Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.057exploits catalogados

36.288CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.910GitHub PoC 14.997VulnCheck XDB 8.843Nuclei 4.358Metasploit 3.489✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Affiliate Market 0.1 Beta - 'Language' Local File Inclusion

CVE-2008-0794—webappsphp

Directory traversal vulnerability in user/header.php in Affiliate Market 0.1 BETA allows remote attackers to include and

23RISCO

abrir ↗

Referência✓ VexDay Proof

Webace-Linkscript 1.3 SE - 'start.php' SQL Injection

CVE-2007-4846—webappsphp

SQL injection vulnerability in start.php in Webace-Linkscript (wls) 1.3 Special Edition (SE) allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

rgboard 3.0.12 - Remote File Inclusioni / Cross-Site Scripting

CVE-2008-2296—webappsphp

PHP remote file inclusion vulnerability in include/bbs.lib.inc.php in Rgboard 3.0.12 allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

ourvideo CMS 9.5 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting

CVE-2008-2977—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Ourvideo CMS 9.5 allow remote attackers to execute arbitrary PHP c

23RISCO

abrir ↗

Referência✓ VexDay Proof

tplSoccerSite 1.0 - Multiple SQL Injections

CVE-2008-3251—webappsphp

Multiple SQL injection vulnerabilities in tplSoccerSite 1.0 allow remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

YourFreeWorld Shopping Cart - Blind SQL Injection

CVE-2008-4886—webappsphp

SQL injection vulnerability in index.php in YourFreeWorld Shopping Cart Script allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

sCssBoard (Multiple Versions) - 'pwnpack' Remote s

CVE-2008-5577—webappsphp

PHP remote file inclusion vulnerability in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

TorrentTrader Classic 1.09 - Multiple Vulnerabilities

CVE-2009-2161—webappsphp

Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic 1.09, when used on a case-inse

23RISCO

abrir ↗

Referência✓ VexDay Proof

Exero CMS 1.0.1 - 'theme' Multiple Local File Inclusions

CVE-2008-1409—webappsphp

Multiple directory traversal vulnerabilities in the Default theme in Exero CMS 1.0.1 allow remote attackers to include a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Boite de News 4.0.1 - 'index.php' Remote File Inclusion

CVE-2006-4123—webappsphp

PHP remote file inclusion vulnerability in boitenews4/index.php in Boite de News 4.0.1 allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpAtm 1.21 - 'include_location' Remote File Inclusion

CVE-2006-4594—webappsphp

Multiple PHP remote file inclusion vulnerabilities in PHP Advanced Transfer Manager (phpAtm) 1.21 and earlier allow remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

OtomiGen.x 2.2 - 'lang' Local File Inclusion

CVE-2008-2782—webappsphp

Multiple directory traversal vulnerabilities in OtomiGenX 2.2 allow remote attackers to include and execute arbitrary lo

23RISCO

abrir ↗

Referência✓ VexDay Proof

e107 < 0.75 - 'e107language_e107cookie' Local File Inclusion

CVE-2006-5786—webappsphp

Directory traversal vulnerability in class2.php in e107 0.7.5 and earlier allows remote attackers to read and execute PH

23RISCO

abrir ↗

Referência✓ VexDay Proof

ezcms 1.2 - Blind SQL Injection / Authentication Bypass

CVE-2008-2920—webappsphp

admin/filemanager/ (aka the File Manager) in EZTechhelp EZCMS 1.2 and earlier does not require authentication, which all

23RISCO

abrir ↗

Referência✓ VexDay Proof

syzygyCMS 0.3 - 'index.php' Local File Inclusion

CVE-2008-3593—webappsphp

Directory traversal vulnerability in index.php in SyzygyCMS 0.3 allows remote attackers to include and execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

AuraCMS 2.2 - Remote Add Administrator

CVE-2007-6552—webappsphp

Directory traversal vulnerability in index.php in AuraCMS 2.2 allows remote authenticated users to include and execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mini-CMS 1.0.1 - 'index.php' Local File Inclusion

CVE-2008-5593—webappsphp

Multiple directory traversal vulnerabilities in index.php in Mini CMS 1.0.1 allow remote attackers to include and execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

KTP Computer Customer Database CMS 1.0 - Local File Inclusion

CVE-2008-5953—webappsphp

Directory traversal vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc is disabled, all

23RISCO

abrir ↗

Referência✓ VexDay Proof

Absolute Form Processor XE-V 1.5 - Insecure Cookie Handling

CVE-2009-1504—webappsasp

Absolute Form Processor XE 1.5 allows remote attackers to bypass authentication and gain administrative access by settin

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bitweaver 2.6 - 'saveFeed()' Remote Code Execution

CVE-2009-1678—webappsphp

Directory traversal vulnerability in the saveFeed function in rss/feedcreator.class.php in Bitweaver 2.6 and earlier all

23RISCO

abrir ↗

Referência✓ VexDay Proof

Postfix 2.6-20080814 - 'symlink' Local Privilege Escalation

CVE-2008-2936—locallinux

Postfix before 2.3.15, 2.4 before 2.4.8, 2.5 before 2.5.4, and 2.6 before 2.6-20080814, when the operating system suppor

23RISCO

abrir ↗

Referência✓ VexDay Proof

GGCMS 1.1.0 RC1 - Remote Code Execution

CVE-2007-0804—webappsphp

Directory traversal vulnerability in admin/subpages.php in GGCMS 1.1.0 RC1 and earlier allows remote attackers to inject

23RISCO

abrir ↗

Referência✓ VexDay Proof

Garennes 0.6.1 - 'repertoire_config' Remote File Inclusion

CVE-2007-2298—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Garennes 0.6.1 and earlier allow remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

iyzi Forum 1.0b3 - Database Disclosure

CVE-2008-5901—webappsphp

iyzi Forum 1.0 beta 3 stores sensitive information under the web root with insufficient access control, which allows rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

GoSamba 1.0.1 - 'INCLUDE_PATH' Multiple Remote File Inclusions

CVE-2007-5786—webappsphp

Multiple PHP remote file inclusion vulnerabilities in GoSamba 1.0.1 allow remote attackers to execute arbitrary PHP code

23RISCO

abrir ↗

Referência✓ VexDay Proof

Phoenix View CMS Pre Alpha2 - SQL Injection / Local File Inclusion / Cross-Site Scripting

CVE-2008-2534—webappsphp

Directory traversal vulnerability in admin/admin_frame.php in Phoenix View CMS Pre Alpha2 and earlier allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

CubeCart 3.0.6 - Remote Command Execution

CVE-2006-0064—webappsphp

PHP remote file include vulnerability in includes/orderSuccess.inc.php in CubeCart allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

hosting controller 6.1 hot fix 3.3 - Multiple Vulnerabilities

CVE-2007-6501—webappsasp

Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to enable

23RISCO

abrir ↗

Referência✓ VexDay Proof

inertianews 0.02b - 'inertianews_main.php' Remote File Inclusion

CVE-2006-6726—webappsphp

PHP remote file inclusion vulnerability in inertianews_main.php in inertianews 0.02 beta allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

EQdkp 1.3.1 - 'Referer Spoof' Remote Database Backup

CVE-2007-0760—webappsphp

EQdkp 1.3.1 and earlier authenticates administrative requests by verifying that the HTTP Referer header specifies an adm

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.