Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.958exploits catalogados

36.206CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.832GitHub PoC 14.991VulnCheck XDB 8.829Nuclei 4.357Metasploit 3.489✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

NetRisk 1.9.7 - Local/Remote File Inclusion

CVE-2008-0144—webappsphp

PHP remote file inclusion vulnerability in index.php in NetRisk 1.9.7 and earlier allows remote attackers to execute arb

35RISCO

abrir ↗

Referência✓ VexDay Proof

BosClassifieds - 'cat_id' SQL Injection

CVE-2008-6526—webappsphp

SQL injection vulnerability in index.php in BosDev BosClassifieds allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

TmaxSoft JEUS - Alternate Data Streams File Disclosure

CVE-2008-6528—remotewindows

NTFS TmaxSoft JEUS 5 before Fix 26 allows remote attackers to read the source code for scripts by appending ::$DATA to t

23RISCO

abrir ↗

Referência✓ VexDay Proof

The Merchant 2.2.0 - 'index.php?show' Remote File Inclusion

CVE-2007-2424—webappsphp

PHP remote file inclusion vulnerability in help/index.php in The Merchant (themerchant) 2.2 allows remote attackers to e

23RISCO

abrir ↗

Referência✓ VexDay Proof

living Local 1.1 - Cross-Site Scripting / Arbitrary File Upload

CVE-2008-6529—webappsphp

Cross-site scripting (XSS) vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows remote attackers to inj

23RISCO

abrir ↗

Referência✓ VexDay Proof

living Local 1.1 - Cross-Site Scripting / Arbitrary File Upload

CVE-2008-6530—webappsphp

Unrestricted file upload vulnerability in editimage.php in eZoneScripts Living Local 1.1 allows remote authenticated adm

23RISCO

abrir ↗

Referência✓ VexDay Proof

GoodTech SSH - 'SSH_FXP_OPEN' Remote Buffer Overflow

CVE-2008-4726—remotewindows

Stack-based buffer overflow in the SFTP subsystem in GoodTech SSH 6.4 allows remote authenticated users to execute arbit

35RISCO

abrir ↗

Referência✓ VexDay Proof

WiClear 0.10 - 'path' Remote File Inclusion

CVE-2006-5506—webappsphp

Multiple PHP remote file inclusion vulnerabilities in WiClear 0.10 allow remote attackers to execute arbitrary PHP code

28RISCO

abrir ↗

Referência✓ VexDay Proof

PHPProfiles 4.5.2 Beta - 'body_comm.inc.php' Remote File Inclusion

CVE-2008-1051—webappsphp

PHP remote file inclusion vulnerability in include/body_comm.inc.php in phpProfiles 4.5.2 BETA allows remote attackers t

28RISCO

abrir ↗

Referência✓ VexDay Proof

PayPal eStore - Admin Password Change

CVE-2008-6535—webappsphp

admin/settings.php in PayPal eStores allows remote attackers to bypass intended access restrictions and change the admin

23RISCO

abrir ↗

Referência✓ VexDay Proof

Destar 0.2.2-5 - Arbitrary Add New User

CVE-2008-6538—webappsphp

DeStar 0.2.2-5 allows remote attackers to add arbitrary users via a direct request to config/add/CfgOptUser.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simplog 0.9.2 - 's' Remote Command Execution

CVE-2006-1777—webappsphp

Directory traversal vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin Sniplets 1.1.2 - Remote File Inclusion / Cross-Site Scripting / Remote Code Execution

CVE-2008-1060—webappsphp

Eval injection vulnerability in modules/execute.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote a

35RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin Sniplets 1.1.2 - Remote File Inclusion / Cross-Site Scripting / Remote Code Execution

CVE-2008-1061—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allow remote at

38RISCO

abrir ↗

Referência✓ VexDay Proof

Download Accelerator Plus DAP 8.6 - 'AniGIF.ocx' Buffer Overflow (PoC)

