Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.724exploits catalogados

35.724CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8.703Nuclei 4.314Metasploit 3.474✓ só verificadosrecentes populares risco

22.492 exploits

Referência✓ VexDay Proof

BookmarkX script 2007 - 'topicid' SQL Injection

CVE-2008-0695—webappsphp

SQL injection vulnerability in index.php in BookmarkX script 2007 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mihalism Multi Host Download - 'Username' Blind SQL Injection

CVE-2008-0714—webappsphp

SQL injection vulnerability in users.php in Mihalism Multi Host allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sun Solaris 10 - snoop(1M) Utility Remote Command Execution

CVE-2008-0964—remotesolaris

Multiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o op

28RISCO

abrir ↗

Referência✓ VexDay Proof

PORAR WebBoard - 'question.asp' SQL Injection

CVE-2008-1039—webappsasp

SQL injection vulnerability in question.asp in PORAR WEBBOARD allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Download Manager 1.1 - Local File Inclusion

CVE-2008-1042—webappsphp

Directory traversal vulnerability in include/body.inc.php in Linux Web Shop (LWS) php Download Manager 1.0 and 1.1 allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPUserBase 1.3b - 'unverified.inc.php' Remote File Inclusion

CVE-2008-1043—webappsphp

PHP remote file inclusion vulnerability in templates/default/header.inc.php in Linux Web Shop (LWS) php User Base 1.3 BE

35RISCO

abrir ↗

Referência✓ VexDay Proof

Quinsonnas Mail Checker 1.55 - 'footer.php' Remote File Inclusion

CVE-2008-1046—webappsphp

PHP remote file inclusion vulnerability in footer.php in Quinsonnas Mail Checker 1.55 allows remote attackers to execute

28RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin Sniplets 1.1.2 - Remote File Inclusion / Cross-Site Scripting / Remote Code Execution

CVE-2008-1059—webappsphp

PHP remote file inclusion vulnerability in modules/syntax_highlight.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordP

50RISCO

abrir ↗

Referência✓ VexDay Proof

phpQLAdmin 2.2.7 - Multiple Remote File Inclusions

CVE-2008-1067—webappsphp

Multiple PHP remote file inclusion vulnerabilities in phpQLAdmin 2.2.7 allow remote attackers to execute arbitrary PHP c

28RISCO

abrir ↗

Referência✓ VexDay Proof

GROUP-E 1.6.41 - 'head_auth.php' Remote File Inclusion

CVE-2008-1074—webappsphp

PHP remote file inclusion vulnerability in lib/head_auth.php in GROUP-E 1.6.41 allows remote attackers to execute arbitr

35RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows - GDI (CreateDIBPatternBrushPt) Heap Overflow (PoC)

CVE-2008-1083HIGHdoswindows

Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server

53RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows - GDI (EMR_COLORMATCHTOTARGETW) (MS08-021)

CVE-2008-1087—remotewindows

Stack-based buffer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 200

35RISCO

abrir ↗

Referência✓ VexDay Proof

Motorola Timbuktu Pro 8.6.5 - File Deletion/Creation

CVE-2008-1117—remotewindows

Directory traversal vulnerability in the Notes (aka Flash Notes or instant messages) feature in tb2ftp.dll in Timbuktu P

50RISCO

abrir ↗

Referência✓ VexDay Proof

Motorola Timbuktu Pro 8.6.5/8.7 - Directory Traversal / Log Injection

CVE-2008-1117—remotewindows

Directory traversal vulnerability in the Notes (aka Flash Notes or instant messages) feature in tb2ftp.dll in Timbuktu P

50RISCO

abrir ↗

Referência✓ VexDay Proof

Centreon 1.4.2.3 - 'get_image.php' Remote File Disclosure

CVE-2008-1119—webappsphp

Directory traversal vulnerability in include/doc/get_image.php in Centreon 1.4.2.3 and earlier allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

eazyPortal 1.0 - 'cookie' SQL Injection

CVE-2008-1121—webappsphp

SQL injection vulnerability in index.php in eazyPortal 1.0 and earlier allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2008-1122

CVE-2008-1122—

SQL injection vulnerability in the downloads module in Koobi Pro 5.7 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Dream4 Koobi Pro 5.7 - 'categ' SQL Injection

CVE-2008-1122—webappsphp

SQL injection vulnerability in the downloads module in Koobi Pro 5.7 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Podcast Generator 1.0 Beta 2 - Remote File Inclusion / File Disclosure

CVE-2008-1124—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Podcast Generator 1.0 BETA 2 and earlier allow remote attackers to

28RISCO

abrir ↗

Referência✓ VexDay Proof

Podcast Generator 1.0 Beta 2 - Remote File Inclusion / File Disclosure

CVE-2008-1125—webappsphp

Multiple directory traversal vulnerabilities in Podcast Generator 1.0 BETA 2 and earlier allow remote attackers to read

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component garyscookbook 1.1.1 - SQL Injection

CVE-2008-1137—webappsphp

SQL injection vulnerability in the Garys Cookbook (com_garyscookbook) 1.1.1 and earlier component for Mambo and Joomla!

23RISCO

abrir ↗

Referência✓ VexDay Proof

DESlock+ < 3.2.6 - 'DLMFENC.sys' Local Kernel Ring0 link list zero (PoC)

CVE-2008-1138—doswindows

DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service (system crash) via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

DESlock+ < 3.2.6 - Local Kernel Ring0 link list zero SYSTEM

CVE-2008-1139—localwindows

DESlock+ 3.2.6 and earlier, when DLMFENC.sys 1.0.0.26 and DLMFDISK.sys 1.2.0.27 are present, allows local users to gain

23RISCO

abrir ↗

Referência✓ VexDay Proof

DESlock+ < 3.2.6 - 'DLMFDISK.sy's Local kernel Ring0 SYSTEM

CVE-2008-1140—localwindows

DLMFDISK.sys 1.2.0.27 in DESlock+ 3.2.6 and earlier allows local users to gain privileges via a certain DLKFDISK_IOCTL r

23RISCO

abrir ↗

Referência✓ VexDay Proof

DESlock+ < 3.2.6 - 'LIST' Local Kernel Memory Leak

CVE-2008-1141—localwindows

Memory leak in DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service (kerne

23RISCO

abrir ↗

Referência✓ VexDay Proof

ZYXEL ZyWALL Quagga/Zebra - 'Default Password' Remote Code Execution

CVE-2008-1160—remotehardware

ZyXEL ZyWALL 1050 has a hard-coded password for the Quagga and Zebra processes that is not changed when it is set by a u

28RISCO

abrir ↗

Referência

CVE-2026-14574

CVE-2026-14574MEDIUM

In Eclipse Theia versions 0.7.0 and up until including 1.73.1, the `PreferenceUtils.merge` function in `@theia/core` rec

33RISCO

abrir ↗

Referência

CVE-2026-19006

CVE-2026-19006MEDIUM

mf-yang openclaw-cn Ggateway Exec Approval Flow bash-tools.exec.ts authorization

33RISCO

abrir ↗

Referência✓ VexDay Proof

BIND 9.x - Remote DNS Cache Poisoning

CVE-2008-1447—remotemultiple

The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windo

60RISCO

abrir ↗

Referência✓ VexDay Proof

RunCMS Module section - 'artid' SQL Injection

CVE-2008-1462—webappsphp

SQL injection vulnerability in the sections (Section) module in RunCMS allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.