Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.794exploits catalogados

36.057CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.459Referência 22.721GitHub PoC 14.946VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

CKGold Shopping Cart 2.5 - 'category_id' SQL Injection

CVE-2008-2774—webappsphp

SQL injection vulnerability in item.php in CartKeeper CKGold Shopping Cart 2.5 and 2.7 allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

RevokeBB 1.0 RC11 - 'Search' SQL Injection

CVE-2008-2778—webappsphp

SQL injection vulnerability in inc/class_search.php in the Search System in RevokeBB 1.0 RC11 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyMarket 1.72 - Blind SQL Injection

CVE-2008-2815—webappsphp

SQL injection vulnerability in shopping/index.php in MyMarket 1.72 allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

Nitro Web Gallery 1.4.3 - 'section' SQL Injection

CVE-2008-2817—webappsphp

SQL injection vulnerability in albums.php in NiTrO Web Gallery 1.4.3 and earlier allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

LE.CMS 1.4 - Arbitrary File Upload

CVE-2008-2833—webappsphp

admin/upload.php in le.cms 1.4 and earlier allows remote attackers to bypass administrative authentication, and upload a

23RISCO

abrir ↗

Referência✓ VexDay Proof

IGSuite 3.2.4 - Reverse Shell / Blind SQL Injection

CVE-2008-2835—webappsphp

SQL injection vulnerability in cgi-bin/igsuite in IGSuite 3.2.4 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

traindepot 0.1 - Local File Inclusion / Cross-Site Scripting

CVE-2008-2838—webappsphp

Directory traversal vulnerability in index.php in Traindepot 0.1 allows remote attackers to read arbitrary files via a .

23RISCO

abrir ↗

Referência✓ VexDay Proof

traindepot 0.1 - Local File Inclusion / Cross-Site Scripting

CVE-2008-2839—webappsphp

Cross-site scripting (XSS) vulnerability in the search module in Traindepot 0.1 allows remote attackers to inject arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

SFS EZ Webstore - 'where' SQL Injection

CVE-2008-6242—webappsphp

SQL injection vulnerability in SearchResults.php in Scripts For Sites (SFS) EZ e-store allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

XChat 2.8.7b - 'URI Handler' Remote Code Execution (Internet Explorer 6/7)

CVE-2008-2841—remotewindows

Argument injection vulnerability in XChat 2.8.7b and earlier on Windows, when Internet Explorer is used, allows remote a

28RISCO

abrir ↗

Referência✓ VexDay Proof

DUcalendar 1.0 - 'iEve' SQL Injection

CVE-2008-2868—webappsasp

SQL injection vulnerability in detail.asp in DUware DUcalendar 1.0 and possibly earlier allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

Jokes & Funny Pics Script - 'sb_jokeid' SQL Injection

CVE-2008-2874—webappsphp

SQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

Jadu Galaxies - 'categoryId' Blind SQL Injection

CVE-2008-6254—webappsphp

SQL injection vulnerability in scripts/documents.php in Jadu Galaxies allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Hedgehog-CMS 1.21 - 'header.php' Local File Inclusion

CVE-2008-2898—webappsphp

Directory traversal vulnerability in includes/header.php in Hedgehog-CMS 1.21 allows remote attackers to include and exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpAuction 3.2.1 - 'item.php' SQL Injection

CVE-2008-2900—webappsphp

SQL injection vulnerability in item.php in PHPAuction 3.2 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Advanced Webhost Billing System (AWBS) 2.7.1 - 'news.php' SQL Injection

CVE-2008-2903—webappsphp

SQL injection vulnerability in news.php in Advanced Webhost Billing System (AWBS) 2.3.3 through 2.7.1, when magic_quotes

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo 4.6.4 - 'Output.php' Remote File Inclusion

CVE-2008-2905—webappsphp

PHP remote file inclusion vulnerability in includes/Cache/Lite/Output.php in the Cache_Lite package in Mambo 4.6.4 and e

43RISCO

abrir ↗

Referência✓ VexDay Proof

WebChamado 1.1 - 'tsk_id' SQL Injection

CVE-2008-2906—webappsphp

SQL injection vulnerability in lista_anexos.php in WebChamado 1.1 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pre Job Board - 'JobSearch.php' SQL Injection

CVE-2008-2915—webappsphp

Multiple SQL injection vulnerabilities in jobseekers/JobSearch.php (aka the search module) in Pre Job Board allow remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

E-topbiz ADManager 4 - 'group' Blind SQL Injection

CVE-2008-6261—webappsphp

SQL injection vulnerability in view.php in E-topbiz AdManager 4 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bluo CMS 1.2 - Blind SQL Injection

CVE-2008-6281—webappsphp

SQL injection vulnerability in index.php in Bluo CMS 1.2 allows remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Formbankserver 1.9 - 'Name' Directory Traversal

CVE-2007-0055—remotewindows

Directory traversal vulnerability in formbankcgi.exe/AbfrageForm in Formbankserver 1.9 allows remote attackers to read a

23RISCO

abrir ↗

Referência✓ VexDay Proof

z1exchange 1.0 - 'site' SQL Injection

CVE-2008-6284—webappsphp

SQL injection vulnerability in edit.php in Z1Exchange 1.0 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pre ADS Portal 2.0 - SQL Injection

CVE-2008-2916—webappsphp

Multiple SQL injection vulnerabilities in Pre ADS Portal 2.0 and earlier, when magic_quotes_gpc is disabled, allow remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

Visual Basic Enterprise Edition SP6 - 'vb6skit.dll' Buffer Overflow (PoC)

CVE-2008-2959—doswindows

Buffer overflow in a certain ActiveX control (vb6skit.dll) in Microsoft Visual Basic Enterprise Edition 6.0 SP6 might al

28RISCO

abrir ↗

Referência✓ VexDay Proof

CMS Mini 0.2.2 - Multiple Local File Inclusions

CVE-2008-2961—webappsphp

Multiple directory traversal vulnerabilities in view/index.php in CMS Mini 0.2.2 allow remote attackers to read arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

CiBlog 3.1 - 'id' SQL Injection

CVE-2008-2971—webappsphp

SQL injection vulnerability in links-extern.php in CiBlog 3.1 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP KnowledgeBase Script 2.4 - 'cat_id' SQL Injection

CVE-2008-2972—webappsphp

SQL injection vulnerability in index.php in KbLance allows remote attackers to execute arbitrary SQL commands via the ca

23RISCO

abrir ↗

Referência✓ VexDay Proof

TinXCMS 1.1 - Local File Inclusion / Cross-Site Scripting

CVE-2008-2975—webappsphp

Cross-site scripting (XSS) vulnerability in admin/objects/obj_image.php in TinX/cms 1.1 allows remote attackers to injec

23RISCO

abrir ↗

Referência✓ VexDay Proof

HomePH Design 2.10 RC2 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting

CVE-2008-2982—webappsphp

Multiple directory traversal vulnerabilities in HomePH Design 2.10 RC2, when register_globals is enabled, allow remote a

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.