCMS Lite 1.4 allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

Turnkey Arcade Script - SQL Injection (1)

CVE-2008-5629—webappsphp

SQL injection vulnerability in index.php in Turnkey Arcade Script allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

eWebquiz 8 - Authentication Bypass

CVE-2008-5631—webappsasp

SQL injection vulnerability in start.asp in Active eWebquiz 8.0 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

ActiveVotes 2.2 - Authentication Bypass

CVE-2008-5633—webappsasp

SQL injection vulnerability in register.asp in ActiveVotes 2.2 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Solar Empire 2.9.1.1 - Blind SQL Injection / Hash Retrieve

CVE-2007-3307—webappsphp

SQL injection vulnerability in game_listing.php in Solar Empire 2.9.1.1 and earlier allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Active Membership 2 - Authentication Bypass

CVE-2008-5635—webappsasp

SQL injection vulnerability in account.asp in Active Membership 2.0 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

TxtBlog 1.0 Alpha - Local File Inclusion

CVE-2008-5639—webappsphp

Directory traversal vulnerability in index.php in TxtBlog 1.0 Alpha allows remote attackers to read arbitrary files via

23RISCO

abrir ↗

Referência✓ VexDay Proof

patBBcode 1.0 - 'bbcodeSource.php' Remote File Inclusion

CVE-2007-5995—webappsphp

PHP remote file inclusion vulnerability in examples/patExampleGen/bbcodeSource.php in patBBcode 1.0 allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

Campsite 3.3.0 RC1 - Multiple Remote File Inclusions

CVE-2009-2181—webappsphp

Cross-site scripting (XSS) vulnerability in admin-files/templates/list_dir.php in Campsite 3.3.0 RC1 allows remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

Opera 9.62 - 'file://' Local Heap Overflow

CVE-2008-5178—localwindows

Heap-based buffer overflow in Opera 9.62 on Windows allows remote attackers to execute arbitrary code via a long file://

35RISCO

abrir ↗

Referência✓ VexDay Proof

Active Bids 3.5 - 'itemID' Blind SQL Injection

CVE-2008-5640—webappsphp

SQL injection vulnerability in bidhistory.asp in Active Bids 3.5 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

CMS Made Simple 1.4.1 - Local File Inclusion

CVE-2008-5642—webappsphp

Directory traversal vulnerability in admin/login.php in CMS Made Simple 1.4.1 allows remote attackers to read arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyioSoft Ajax Portal 3.0 - Authentication Bypass

CVE-2008-5653—webappsphp

SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft AjaxPortal 3.0 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Dada Mail Manager 2.6 - Remote File Inclusion

CVE-2008-6221—webappsphp

PHP remote file inclusion vulnerability in config.dadamail.php in the Dada Mail Manager (com_dadamail) component 2.6 for

35RISCO

abrir ↗

Referência✓ VexDay Proof

MyioSoft EasyCalendar - Authentication Bypass

CVE-2008-5654—webappsphp

SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft EasyCalendar 4.0 allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Vinagre < 2.24.2 - 'show_error()' Remote Format String (PoC)

CVE-2008-5660—doswindows

Format string vulnerability in the vinagre_utils_show_error function (src/vinagre-utils.c) in Vinagre 0.5.x before 0.5.2

23RISCO

abrir ↗

Referência✓ VexDay Proof

Txx CMS 0.2 - Multiple Remote File Inclusions

CVE-2007-4818—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Txx CMS 0.2 allow remote attackers to execute arbitrary PHP code v

35RISCO

abrir ↗

Referência✓ VexDay Proof

PHPDJ 0.5 - 'djpage.php' Remote File Inclusion

CVE-2007-5574—webappsphp

PHP remote file inclusion vulnerability in djpage.php in PHPDJ 0.5 allows remote attackers to execute arbitrary PHP code

28RISCO

abrir ↗

Referência✓ VexDay Proof

Softbiz Auctions Script - 'product_desc.php' SQL Injection

CVE-2007-5999—webappsphp

SQL injection vulnerability in product_desc.php in Softbiz Auctions Script allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Kusaba 1.0.4 - Remote Code Execution (2)

CVE-2008-5663—webappsphp

Multiple unrestricted file upload vulnerabilities in Kusaba 1.0.4 and earlier allow remote authenticated users to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

Realtek Sound Manager (rtlrack.exe 1.15.0.0) - Playlist Buffer Overflow

CVE-2008-5664—localwindows

Stack-based buffer overflow in Realtek Media Player (aka Realtek Sound Manager, RtlRack, or rtlrack.exe) 1.15.0.0 allows

50RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.