Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.533exploits catalogados

35.607CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.407GitHub PoC 14.247VulnCheck XDB 8.663Nuclei 4.287Metasploit 3.474✓ só verificadosrecentes populares risco

24.455 exploits

Exploit-DB✓ VexDay Proof

vBulletin 2.3.x - 'global.php' SQL Injection

CVE-2006-5104—webappsphp26 set 2006

SQL injection vulnerability in global.php in Jelsoft vBulletin 2.x allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Photostore - 'details.php?gid' Cross-Site Scripting

CVE-2006-5057—webappsphp25 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in Ktools.net PhotoStore allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BirdBlog 1.x - 'comment.php?entryid' Cross-Site Scripting

CVE-2006-5064—webappsphp25 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in BirdBlog 1.4 and earlier allow remote attackers to inject arbitra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Photostore - 'view_photog.php?photogid' Cross-Site Scripting

CVE-2006-5057—webappsphp25 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in Ktools.net PhotoStore allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Back-End CMS 0.4.5 - 'Facts.php?includes_path' Remote File Inclusion

CVE-2006-5076—webappsphp25 set 2006

Multiple PHP remote file inclusion vulnerabilities in OpenConcept Back-End 0.4.5 allow remote attackers to execute arbit

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Back-End CMS 0.4.5 - '/admin/index.php?includes_path' Remote File Inclusion

CVE-2006-5076—webappsphp25 set 2006

Multiple PHP remote file inclusion vulnerabilities in OpenConcept Back-End 0.4.5 allow remote attackers to execute arbit

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer - 'VML' Remote Buffer Overflow (SP2)

CVE-2006-3866—remotewindows25 set 2006

20RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

My-BIC 0.6.5 - 'Mybic_Server.php' Remote File Inclusion

CVE-2006-5089—webappsphp25 set 2006

PHP remote file inclusion vulnerability in mybic_server.php in Jim Plush My-BIC 0.6.5 allows remote attackers to execute

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Call of Duty Server 4.1.x - Callvote Map Command Remote Buffer Overflow

CVE-2006-5058—dosmultiple25 set 2006

Buffer overflow in (1) Call of Duty 1.5b and earlier, (2) Call of Duty United Offensive 1.51b and earlier, and (3) Call

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Opial AV Download Management 1.0 - 'index.php' Cross-Site Scripting

CVE-2006-5056—webappsphp25 set 2006

Cross-site scripting (XSS) vulnerability in index.php in Opial Audio/Video Download Management 1.0 allows remote attacke

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Exporia 0.3 - 'Common.php' Remote File Inclusion

CVE-2006-5920—webappsphp25 set 2006

PHP remote file inclusion vulnerability in common.php in Yuuki Yoshizawa Exporia 0.3.0 allows remote attackers to execut

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BBSNew 2.0.1 - 'index2.php' Remote File Inclusion

CVE-2006-5103—webappsphp25 set 2006

PHP remote file inclusion vulnerability in admin/index2.php in bbsNew 2.0.1 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer - 'VML' Remote Buffer Overflow (SP2)

CVE-2006-4868—remotewindows25 set 2006

Stack-based buffer overflow in the Vector Graphics Rendering engine (vgx.dll), as used in Microsoft Outlook and Internet

50RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Plain Old WebServer 0.0.7/0.0.8 Firefox Extension - Directory Traversal

CVE-2007-0872—remotewindows25 set 2006

Directory traversal vulnerability in the Plain Old Webserver (POW) add-on before 0.0.9 for Mozilla Firefox allows remote

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BirdBlog 1.x - 'user.php?uid' Cross-Site Scripting

CVE-2006-5064—webappsphp25 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in BirdBlog 1.4 and earlier allow remote attackers to inject arbitra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DanPHPSupport 0.5 - 'index.php?page' Cross-Site Scripting

CVE-2006-5066—webappsphp25 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in DanPHPSupport 0.5, and other versions before 1.0, allow remote at

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Back-End CMS 0.4.5 - 'search.php?includes_path' Remote File Inclusion

CVE-2006-5076—webappsphp25 set 2006

Multiple PHP remote file inclusion vulnerabilities in OpenConcept Back-End 0.4.5 allow remote attackers to execute arbit

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DanPHPSupport 0.5 - 'admin.php?do' Cross-Site Scripting

CVE-2006-5066—webappsphp25 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in DanPHPSupport 0.5, and other versions before 1.0, allow remote at

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BirdBlog 1.x - 'index.php?page' Cross-Site Scripting

CVE-2006-5064—webappsphp25 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in BirdBlog 1.4 and earlier allow remote attackers to inject arbitra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Spidey Blog Script 1.5 - 'proje_goster.asp' SQL Injection (2)

CVE-2006-4202—webappsasp24 set 2006

SQL injection vulnerability in proje_goster.php in Spidey Blog Script 1.5 and earlier allows remote attackers to execute

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer (Windows XP SP2) - 'VML' Remote Buffer Overflow

CVE-2006-3866—remotewindows24 set 2006

20RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer (Windows XP SP2) - 'VML' Remote Buffer Overflow

CVE-2006-4868—remotewindows24 set 2006

Stack-based buffer overflow in the Vector Graphics Rendering engine (vgx.dll), as used in Microsoft Outlook and Internet

50RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Jamroom 3.0.16 - 'login.php' Cross-Site Scripting

CVE-2006-5060—webappspalm_os24 set 2006

Cross-site scripting (XSS) vulnerability in login.php in Jamroom 3.0.16 and possibly earlier allows remote attackers to

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

FreeBSD 5.x - 'I386_Set_LDT()' Multiple Local Denial of Service Vulnerabilities

CVE-2006-4178—dosfreebsd23 set 2006

Integer signedness error in the i386_set_ldt call in FreeBSD 5.5, and possibly earlier versions down to 5.2, allows loca

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

e-Vision CMS 2.0 - 'all_users.php' SQL Injection

CVE-2006-5017—webappsphp22 set 2006

SQL injection vulnerability in admin/all_users.php in Szava Gyula and Csaba Tamas e-Vision CMS, probably 1.0, allows rem

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Red Mombin 0.7 - 'process_login.php' Cross-Site Scripting

CVE-2006-5120—webappsphp22 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in Scott Metoyer Red Mombin 0.7 allow remote attackers to inject arb

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Google Mini Search Appliance 4.4.102.M.36 - Information Disclosure

CVE-2006-5019—webappsphp22 set 2006

Google Mini 4.4.102.M.36 and earlier allows remote attackers to obtain sensitive information via a direct request for /s

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Red Mombin 0.7 - 'index.php' Cross-Site Scripting

CVE-2006-5120—webappsphp22 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in Scott Metoyer Red Mombin 0.7 allow remote attackers to inject arb

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PLESK 7.5/7.6 - 'FileManager.php' Directory Traversal

CVE-2006-5028—webappsphp22 set 2006

Directory traversal vulnerability in filemanager/filemanager.php in SWsoft Plesk 7.5 Reload and Plesk 7.6 for Microsoft

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CakePHP 1.1.7.3363 - 'Vendors.php' Directory Traversal

CVE-2006-5031—webappsphp22 set 2006

Directory traversal vulnerability in app/webroot/js/vendors.php in Cake Software Foundation CakePHP before 1.1.8.3544 al

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.