Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.533exploits catalogados

35.607CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.407GitHub PoC 14.247VulnCheck XDB 8.663Nuclei 4.287Metasploit 3.474✓ só verificadosrecentes populares risco

24.455 exploits

Exploit-DB✓ VexDay Proof

osCommerce 2.2 - '/admin/languages.php?page' Cross-Site Scripting

CVE-2006-5190—webappsphp04 out 2006

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

osCommerce 2.2 - '/admin/products_attributes.php?page' Cross-Site Scripting

CVE-2006-5190—webappsphp04 out 2006

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

osCommerce 2.2 - '/admin/orders_status.php?page' Cross-Site Scripting

CVE-2006-5190—webappsphp04 out 2006

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

osCommerce 2.2 - '/admin/stats_products_purchased.php?page' Cross-Site Scripting

CVE-2006-5190—webappsphp04 out 2006

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

osCommerce 2.2 - '/admin/newsletters.php?page' Cross-Site Scripting

CVE-2006-5190—webappsphp04 out 2006

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

osCommerce 2.2 - '/admin/currencies.php?page' Cross-Site Scripting

CVE-2006-5190—webappsphp04 out 2006

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

JAF CMS 4.0 RC1 - Multiple Remote File Inclusions

CVE-2008-1609—webappsphp04 out 2006

Multiple PHP remote file inclusion vulnerabilities in just another flat file (JAF) CMS 4.0 RC2 allow remote attackers to

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPGreetz 0.99 - 'footer.php' Remote File Inclusion

CVE-2006-5192—webappsphp04 out 2006

PHP remote file inclusion vulnerability in includes/footer.php in phpGreetz 0.99 and earlier allows remote attackers to

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

osCommerce 2.2 - '/admin/tax_rates.php?page' Cross-Site Scripting

CVE-2006-5190—webappsphp04 out 2006

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

JAF CMS 4.0 RC1 - Multiple Remote File Inclusions

CVE-2006-7127—webappsphp04 out 2006

Multiple PHP remote file inclusion vulnerabilities in JAF CMS 4.0 and 4.0 RC2 allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

phpBB Admin Topic Action Logging Mod 0.94b - Remote File Inclusion

CVE-2006-5209—webappsphp04 out 2006

PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Admin Topic Action Logging Mod 0.95 a

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

osCommerce 2.2 - '/admin/banner_manager.php?page' Cross-Site Scripting

CVE-2006-5190—webappsphp04 out 2006

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

osCommerce 2.2 - '/admin/zones.php?page' Cross-Site Scripting

CVE-2006-5190—webappsphp04 out 2006

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

osCommerce 2.2 - '/admin/banner_statistics.php?page' Cross-Site Scripting

CVE-2006-5190—webappsphp04 out 2006

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

JAF CMS 4.0 RC1 - 'forum.php' Remote File Inclusion

CVE-2008-1609—webappsphp03 out 2006

Multiple PHP remote file inclusion vulnerabilities in just another flat file (JAF) CMS 4.0 RC2 allow remote attackers to

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Motorola SB4200 - Remote Denial of Service

CVE-2006-5196—doshardware03 out 2006

The HTTP interface in the Motorola SURFboard SB4200 Cable Modem allows remote attackers to cause a denial of service (de

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DeluxeBB 1.09 - 'Sig.php' Remote File Inclusion

CVE-2006-5154—webappsphp02 out 2006

PHP remote file inclusion vulnerability in cp/sig.php in DeluxeBB 1.09 and earlier allows remote attackers to execute ar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP Web Scripts Easy Banner - 'functions.php' Remote File Inclusion

CVE-2006-5166—webappsphp02 out 2006

PHP remote file inclusion vulnerability in functions.php in PHP Web Scripts Easy Banner Free allows remote attackers to

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Digishop 4.0 - 'cart.php' Cross-Site Scripting

CVE-2006-5164—webappsphp02 out 2006

Multiple cross-site scripting (XSS) vulnerabilities in cart.php in Sum Effect Software digiSHOP 4.0 allow remote attacke

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

cPanel 10.8.x - cpwrap via MySQLAdmin Privilege Escalation

CVE-2006-5014HIGHlocallinux01 out 2006

Unspecified vulnerability in cPanel before 10.9.0 12 Tree allows remote authenticated users to gain privileges via unspe

41RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

McAfee ePo 3.5.0 / ProtectionPilot 1.1.0 - Source Remote (Metasploit)

CVE-2006-5156—remotewindows01 out 2006

Buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1.126 allows remote attac

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Apple Mac OSX 10.4.7 - Mach Exception Handling Privilege Escalation

CVE-2006-4392—localosx30 set 2006

The Mach kernel, as used in operating systems including (1) Mac OS X 10.4 through 10.4.7 and (2) OpenStep before 4.2, al

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Yblog - 'funk.php' Cross-Site Scripting

CVE-2006-5146—webappsphp30 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in Yblog allow remote attackers to inject arbitrary web script or HT

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Yblog - 'tem.php' Cross-Site Scripting

CVE-2006-5146—webappsphp30 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in Yblog allow remote attackers to inject arbitrary web script or HT

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Yblog - 'uss.php' Cross-Site Scripting

CVE-2006-5146—webappsphp30 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in Yblog allow remote attackers to inject arbitrary web script or HT

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

phpMyWebmin 1.0 - 'target' Remote File Inclusion

CVE-2006-5124—webappsphp30 set 2006

Multiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote attackers to execute ar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Apple Mac OSX 10.4.7 - Mach Exception Handling Local (10.3.x)

CVE-2006-4392—localosx30 set 2006

The Mach kernel, as used in operating systems including (1) Mac OS X 10.4 through 10.4.7 and (2) OpenStep before 4.2, al

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

phpMyWebmin 1.0 - 'target' Remote File Inclusion

CVE-2006-5125—webappsphp30 set 2006

Directory traversal vulnerability in window.php, possibly used by home.php, in Joshua Muheim phpMyWebmin 1.0 allows remo

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer - WebViewFolderIcon setSlice() (1)

CVE-2006-3730HIGHremotewindows29 set 2006

Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service

68RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Buzlas 2006-1 Full - 'Archive_Topic.php' Remote File Inclusion

CVE-2006-5311—webappsphp29 set 2006

PHP remote file inclusion vulnerability in includes/archive/archive_topic.php in Buzlas 2006-1 Full allows remote attack

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.