Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.587exploits catalogados

35.644CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.428GitHub PoC 14.268VulnCheck XDB 8.663Nuclei 4.299Metasploit 3.474✓ só verificadosrecentes populares risco

24.455 exploits

Exploit-DB✓ VexDay Proof

e107 website system 0.7.5 - 'search.php?Query String (PATH_INFO)' Cross-Site Scripting

CVE-2006-4794—webappsphp13 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

e107 website system 0.7.5 - 'submitnews.php?PATH_INFO' Cross-Site Scripting

CVE-2006-4794—webappsphp13 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ForumJBC 4.0 - 'Haut.php' Cross-Site Scripting

CVE-2006-4771—webappsphp13 set 2006

Cross-site scripting (XSS) vulnerability in haut.php in ForumJBC 4 allows remote attackers to inject arbitrary web scrip

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

NX5Linkx 1.0 - Multiple SQL Injections

CVE-2006-4504—webappsphp13 set 2006

SQL injection vulnerability in NX5Linx 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) c and (

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer - COM Object Remote Heap Overflow

CVE-2006-4777—remotewindows13 set 2006

Heap-based buffer overflow in the DirectAnimation Path Control (DirectAnimation.PathControl) COM object (daxctle.ocx) fo

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

NX5Linkx 1.0 - 'links.php' HTTP Response Splitting

CVE-2006-4505—webappsphp13 set 2006

CRLF injection vulnerability in links.php in NX5Linx 1.0 allows remote attackers to inject arbitrary HTTP headers and co

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

X11R6 < 6.4 XKEYBOARD (Solaris/SPARC) - Local Buffer Overflow (2)

CVE-2006-4655—localsolaris13 set 2006

Buffer overflow in the Strcmp function in the XKEYBOARD extension in X Window System X11R6.4 and earlier, as used in SCO

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

e107 website system 0.7.5 - 'contact.php?Query String (PATH_INFO)' Cross-Site Scripting

CVE-2006-4794—webappsphp13 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Telekorn Signkorn Guestbook 1.x - '/includes/functions.gb.php?dir_path' Remote File Inclusion

CVE-2006-4889—webappsphp12 set 2006

Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_gl

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SQL-Ledger 2.6.x/LedgerSMB 1.0 - 'Terminal' Directory Traversal

CVE-2006-4731—webappscgi12 set 2006

Multiple directory traversal vulnerabilities in (1) login.pl and (2) admin.pl in (a) SQL-Ledger before 2.6.19 and (b) Le

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Telekorn Signkorn Guestbook 1.x - '/includes/admin.inc.php?dir_path' Remote File Inclusion

CVE-2006-4889—webappsphp12 set 2006

Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_gl

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Telekorn Signkorn Guestbook 1.x - 'entry.php?dir_path' Remote File Inclusion

CVE-2006-4889—webappsphp12 set 2006

Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_gl

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Telekorn Signkorn Guestbook 1.x - '/help/de/adminhelp1.php?dir_path' Remote File Inclusion

CVE-2006-4889—webappsphp12 set 2006

Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_gl

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Telekorn Signkorn Guestbook 1.x - '/admin/preview.php?dir_path' Remote File Inclusion

CVE-2006-4889—webappsphp12 set 2006

Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_gl

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Apple QuickTime 6/7 - '.FLC' Movie COLOR_64 Chunk Overflow

CVE-2006-4384—dososx12 set 2006

Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary co

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Telekorn Signkorn Guestbook 1.x - '/help/en/adminhelp0.php?dir_path' Remote File Inclusion

CVE-2006-4889—webappsphp12 set 2006

Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_gl

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Telekorn Signkorn Guestbook 1.x - '/help/en/adminhelp1.php?dir_path' Remote File Inclusion

CVE-2006-4889—webappsphp12 set 2006

Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_gl

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Telekorn Signkorn Guestbook 1.x - '/help/de/adminhelp0.php?dir_path' Remote File Inclusion

CVE-2006-4889—webappsphp12 set 2006

Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_gl

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Telekorn Signkorn Guestbook 1.x - '/admin/log.php?dir_path' Remote File Inclusion

CVE-2006-4889—webappsphp12 set 2006

Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_gl

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Telekorn Signkorn Guestbook 1.x - '/help/de/adminhelp2.php?dir_path' Remote File Inclusion

CVE-2006-4889—webappsphp12 set 2006

Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_gl

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Telekorn Signkorn Guestbook 1.x - '/help/de/adminhelp3.php?dir_path' Remote File Inclusion

CVE-2006-4889—webappsphp12 set 2006

Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_gl

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

IDevSpot iSupport 1.8 - 'index.php?cons_page_title' Cross-Site Scripting

CVE-2006-4884—webappsphp12 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Telekorn Signkorn Guestbook 1.x - 'smile.php?dir_path' Remote File Inclusion

CVE-2006-4889—webappsphp12 set 2006

Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_gl

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Indexing Service - Query Validation Cross-Site Scripting

CVE-2006-0032—remotewindows12 set 2006

Cross-site scripting (XSS) vulnerability in the Indexing Service in Microsoft Windows 2000, XP, and Server 2003, when th

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Telekorn Signkorn Guestbook 1.x - '/includes/functions.admin.php?dir_path' Remote File Inclusion

CVE-2006-4889—webappsphp12 set 2006

Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_gl

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Telekorn Signkorn Guestbook 1.x - 'help.php?dir_path' Remote File Inclusion

CVE-2006-4889—webappsphp12 set 2006

Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_gl

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Paul Smith Computer Services VCAP Calendar Server 1.9 - Remote Denial of Service

CVE-2006-5033—doswindows12 set 2006

Unspecified vulnerability in StoresAndCalendarsList.cgi in Paul Smith Computer Services vCAP 1.9.0 Beta and earlier allo

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Telekorn Signkorn Guestbook 1.x - 'index.php?dir_path' Remote File Inclusion

CVE-2006-4889—webappsphp12 set 2006

Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_gl

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

IDevSpot iSupport 1.8 - 'rightbar.php?suser' Cross-Site Scripting

CVE-2006-4884—webappsphp12 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

IDevSpot iSupport 1.8 - 'open_tickets.php?ticket_id' Cross-Site Scripting

CVE-2006-4884—webappsphp12 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.