Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.496exploits catalogados

34.964CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.937VulnCheck XDB 8.510Nuclei 4.239Metasploit 3.468✓ só verificadosrecentes populares risco

21.899 exploits

Referência✓ VexDay Proof

SoftArtisans SAFileUp 5.0.14 - 'viewsrc.asp' Script Source Disclosure

CVE-2006-6865—webappsasp

Directory traversal vulnerability in SAFileUpSamples/util/viewsrc.asp in SoftArtisans FileUp (SAFileUp) 5.0.14 allows re

23RISCO

abrir ↗

Referência✓ VexDay Proof

eNdonesia 8.4 - '/mod.php/friend.php/admin.php' Multiple Vulnerabilities

CVE-2006-6871—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in eNdonesia 8.4 allow remote attackers to inject arbitrary web scri

23RISCO

abrir ↗

Referência✓ VexDay Proof

Macromedia Shockwave 10 'SwDir.dll' Internet Explorer 7 - Denial of Service

CVE-2006-6885—doswindows

An ActiveX control in SwDir.dll in Macromedia Shockwave 10 allows remote attackers to cause a denial of service (Interne

23RISCO

abrir ↗

Referência✓ VexDay Proof

Quote&Ordering System 1.0 - 'ordernum' Multiple Vulnerabilities

CVE-2006-6911—webappsasp

SQL injection vulnerability in search.asp in Digitizing Quote And Ordering System 1.0 allows remote authenticated users

23RISCO

abrir ↗

Referência✓ VexDay Proof

CA BrightStor ARCserve - 'tapeeng.exe' Remote Buffer Overflow

CVE-2006-6917—remotewindows

Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup R11.5 Server before SP2 allows remote a

28RISCO

abrir ↗

Referência✓ VexDay Proof

Nitrotech 0.0.3a - Remote Code Execution

CVE-2006-6938—webappsphp

Directory traversal vulnerability in includes/common.php in NitroTech 0.0.3a, as distributed before 2006, allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

FreeWebShop.org script 2.2.2 - Multiple Vulnerabilities

CVE-2006-6941—webappsphp

index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to obtain sensitive information via an invalid action

23RISCO

abrir ↗

Referência

CVE-2009-4805

CVE-2009-4805—

Multiple SQL injection vulnerabilities in EZ-Blog Beta 1, when magic_quotes_gpc is disabled, allow remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2023-34362

CVE-2023-34362CRITICALsob ataqueransomware

In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023.

100RISCO

abrir ↗

Referência

CVE-2023-34362

CVE-2023-34362CRITICALsob ataqueransomware

In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023.

100RISCO

abrir ↗

Referência

CVE-2026-9294

CVE-2026-9294HIGH

Edimax BR-6428NS POST Request formWanTcpipSetup buffer overflow

41RISCO

abrir ↗

Referência✓ VexDay Proof

PHPMyReports 3.0.11 - 'lib_head.php' Remote File Inclusion

CVE-2007-0571—webappsphp

PHP remote file inclusion vulnerability in include/lib/lib_head.php in phpMyReports 3.0.11 and earlier allows remote att

23RISCO

abrir ↗

Referência

CVE-2026-65710

CVE-2026-65710HIGH

sysPass 3.2.11 Missing Authorization via PublicLinkController Account Decryption

41RISCO

abrir ↗

Referência✓ VexDay Proof

nsGalPHP - '/includes/config.inc.php?racineTBS' Remote File Inclusion

CVE-2007-0573—webappsphp

PHP remote file inclusion vulnerability in includes/config.inc.php in nsGalPHP 0.41 and earlier allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2009-4807

CVE-2009-4807—

Multiple SQL injection vulnerabilities in Graugon PHP Article Publisher 1.0 allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Foro Domus 2.10 - 'phpbb_root_path' Remote File Inclusion

CVE-2007-0580—webappsphp

PHP remote file inclusion vulnerability in menu.php in Foro Domus 2.10 allows remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência✓ VexDay Proof

EclipseBB 0.5.0 Lite - 'phpbb_root_path' Remote File Inclusion

CVE-2007-0581—webappsphp

PHP remote file inclusion vulnerability in functions.php in EclipseBB 0.5.0 Lite allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2009-4809

CVE-2009-4809—

Directory traversal vulnerability in thumbnail.ghp in Easy File Sharing (EFS) Web Server 4.8 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

forum livre 1.0 - SQL Injection / Cross-Site Scripting

CVE-2007-0589—webappsasp

SQL injection vulnerability in Forum Livre 1.0 allows remote attackers to execute arbitrary SQL commands via the user pa

23RISCO

abrir ↗

Referência✓ VexDay Proof

forum livre 1.0 - SQL Injection / Cross-Site Scripting

CVE-2007-0590—webappsasp

Cross-site scripting (XSS) vulnerability in busca2.asp in Forum Livre 1.0 remote attackers to inject arbitrary web scrip

23RISCO

abrir ↗

Referência✓ VexDay Proof

Hailboards 1.2.0 - 'phpbb_root_path' Remote File Inclusion

CVE-2007-0662—webappsphp

PHP remote file inclusion vulnerability in includes/usercp_viewprofile.php in Hailboards 1.2.0 allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

ExoPHPDesk 1.2.1 - 'faq.php' SQL Injection

CVE-2007-0676—webappsphp

SQL injection vulnerability in faq.php in ExoPHPDesk 1.2.1 and earlier allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cadre PHP Framework - Remote File Inclusion

CVE-2007-0677—webappsphp

PHP remote file inclusion vulnerability in fw/class.Quick_Config_Browser.php in Cadre PHP Framework 20020724 allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fullaspsite Asp Hosting Sitesi - 'tr' SQL Injection

CVE-2007-0678—webappsasp

SQL injection vulnerability in windows.asp in Fullaspsite Asp Hosting Sitesi allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPMyRing 4.1.3b - 'fichier' Remote File Inclusion

CVE-2007-0679—webappsphp

PHP remote file inclusion vulnerability in lang/leslangues.php in Nicolas Grandjean PHPMyRing 4.1.3b and earlier allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

wbblog - Cross-Site Scripting / SQL Injection

CVE-2007-1481—webappsphp

SQL injection vulnerability in index.php in WBBlog allows remote attackers to execute arbitrary SQL commands via the e_i

23RISCO

abrir ↗

Referência

CVE-2009-4862

CVE-2009-4862—

Multiple SQL injection vulnerabilities in Alwasel 1.5 allow remote attackers to execute arbitrary SQL commands via the i

23RISCO

abrir ↗

Referência✓ VexDay Proof

wbblog - Cross-Site Scripting / SQL Injection

CVE-2007-1482—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in WBBlog allows remote attackers to inject arbitrary web script o

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebLog - 'index.php' Remote File Disclosure

CVE-2007-1487—webappsphp

Directory traversal vulnerability in index.php in Sascha Schroeder (aka CyberTeddy or Cyber-inside) WebLog allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

NetVIOS Portal - 'page.asp' SQL Injection

CVE-2007-1566—webappsasp

SQL injection vulnerability in News/page.asp in NetVIOS Portal allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.