Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.724exploits catalogados

35.724CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8.703Nuclei 4.314Metasploit 3.474✓ só verificadosrecentes populares risco

22.492 exploits

Referência✓ VexDay Proof

OxYProject 0.85 - 'edithistory.php' Remote Code Execution

CVE-2008-6651—webappsphp

Static code injection vulnerability in edithistory.php in OxYProject OxYBox 0.85 allows remote attackers to inject arbit

23RISCO

abrir ↗

Referência

CVE-2022-24716

CVE-2022-24716HIGH

Path traversal in Icinga Web 2

78RISCO

abrir ↗

Referência

CVE-2018-15708

CVE-2018-15708—

Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP r

60RISCO

abrir ↗

Referência

CVE-2018-15708

CVE-2018-15708—

Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP r

60RISCO

abrir ↗

Referência✓ VexDay Proof

OneCMS 2.5 - Blind SQL Injection

CVE-2008-6652—webappsphp

SQL injection vulnerability in asd.php in OneCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the s

23RISCO

abrir ↗

Referência

CVE-2017-5521

CVE-2017-5521HIGHsob ataque

An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R

100RISCO

abrir ↗

Referência

CVE-2014-4977

CVE-2014-4977—

Multiple SQL injection vulnerabilities in Dell SonicWall Scrutinizer 11.0.1 allow remote authenticated users to execute

60RISCO

abrir ↗

Referência✓ VexDay Proof

Simple Machines Forum (SMF) 1.1.6 - Code Execution

CVE-2008-6657—webappsphp

Cross-site request forgery (CSRF) vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15 and 1.1 be

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apartment Search Script - Arbitrary File Upload / Cross-Site Scripting

CVE-2008-6683—webappsphp

Cross-site scripting (XSS) vulnerability in listtest.php in Apartment Search Script allows remote attackers to inject ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pre ADS Portal 2.0 - Authentication Bypass / Cross-Site Scripting

CVE-2008-6715—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in Pre ADS Portal 2.0 and earlier allow remote attackers to inject a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pre ADS Portal 2.0 - Authentication Bypass / Cross-Site Scripting

CVE-2008-6716—webappsphp

homeadmin/adminhome.php in Pre ADS Portal 2.0 and earlier does not require administrative authentication, which allows r

23RISCO

abrir ↗

Referência✓ VexDay Proof

U&M Software Signup 1.1 - Authentication Bypass

CVE-2008-6717—webappsphp

U&M Software Signup 1.0 and 1.1 does not require administrative authentication for all scripts in the admin/ directory,

23RISCO

abrir ↗

Referência✓ VexDay Proof

U&M Software Event Lister 1.0 - Authentication Bypass

CVE-2008-6719—webappsphp

U&M Software Event Lister (aka JustListIt) 1.0 does not require administrative authentication for all scripts in the adm

23RISCO

abrir ↗

Referência✓ VexDay Proof

DELTAScripts PHP Links 1.3 - Authentication Bypass

CVE-2008-6720—webappsphp

SQL injection vulnerability in admin/adm_login.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

AJ Article 1.0 - Authentication Bypass

CVE-2008-6721—webappsphp

SQL injection vulnerability in index.php in AJ Square AJ Article allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP 5.2.1 - 'substr_compare()' Information Leak

CVE-2007-1375—localmultiple

Integer overflow in the substr_compare function in PHP 5.2.1 and earlier allows context-dependent attackers to read sens

23RISCO

abrir ↗

Referência✓ VexDay Proof

CMScout 2.06 - SQL Injection / Local File Inclusion

CVE-2008-6725—webappsphp

Multiple SQL injection vulnerabilities in CMScout 2.06 allow remote authenticated users to execute arbitrary SQL command

23RISCO

abrir ↗

Referência

CVE-2023-36266

CVE-2023-36266—

An issue was discovered in Keeper Password Manager for Desktop version 16.10.2 (fixed in 17.2), and the KeeperFill Brows

23RISCO

abrir ↗

Referência✓ VexDay Proof

CMScout 2.06 - SQL Injection / Local File Inclusion

CVE-2008-6726—webappsphp

Multiple directory traversal vulnerabilities in CMScout 2.06, when register_globals is enabled, allow remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP 'COM' Extensions - inconsistent Win32 'safe_mode' Bypass

CVE-2007-1382—localwindows

The PHP COM extensions for PHP on Windows systems allow context-dependent attackers to execute arbitrary code via a WScr

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPmotion 2.1 - Cross-Site Request Forgery

CVE-2008-6729—webappsphp

Multiple cross-site request forgery (CSRF) vulnerabilities in password.php in PHPmotion 2.1 and earlier allow remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

Flexphplink Pro - Arbitrary File Upload

CVE-2008-6731—webappsphp

Unrestricted file upload vulnerability in submitlink.php in FlexPHPLink Pro 0.0.7 allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

Keller Web Admin CMS 0.94 Pro - Local File Inclusion (2)

CVE-2008-6734—webappsphp

Directory traversal vulnerability in Public/index.php in Keller Web Admin CMS 0.94 Pro allows remote attackers to includ

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyShoutPro 1.2 - Final Insecure Cookie Handling

CVE-2008-6738—webappsphp

MyShoutPro 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the admin_acce

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simple Machines Forum (SMF) 1.1.4 - SQL Injection

CVE-2008-6741—webappsphp

SQL injection vulnerability in Load.php in Simple Machines Forum (SMF) 1.1.4 and earlier allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

RSMScript 1.21 - Cross-Site Scripting / Insecure Cookie Handling

CVE-2008-6743—webappsphp

RSMScript 1.21 allows remote attackers to bypass authentication and gain administrative privileges by setting the verifi

23RISCO

abrir ↗

Referência✓ VexDay Proof

BlogPHP 2.0 - Privilege Escalation / SQL Injection

CVE-2008-6745—webappsphp

index.php in BlogPHP 2.0 allows remote attackers to gain administrator privileges via a crafted email parameter in a reg

23RISCO

abrir ↗

Referência✓ VexDay Proof

SFS EZ Home Business Directory - 'cat_id' SQL Injection

CVE-2008-6783—webappsphp

SQL injection vulnerability in directory.php in Sites for Scripts (SFS) EZ Home Business Directory allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPwebnews 0.2 MySQL Edition - 'det' SQL Injection

CVE-2008-6812—webappsphp

SQL injection vulnerability in bukutamu.php in phpWebNews 0.2 MySQL Edition allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

Campcodes Online Matrimonial Website System v3.3 - Code Execution via malicious SVG file upload

CVE-2023-39115—webappsphp

install/aiz-uploader/upload in Campcodes Online Matrimonial Website System Script 3.3 allows XSS via a crafted SVG docum

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.