Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.057exploits catalogados

36.288CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.910GitHub PoC 14.997VulnCheck XDB 8.843Nuclei 4.358Metasploit 3.489✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Frequency Clock 0.1b - 'securelib' Remote File Inclusion

CVE-2007-2936—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Frequency Clock 0.1b (Beta 0.1) allow remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

AuraCMS 2.1 - Remote File Attachment / Local File Inclusion

CVE-2007-4905—webappsphp

Unrestricted file upload vulnerability in mod/contak.php in AuraCMS 2.1 allows remote attackers to upload and execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

XZero Community Classifieds 4.95.11 - Local File Inclusion / SQL Injection

CVE-2007-6567—webappsphp

Directory traversal vulnerability in index.php in XZero Community Classifieds 4.95.11 and earlier allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

P-Book 1.17 - 'pb_lang' Remote File Inclusion

CVE-2006-5667—webappsphp

Multiple PHP remote file inclusion vulnerabilities in P-Book 1.17 and earlier allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Collabtive 0.4.8 - Cross-Site Scripting / Authentication Bypass / Arbitrary File Upload

CVE-2008-6948—webappsphp

Unrestricted file upload vulnerability in Collabtive 0.4.8 allows remote authenticated users to execute arbitrary code b

23RISCO

abrir ↗

Referência✓ VexDay Proof

Virtual DJ 5.0 - '.m3u' Local Buffer Overflow

CVE-2007-4735—localwindows

Buffer overflow in Next Generation Software Virtual DJ (VDJ) 5.0 allows user-assisted remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Wireshark < 0.99.5 - DNP3 Dissector Infinite Loop

CVE-2007-6113—doslinux

Integer signedness error in the DNP3 dissector in Wireshark (formerly Ethereal) 0.10.12 to 0.99.6 allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

ExBB 0.22 - Local/Remote File Inclusion

CVE-2008-1861—webappsphp

Directory traversal vulnerability in modules/threadstop/threadstop.php in ExBB Italia 0.22 and earlier, when register_gl

23RISCO

abrir ↗

Referência✓ VexDay Proof

Active PHP Bookmark Notes 0.2.5 - Remote File Inclusion

CVE-2007-1621—webappsphp

PHP remote file inclusion vulnerability in templates/head.php in Active PHP Bookmark Notes (APB) 0.2.5 and earlier allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bankoi Webhost Panel 1.20 - Authentication Bypass

CVE-2008-6950—webappsasp

Multiple SQL injection vulnerabilities in login.asp in Bankoi WebHosting Control Panel 1.20 allow remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

Clever Internet ActiveX Suite 6.2 - Arbitrary File Download/Overwrite

CVE-2007-4067—remotewindows

Absolute path traversal vulnerability in the clInetSuiteX6.clWebDav ActiveX control in CLINETSUITEX6.OCX in Clever Inter

23RISCO

abrir ↗

Referência✓ VexDay Proof

ooVoo 1.7.1.35 - 'URL Protocol' Remote Unicode Buffer Overflow (PoC)

CVE-2008-6953—doswindows

Buffer overflow in oovoo.exe in ooVoo 1.7.1.35, and possibly other versions before 1.7.1.59, allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sun xVM VirtualBox < 1.6.4 - Privilege Escalation (PoC)

CVE-2008-3431HIGHsob ataquedosmultiple

The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communicat

71RISCO

abrir ↗

Referência✓ VexDay Proof

DFLabs PTK 1.0 - Local Command Execution

CVE-2008-6793—webappsphp

The get_file_type function in lib/file_content.php in DFLabs PTK 0.1, 0.2, and 1.0 allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Discuz! - Remote Reset User Password

CVE-2008-6957—webappsphp

member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted (1) lostp

23RISCO

abrir ↗

Referência✓ VexDay Proof

Site Sift Listings - 'id' SQL Injection

CVE-2008-1869—webappsphp

SQL injection vulnerability in Site Sift Listings allows remote attackers to execute arbitrary SQL commands via the id p

23RISCO

abrir ↗

Referência✓ VexDay Proof

PMB Services 3.0.13 - Multiple Remote File Inclusions

CVE-2007-1415—webappsphp

Multiple PHP remote file inclusion vulnerabilities in PMB Services 3.0.13 and earlier allow remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Friendly Technologies - 'fwRemoteCfg.dll' ActiveX Remote Buffer Overflow

CVE-2008-4048—remotewindows

Heap-based buffer overflow in a certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPo

23RISCO

abrir ↗

Referência✓ VexDay Proof

X10media Mp3 Search Engine 1.6 - Remote File Disclosure

CVE-2008-6960—webappsphp

download.php in X10media x10 Automatic Mp3 Search Engine Script 1.5.5 through 1.6 allows remote attackers to read arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

X7 Chat 2.0.5 - Authentication Bypass

CVE-2008-6964—webappsphp

SQL injection vulnerability in the login page in X7 Chat 2.0.5 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Links Directory 1.1 - 'cat_id' SQL Injection

CVE-2008-1871—webappsphp

SQL injection vulnerability in links.php in Scriptsagent.com Links Directory 1.1 allows remote authenticated users to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

aspwebalbum 3.2 - Multiple Vulnerabilities

CVE-2008-6978—webappsasp

Unrestricted file upload vulnerability in Full Revolution aspWebAlbum 3.2 allows remote attackers to execute arbitrary c

23RISCO

abrir ↗

Referência✓ VexDay Proof

aspwebalbum 3.2 - Arbitrary File Upload / SQL Injection / Cross-Site Scripting

CVE-2008-6978—webappsphp

Unrestricted file upload vulnerability in Full Revolution aspWebAlbum 3.2 allows remote attackers to execute arbitrary c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Google Chrome 0.2.149.27 - 'SaveAs' Remote Buffer Overflow

CVE-2008-6994—remotewindows

Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.14

28RISCO

abrir ↗

Referência✓ VexDay Proof

Google Chrome 0.2.149.27 - Automatic File Download

CVE-2008-6996—remotewindows

Google Chrome BETA (0.2.149.27) does not prompt the user before saving an executable file, which makes it easier for rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

KnowledgeQuest 2.5 - Arbitrary Add Admin

CVE-2008-1727—webappsphp

KnowledgeQuest 2.5 and 2.6 does not require authentication for access to admincheck.php, which allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Google Chrome - Carriage Return Null Object Memory Exhaustion

CVE-2008-4340—doswindows

Google Chrome 0.2.149.29 and 0.2.149.30 allows remote attackers to cause a denial of service (memory consumption) via an

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBBViet 02.03.2007 - 'phpbb_root_path' Remote File Inclusion

CVE-2007-6088—webappsphp

PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBBViet 02.03.07 and earlier allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

VideoScript 4.0.1.50 - Change Admin Password

CVE-2008-5219—webappsphp

The password change feature (admin/cp.php) in VideoScript 4.0.1.50 and earlier does not check for administrative authent

23RISCO

abrir ↗

Referência✓ VexDay Proof

falcon CMS 1.4.3 - Remote File Inclusion / Cross-Site Scripting

CVE-2007-6489—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in Falcon Series One CMS 1.4.3 allow remote attackers to inject arbi

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.