Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.020exploits catalogados

35.276CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.446Referência 22.166GitHub PoC 14.080VulnCheck XDB 8.604Nuclei 4.251Metasploit 3.473✓ só verificadosrecentes populares risco

22.166 exploits

Referência✓ VexDay Proof

Online Keyword Research Tool - 'download.php' File Disclosure

CVE-2008-6335—webappsphp

Directory traversal vulnerability in download.php in eMetrix Online Keyword Research Tool allows remote attackers to rea

23RISCO

abrir ↗

Referência✓ VexDay Proof

Text Lines Rearrange Script - 'Filename' File Disclosure

CVE-2008-6336—webappsphp

Directory traversal vulnerability in download.php in Text Lines Rearrange Script 1.0, when register_globals is enabled,

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component ongumatimesheet20 4b - Remote File Inclusion

CVE-2008-6347—webappsphp

PHP remote file inclusion vulnerability in lib/onguma.class.php in the Onguma Time Sheet (com_ongumatimesheet20) 2.0 4b

28RISCO

abrir ↗

Referência✓ VexDay Proof

MyCal Personal Events Calendar - Database Disclosure

CVE-2008-6357—webappsasp

MyCal Personal Events Calendar stores sensitive information under the web root with insufficient access control, which a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Social Groupie - 'id' SQL Injection

CVE-2008-6358—webappsphp

SQL injection vulnerability in group_index.php in Social Groupie allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

DesignWorks Professional 4.3.1 - '.CCT' File Local Stack Buffer Overflow (PoC)

CVE-2008-6363—doswindows

Stack-based buffer overflow in DesignWorks Professional 4.3.1 and 5.0.7 allows remote attackers to execute arbitrary cod

23RISCO

abrir ↗

Referência

CVE-2008-6364

CVE-2008-6364—

SQL injection vulnerability in logon_process.jsp in Ad Server Solutions Banner Exchange Solution Java allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

Banner Exchange Java - Authentication Bypass

CVE-2008-6364—webappsasp

SQL injection vulnerability in logon_process.jsp in Ad Server Solutions Banner Exchange Solution Java allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ad Management Java - Authentication Bypass

CVE-2008-6365—webappsasp

SQL injection vulnerability in logon.jsp in Ad Server Solutions Ad Management Software Java allows remote attackers to e

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ocean12 Contact Manager Pro - SQL Injection / Cross-Site Scripting / File Disclosure

CVE-2008-6369—webappsphp

SQL injection vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2014-5445

CVE-2014-5445—

Multiple absolute path traversal vulnerabilities in ZOHO ManageEngine Netflow Analyzer 8.6 through 10.2 and IT360 10.3 a

60RISCO

abrir ↗

Referência✓ VexDay Proof

Ocean12 FAQ Manager Pro - 'ID' Blind SQL Injection

CVE-2008-6372—webappsphp

SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2014-5464

CVE-2014-5464—

Cross-site scripting (XSS) vulnerability in the nDPI traffic classification library in ntopng (aka ntop) before 1.2.1 al

23RISCO

abrir ↗

Referência✓ VexDay Proof

Codefixer MailingListPro - Database Disclosure

CVE-2008-6374—webappsasp

CodefixerSoftware MailingListPro Free Edition stores sensitive information under the web root with insufficient access c

23RISCO

abrir ↗

Referência

CVE-2008-6376

CVE-2008-6376—

SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the passw

23RISCO

abrir ↗

Referência

CVE-2014-5465

CVE-2014-5465—

Directory traversal vulnerability in force-download.php in the Download Shortcode plugin 0.2.3 and earlier for WordPress

28RISCO

abrir ↗

Referência✓ VexDay Proof

Multi SEO phpBB 1.1.0 - Remote File Inclusion

CVE-2008-6377—webappsphp

PHP remote file inclusion vulnerability in include/global.php in Multi SEO phpBB 1.1.0 allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

Rae Media Contact MS - Authentication Bypass

CVE-2008-6389—webappsphp

SQL injection vulnerability in asadmin/default.asp in Rae Media Contact Management Software SOHO, Standard, and Enterpri

23RISCO

abrir ↗

Referência

CVE-2008-6392

CVE-2008-6392—

SQL injection vulnerability in showads.php in Z1Exchange allows remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Psi Jabber Client (Windows / Linux) - Remote Denial of Service

CVE-2008-6393—dosmultiple

PSI Jabber client before 0.12.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitr

28RISCO

abrir ↗

Referência

CVE-2008-6396

CVE-2008-6396—

Cross-site scripting (XSS) vulnerability in account.php in Celerondude Uploader 6.1 allows remote attackers to inject ar

23RISCO

abrir ↗

Referência

CVE-2014-5468

CVE-2014-5468—

A File Inclusion vulnerability exists in Railo 4.2.1 and earlier via a specially-crafted URL request to the thumbnail.cf

50RISCO

abrir ↗

Referência✓ VexDay Proof

JETIK-WEB Software - 'kat' SQL Injection

CVE-2008-6401—webappsphp

SQL injection vulnerability in sayfa.php in JETIK-WEB allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

HotScripts Clone - 'cid' SQL Injection

CVE-2008-6405—webappsphp

SQL injection vulnerability in showcategory.php in Hotscripts Clone allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

ActualAnalyzer - 'ant' Cookie Command Execution (Metasploit)

CVE-2014-5470CRITICALremoteunix

Actual Analyzer through 2014-08-29 allows code execution via shell metacharacters because untrusted input is used for pa

68RISCO

abrir ↗

Referência✓ VexDay Proof

Ol BookMarks Manager 0.7.5 - Local File Inclusion / Remote File Inclusion / SQL Injection

CVE-2008-6408—webappsphp

PHP remote file inclusion vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ol BookMarks Manager 0.7.5 - Local File Inclusion / Remote File Inclusion / SQL Injection

CVE-2008-6409—webappsphp

SQL injection vulnerability in index.php in ol'bookmarks manager 0.7.5 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

AJ Auction Pro Platinum Skin - 'item_id' SQL Injection

CVE-2008-6414—webappsphp

SQL injection vulnerability in detail.php in AJ Auction Pro Platinum Skin 2 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Social Site Generator 2.0 - 'sgc_id' SQL Injection

CVE-2008-6419—webappsphp

Multiple SQL injection vulnerabilities in Social Site Generator (SSG) 2.0 allow remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

Social Site Generator 2.0 - Multiple Remote File Disclosure Vulnerabilities

CVE-2008-6420—webappsphp

Social Site Generator (SSG) 2.0 allows remote attackers to read arbitrary files via the file parameter to (1) filedload.

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.