Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.958exploits catalogados

36.206CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.832GitHub PoC 14.991VulnCheck XDB 8.829Nuclei 4.357Metasploit 3.489✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

ooVoo 1.7.1.35 - 'URL Protocol' Remote Unicode Buffer Overflow (PoC)

CVE-2008-6953—doswindows

Buffer overflow in oovoo.exe in ooVoo 1.7.1.35, and possibly other versions before 1.7.1.59, allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sun xVM VirtualBox < 1.6.4 - Privilege Escalation (PoC)

CVE-2008-3431HIGHsob ataquedosmultiple

The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communicat

71RISCO

abrir ↗

Referência✓ VexDay Proof

DFLabs PTK 1.0 - Local Command Execution

CVE-2008-6793—webappsphp

The get_file_type function in lib/file_content.php in DFLabs PTK 0.1, 0.2, and 1.0 allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Discuz! - Remote Reset User Password

CVE-2008-6957—webappsphp

member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted (1) lostp

23RISCO

abrir ↗

Referência✓ VexDay Proof

Links Directory 1.1 - 'cat_id' SQL Injection

CVE-2008-1871—webappsphp

SQL injection vulnerability in links.php in Scriptsagent.com Links Directory 1.1 allows remote authenticated users to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

aspwebalbum 3.2 - Multiple Vulnerabilities

CVE-2008-6978—webappsasp

Unrestricted file upload vulnerability in Full Revolution aspWebAlbum 3.2 allows remote attackers to execute arbitrary c

23RISCO

abrir ↗

Referência✓ VexDay Proof

KnowledgeQuest 2.5 - Arbitrary Add Admin

CVE-2008-1727—webappsphp

KnowledgeQuest 2.5 and 2.6 does not require authentication for access to admincheck.php, which allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Google Chrome - Carriage Return Null Object Memory Exhaustion

CVE-2008-4340—doswindows

Google Chrome 0.2.149.29 and 0.2.149.30 allows remote attackers to cause a denial of service (memory consumption) via an

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBBViet 02.03.2007 - 'phpbb_root_path' Remote File Inclusion

CVE-2007-6088—webappsphp

PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBBViet 02.03.07 and earlier allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

VideoScript 4.0.1.50 - Change Admin Password

CVE-2008-5219—webappsphp

The password change feature (admin/cp.php) in VideoScript 4.0.1.50 and earlier does not check for administrative authent

23RISCO

abrir ↗

Referência✓ VexDay Proof

falcon CMS 1.4.3 - Remote File Inclusion / Cross-Site Scripting

CVE-2007-6489—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in Falcon Series One CMS 1.4.3 allow remote attackers to inject arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

The Rat CMS Alpha 2 - Authentication Bypass

CVE-2008-7003—webappsphp

Multiple SQL injection vulnerabilities in login.php in The Rat CMS Alpha 2 allow remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Photo Gallery 1.0 - 'photo_id' SQL Injection

CVE-2008-1875—webappsphp

SQL injection vulnerability in index.php in Terong PHP Photo Gallery (aka Advanced Web Photo Gallery) 1.0 allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebED 0.0.9 - 'index.php' Remote File Disclosure

CVE-2007-6213—webappsphp

Multiple directory traversal vulnerabilities in mod/chat/index.php in WebED 0.0.9 allow remote attackers to read arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

Esqlanelapse Software Project 2.6.2 - Insecure Cookie Handling

CVE-2008-7019—webappsphp

Esqlanelapse 2.6.1 and 2.6.2 allows remote attackers to bypass authentication and gain privileges via modified (1) enomb

23RISCO

abrir ↗

Referência✓ VexDay Proof

Chilkat IMAP ActiveX 7.9 - File Execution / Denial of Service

CVE-2008-7022—remotewindows

Insecure method vulnerability in ChilkatMail_v7_9.dll in the Chilkat Software IMAP ActiveX control (ChilkatMail2.Chilkat

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! / Mambo Component Taskhopper 1.1 - Remote File Inclusion

CVE-2007-2005—webappsphp

Multiple PHP remote file inclusion vulnerabilities in the Taskhopper 1.1 component for Mambo and Joomla! allow remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpAtm 1.30 - 'downloadfile' Remote File Disclosure

CVE-2007-2659—webappsphp

Directory traversal vulnerability in index.php in PHP Advanced Transfer Manager (phpATM) 1.30 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

EVA-Web 1.1 < 2.2 - 'index.php3' Remote File Inclusion

CVE-2007-3460—webappsphp

Multiple PHP remote file inclusion vulnerabilities in index.php3 in EVA-Web 1.1 through 2.2 allow remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

XplodPHP AutoTutorials 2.1 - 'id' SQL Injection

CVE-2008-1889—webappsphp

SQL injection vulnerability in viewcat.php in XplodPHP AutoTutorials 2.1 and earlier, when magic_quotes_gpc is disabled,

23RISCO

abrir ↗

Referência✓ VexDay Proof

ImageShack Toolbar 4.5.7 - 'FileUploader' Class InsecureMethod

CVE-2008-4549—remotewindows

The ImageShack Toolbar ActiveX control (ImageShackToolbar.dll) in ImageShack Toolbar 4.5.7, possibly including 4.5.7.69,

23RISCO

abrir ↗

Referência✓ VexDay Proof

PStruh-CZ 1.3/1.5 - 'download.asp' File Disclosure

CVE-2007-2486—webappsasp

Directory traversal vulnerability in download.asp in Motobit 1.3 and 1.5 (aka PStruh-CZ) allows remote attackers to read

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Links 1.3 - 'smarty.php' Remote File Inclusion

CVE-2008-0566—webappsphp

PHP remote file inclusion vulnerability in includes/smarty.php in DeltaScripts PHP Links 1.3 and earlier allows remote a

28RISCO

abrir ↗

Referência✓ VexDay Proof

Free PHP VX Guestbook 1.06 - Arbitrary Database Backup

CVE-2008-7006—webappsphp

Free PHP VX Guestbook 1.06 allows remote attackers to bypass authentication and download a backup of the database via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

NewsOffice 1.1 - Remote File Inclusion

CVE-2008-1903—webappsphp

PHP remote file inclusion vulnerability in news_show.php in Newanz NewsOffice 1.0 and 1.1, when register_globals is enab

35RISCO

abrir ↗

Referência✓ VexDay Proof

AuraCMS 1.5rc - Multiple SQL Injections

CVE-2007-4804—webappsphp

Multiple SQL injection vulnerabilities in AuraCMS 1.5rc allow remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module My_eGallery 3.04 - 'gid' SQL Injection

CVE-2008-7038—webappsphp

SQL injection vulnerability in the My_eGallery module for PHP-Nuke allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPKB Knowledge Base Software 1.5 - 'ID' SQL Injection

CVE-2008-1909—webappsphp

SQL injection vulnerability in comment.php in PHP Knowledge Base (PHPKB) 1.5 and 2.0 allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Silentum LoginSys 1.0.0 - Insecure Cookie Handling

CVE-2008-6763—webappsphp

login2.php in Silentum LoginSys 1.0.0 allows remote attackers to bypass authentication and obtain access to an arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

SerWeb 2.0.0 dev1 2007-02-20 - Multiple Local/Remote File Inclusion Vulnerabilities

CVE-2007-6290—webappsphp

Multiple directory traversal vulnerabilities in js/get_js.php in SERWeb 2.0.0 dev1 and earlier allow remote attackers to

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.