Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.043exploits catalogados

36.288CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.910GitHub PoC 14.997VulnCheck XDB 8.829Nuclei 4.358Metasploit 3.489✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Knowledge Base Mod 2.0.2 - 'phpBB' Remote File Inclusion

CVE-2006-2134—webappsphp

PHP remote file inclusion vulnerability in /includes/kb_constants.php in Knowledge Base Mod for PHPbb 2.0.2 and earlier

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cmaps v8.0 - SQL injection

CVE-2023-29809CRITICALwebappsphp

SQL injection vulnerability found in Maximilian Vogt companymaps (cmaps) v.8.0 allows a remote attacker to execute arbit

53RISCO

abrir ↗

Referência✓ VexDay Proof

CMS Faethon 2.2 Ultimate - Remote File Inclusion / Cross-Site Scripting

CVE-2008-2127—webappsphp

Cross-site scripting (XSS) vulnerability in search.php in CMS Faethon 2.2 Ultimate allows remote attackers to inject arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

Phpjobscheduler 3.0 - 'installed_config_file' File Inclusion

CVE-2006-5928—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Phpjobscheduler 3.0 allow remote attackers to execute arbitrary PH

23RISCO

abrir ↗

Referência✓ VexDay Proof

RsGallery2 < 1.11.2 - 'rsgallery.html.php' File Inclusion

CVE-2006-6962—webappsphp

PHP remote file inclusion vulnerability in rsgallery2.html.php in the RS Gallery2 component (com_rsgallery2) 1.11.2 for

23RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin Wordspew - SQL Injection

CVE-2008-0682—webappsphp

SQL injection vulnerability in wordspew-rss.php in the Wordspew plugin before 3.72 for Wordpress allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

VS-News-System 1.2.1 - 'newsordner' Remote File Inclusion

CVE-2007-1017—webappsphp

PHP remote file inclusion vulnerability in show_news_inc.php in VirtualSystem VS-News-System 1.2.1 and earlier allows re

23RISCO

abrir ↗

Referência✓ VexDay Proof

EZContents CMS 2.0.0 - Multiple SQL Injections

CVE-2008-2135—webappsphp

Multiple SQL injection vulnerabilities in VisualShapers ezContents 2.0.0 allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Studio Lounge Address Book 2.5 - 'profile' Arbitrary File Upload

CVE-2009-1483—webappsphp

Unrestricted file upload vulnerability in upload-file.php in Adam Patterson Studio Lounge Address Book 2.5, as reachable

23RISCO

abrir ↗

Referência✓ VexDay Proof

PrecisionID Barcode ActiveX 1.3 - Denial of Service

CVE-2007-2657—doswindows

Unspecified vulnerability in the PrecisionID Barcode 1.3 ActiveX control in PrecisionID_DataMatrix.DLL allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

CentiPaid 1.4.2 - 'centipaid_class.php' Remote File Inclusion

CVE-2006-6976—webappsphp

PHP remote file inclusion vulnerability in centipaid_class.php in CentiPaid 1.4.2 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Weblogicnet - 'files_dir' Multiple Remote File Inclusions

CVE-2007-4715—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Weblogicnet allow remote attackers to execute arbitrary PHP code v

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cplinks 1.03 - Authentication Bypass / SQL Injection / Cross-Site Scripting

CVE-2008-2181—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in search.php in cpLinks 1.03 allow remote attackers to inject arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

NULL FTP Server 1.1.0.7 - 'Site' Command Injection

CVE-2008-6534—remotewindows

Incomplete blacklist vulnerability in NULL FTP Server Free and Pro 1.1.0.7 allows remote authenticated users to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

My PHP Indexer 1.0 - 'index.php' Local File Download

CVE-2008-6183—webappsphp

Multiple directory traversal vulnerabilities in index.php in My PHP Indexer 1.0 allow remote attackers to read arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

RunCMS 1.6 - Multiple Vulnerabilities

CVE-2007-6545—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in RunCMS before 1.6.1 allow remote attackers to inject arbitrary we

23RISCO

abrir ↗

Referência✓ VexDay Proof

Belkin Wireless G Router / ADSL2 Modem - Authentication Bypass

CVE-2008-7115—remotehardware

The web interface to the Belkin Wireless G router and ADSL2 modem F5D7632-4V6 with firmware 6.01.08 allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

DFF PHP Framework API - 'Data Feed File' Remote File Inclusion

CVE-2008-4502—webappsphp

Multiple PHP remote file inclusion vulnerabilities in DataFeedFile (DFF) PHP Framework API allow remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Fusion Mod Classifieds - 'lid' SQL Injection

CVE-2008-5197—webappsphp

SQL injection vulnerability in classifieds.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

TurnkeyForms Web Hosting Directory - Multiple Vulnerabilities

CVE-2008-6940—webappsphp

TurnkeyForms Web Hosting Directory stores sensitive information under the web root with insufficient access control, whi

23RISCO

abrir ↗

Referência✓ VexDay Proof

pivot 1.40.4-7 - Multiple Vulnerabilities

CVE-2009-2133—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in Pivot 1.40.4 and 1.40.7 allow remote attackers to inject arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ksemail - Local File Inclusion

CVE-2008-1751—webappsphp

Multiple directory traversal vulnerabilities in index.php in Ksemail allow remote attackers to read arbitrary local file

23RISCO

abrir ↗

Referência✓ VexDay Proof

OneCMS 2.5 - 'install_mod.php' Local File Inclusion

CVE-2008-2482—webappsphp

Directory traversal vulnerability in install_mod.php in insanevisions OneCMS 2.5 allows remote attackers to include and

23RISCO

abrir ↗

Referência✓ VexDay Proof

Panda Security ActiveScan 2.0 (Update) - Remote Buffer Overflow

CVE-2008-3156—remotewindows

The ActiveScan ActiveX Control (as2guiie.dll) in Panda ActiveScan before 1.02.00 allows remote attackers to download and

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyPHPsite - Local File Inclusion

CVE-2008-6018—webappsphp

Directory traversal vulnerability in index.php in MyPHPSite, when magic_quotes_gpc is disabled, allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

SineCMS 2.3.5 - Local File Inclusion / Remote Code Execution

CVE-2008-7163—webappsphp

Directory traversal vulnerability in mods/Integrated/index.php in SineCMS 2.3.5 and earlier, when register_globals is en

23RISCO

abrir ↗

Referência✓ VexDay Proof

MailEnable 3.13 SMTP Service - 'VRFY/EXPN' Denial of Service

CVE-2008-1275—doswindows

Multiple unspecified vulnerabilities in the SMTP service in MailEnable Standard Edition 1.x, Professional Edition 3.x an

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebCalendar 0.9.45 - 'includedir' Remote File Inclusion

CVE-2007-1483—webappsphp

Multiple PHP remote file inclusion vulnerabilities in WebCalendar 0.9.45 allow remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência✓ VexDay Proof

zKup CMS 2.0 < 2.3 - Arbitrary File Upload

CVE-2008-7123—webappsphp

Static code injection vulnerability in admin/configuration/modifier.php in zKup CMS 2.0 through 2.3 allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

DeluxeBB 1.2 - Multiple Vulnerabilities

CVE-2008-2194—webappsphp

SQL injection vulnerability in forums.php in DeluxeBB 1.2 and earlier allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.