CVE-2008-3702—doswindows

Multiple stack-based buffer overflows in the Animation GIF ActiveX control in JComSoft AniGIF.ocx 1.12 and 2.47, as used

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apple iTunes 8.0.2.20/QuickTime 7.5.5 - '.mov' Multiple Off By Overflows (PoC)

CVE-2008-5406—doswindows

Stack-based buffer overflow in Apple QuickTime Player 7.5.5 and iTunes 8.0.2.20 allows remote attackers to cause a denia

23RISCO

abrir ↗

Referência✓ VexDay Proof

Destar 0.2.2-5 - Arbitrary Add Admin

CVE-2008-6539—webappsphp

Static code injection vulnerability in user/settings/ in DeStar 0.2.2-5 allows remote authenticated users to add arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

Neostrada Livebox Router - Remote Network Down (PoC)

CVE-2008-6497—doswindows

The Neostrada Livebox ADSL Router allows remote attackers to cause a denial of service (network outage) via multiple HTT

23RISCO

abrir ↗

Referência✓ VexDay Proof

OpenDock FullCore 4.4 - Remote File Inclusion

CVE-2006-5392—webappsphp

Multiple PHP remote file inclusion vulnerabilities in OpenDock FullCore 4.4 and earlier allow remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

XAMPP for Windows 1.6.0a - 'mssql_connect()' Remote Buffer Overflow

CVE-2007-2079—remotewindows

The ADONewConnection Connect function in adodb.php in XAMPP 1.6.0a and earlier for Windows uses untrusted input for the

23RISCO

abrir ↗

Referência✓ VexDay Proof

Google Chrome 0.2.149.27 - A HREF Denial of Service

CVE-2008-6998—doswindows

Stack-based buffer overflow in chrome/common/gfx/url_elider.cc in Google Chrome 0.2.149.27 and other versions before 0.2

23RISCO

abrir ↗

Referência✓ VexDay Proof

GNUEDU 1.3b2 - Multiple Remote File Inclusions

CVE-2007-2609—webappsphp

Multiple PHP remote file inclusion vulnerabilities in gnuedu 1.3b2 allow remote attackers to execute arbitrary PHP code

23RISCO

abrir ↗

Referência✓ VexDay Proof

Java SE Runtime Environment JRE 6 Update 13 - Multiple Vulnerabilities

CVE-2009-1672—doswindows

The Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment (aka JRE) 6 Update 1

23RISCO

abrir ↗

Referência✓ VexDay Proof

Portail Web PHP 2.5.1.1 - Multiple Inclusion Vulnerabilities

CVE-2008-1068—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 and earlier allow remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

osTicket 1.12 - Formula Injection

CVE-2019-14749—webappsphp

An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. CSV (aka Formula) injection exists in the ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component SimpleBoard 1.0.3 - 'catid' SQL Injection

CVE-2008-1077—webappsphp

SQL injection vulnerability in index.php in the Simpleboard (com_simpleboard) 1.0.3 Stable component for Mambo and Jooml

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! 1.5.12 TinyMCE - Remote Code Execution (via Arbitrary File Upload)

CVE-2011-4906—webappsphp

Tiny browser in TinyMCE 3.0 editor in Joomla! before 1.5.13 allows file upload and arbitrary PHP code execution.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simple PHP Blog 0.4.7.1 - Remote Command Execution

CVE-2006-1243—webappsphp

Directory traversal vulnerability in install05.php in Simple PHP Blog (SPB) 0.4.7.1 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fundanemt 2.2.0 - 'spellcheck.php' Remote Code Execution

CVE-2007-2935—webappsphp

core/spellcheck/spellcheck.php in Fundanemt before 2.2.0.1 allows remote attackers to execute arbitrary commands via she

23RISCO

abrir ↗

Referência✓ VexDay Proof

FretsWeb 1.2 - Multiple Local File Inclusions

CVE-2009-2109—webappsphp

Multiple directory traversal vulnerabilities in FretsWeb 1.2 allow remote attackers to read arbitrary files via director

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.