Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.958exploits catalogados

36.206CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.832GitHub PoC 14.991VulnCheck XDB 8.829Nuclei 4.357Metasploit 3.489✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Joomla! Component Joomtracker 1.01 - SQL Injection

CVE-2008-6088—webappsphp

SQL injection vulnerability in the Joomtracker (com_joomtracker) 1.01 module for Joomla! allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPBB2 MODificat 0.2.0 - 'functions.php' Remote File Inclusion

CVE-2007-0656—webappsphp

PHP remote file inclusion vulnerability in includes/functions.php in phpBB2-MODificat 0.2.0 and earlier allows remote at

28RISCO

abrir ↗

Referência✓ VexDay Proof

BMForum 5.6 - 'tagname' SQL Injection

CVE-2008-6091—webappsphp

SQL injection vulnerability in plugins.php in BMForum 5.6, when magic_quotes_gpc is disabled, allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpscripts Ranking Script - Insecure Cookie Handling

CVE-2008-6092—webappsphp

phpscripts Ranking Script allows remote attackers to bypass authentication and gain administrative access by sending an

23RISCO

abrir ↗

Referência✓ VexDay Proof

Noname CMS 1.0 - Multiple SQL Injections

CVE-2008-6093—webappsphp

SQL injection vulnerability in index.php in Noname CMS 1.0, when magic_quotes_gpc is disabled, allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

FaScript FaPersian Petition - SQL Injection

CVE-2008-0325—webappsphp

SQL injection vulnerability in show.php in FaScript FaPersian Petition allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Discussion Forums 2k 3.3 - Multiple SQL Injections

CVE-2008-6100—webappsphp

Multiple SQL injection vulnerabilities in Discussion Forums 2k 3.3, when magic_quotes_gpc is disabled, allow remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Thyme 1.0 - SQL Injection

CVE-2008-6116—webappsphp

SQL injection vulnerability in the EXtrovert Software Thyme (com_thyme) 1.0 component for Joomla! allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

Goople CMS 1.7 - Insecure Cookie Handling

CVE-2008-6118—webappsphp

win/content/upload.php in Goople CMS 1.7 allows remote attackers to bypass authentication and gain administrative access

23RISCO

abrir ↗

Referência✓ VexDay Proof

FaScript FaName 1.0 - SQL Injection

CVE-2008-0328—webappsphp

SQL injection vulnerability in page.php in FaScript FaName 1.0 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Hexamail Server 3.0.0.001 - 'pop3' Remote Overflow (PoC)

CVE-2007-4646—doswindows

Buffer overflow in the pop3 service in Hexamail Server 3.0.0.001 Lite allows remote attackers to cause a denial of servi

28RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component ClickHeat 1.0.1 - Multiple Remote File Inclusions

CVE-2008-5793—webappsphp

Multiple PHP remote file inclusion vulnerabilities in the Clickheat - Heatmap stats (com_clickheat) component 1.0.1 for

28RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-RESIDENCE 0.7.2 - 'Search' SQL Injection

CVE-2008-0353—webappsphp

SQL injection vulnerability in visualizza_tabelle.php in php-residence 0.7.2 and 1.0 allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebBiscuits Modules Controller 1.1 - Remote File Inclusion / Remote File Disclosure

CVE-2008-6139—webappsphp

Directory traversal vulnerability in faqsupport/wce.download.php in WebBiscuits Modules Controller 1.1 allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

nweb2fax 0.2.7 - Multiple Vulnerabilities

CVE-2008-6668—webappsphp

Multiple directory traversal vulnerabilities in nweb2fax 0.2.7 and earlier allow remote attackers to read arbitrary file

43RISCO

abrir ↗

Referência✓ VexDay Proof

Flexphpic 0.0.x - Authentication Bypass

CVE-2008-6142—webappsphp

Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPic 0.0.4 and FlexPHPic Pro 0.0.3, and other 0.0.

23RISCO

abrir ↗

Referência✓ VexDay Proof

DeluxeBB 1.2 - Blind SQL Injection

CVE-2008-6146—webappsphp

SQL injection vulnerability in pm.php in DeluxeBB 1.2 and earlier, when magic_quotes_gpc is disabled, allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

sPHPell 1.01 - Multiple Remote File Inclusions

CVE-2007-3522—webappsphp

Multiple PHP remote file inclusion vulnerabilities in sPHPell 1.01 allow remote attackers to execute arbitrary PHP code

35RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Live Ticker 1.0 - Blind SQL Injection

CVE-2008-6148—webappsphp

SQL injection vulnerability in the Live Ticker (com_liveticker) module 1.0 for Joomla! allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

EDraw Office Viewer Component 5.3 - 'FtpDownloadFile()' Remote Buffer Overflow

CVE-2007-5257—doswindows

Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in EDraw Office Viewer Compone

28RISCO

abrir ↗

Referência✓ VexDay Proof

Sepcity Classified - 'ID' SQL Injection

CVE-2008-6150—webappsasp

SQL injection vulnerability in classdis.asp in SepCity Classified Ads allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sepcity Shopping Mall - SQL Injection

CVE-2008-6151—webappsasp

SQL injection vulnerability in shpdetails.asp in SepCity Shopping Mall allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

KingSoft - 'UpdateOcx2.dll SetUninstallName()' Heap Overflow (PoC)

CVE-2008-1307—doswindows

Heap-based buffer overflow in the KUpdateObj2 Class ActiveX control in UpdateOcx2.dll in Beijing KingSoft Antivirus Onli

28RISCO

abrir ↗

Referência✓ VexDay Proof

Pixel8 Web Photo Album 3.0 - SQL Injection

CVE-2008-6153—webappsasp

SQL injection vulnerability in Photo.asp in Jay Patel Pixel8 Web Photo Album 3.0 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

HispaH textlinksads - 'index.php' SQL Injection

CVE-2008-6154—webappsphp

SQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Digital Data Communications - 'RtspVaPgCtrl' Class Remote Buffer Overflow

CVE-2008-0380—remotewindows

Buffer overflow in the Digital Data Communications RtspVaPgCtrl ActiveX control (RtspVapgDecoder.dll 1.1.0.29) allows re

28RISCO

abrir ↗

Referência✓ VexDay Proof

Bux.to Clone Script - Insecure Cookie Handling

CVE-2008-6162—webappsphp

Bux.to Clone script allows remote attackers to bypass authentication and gain administrative access by setting the logge

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Kbase 1.0 - SQL Injection

CVE-2008-6166—webappsphp

SQL injection vulnerability in the KBase (com_kbase) 1.2 component for Joomla! allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

miniPortail 2.2 - Cross-Site Scripting / Local File Inclusion

CVE-2008-6167—webappsphp

Directory traversal vulnerability in search.php in miniPortail 2.2 and earlier allows remote attackers to include and ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

SilverSHielD 1.0.2.34 - Denial of Service

CVE-2008-6175—doswindows

SilverSHielD 1.0.2.34 allows remote attackers to cause a denial of service (application crash) via a crafted argument to

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.