Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.620exploits catalogados

35.647CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.429GitHub PoC 14.270VulnCheck XDB 8.693Nuclei 4.299Metasploit 3.474✓ só verificadosrecentes populares risco

24.455 exploits

Exploit-DB✓ VexDay Proof

Joomla! Plugin JD-WordPress 2.0-1.0 RC2 - 'wp-comments-post.php' Remote File Inclusion

CVE-2006-4992—webappsphp28 jul 2006

Multiple PHP remote file inclusion vulnerabilities in JD-WordPress for Joomla! (com_jd-wp) 2.0-1.0 RC2 allow remote atta

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Mozilla Firefox 1.5.0.4 - JavaScript Navigator Object Code Execution

CVE-2006-3677—remotemultiple28 jul 2006

Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by chang

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

GeoClassifieds Enterprise 2.0.5.x - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-7072—webappsphp27 jul 2006

Cross-site scripting (XSS) vulnerability in GeoClassifieds Enterprise 2.0.5.2 and earlier allows remote attackers to inj

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows XP/2000/2003 - Explorer Drag and Drop Remote Code Execution

CVE-2006-3281—remotewindows27 jul 2006

Microsoft Internet Explorer 6.0 does not properly handle Drag and Drop events, which allows remote user-assisted attacke

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MidiRecord2 MidiRecord.CC - Local Buffer Overflow

CVE-2006-3931—locallinux27 jul 2006

Buffer overflow in the daemon function in midirecord.cc in Tuomas Airaksinen Midirecord 2.0 allows local users to execut

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 6 - NDFXArtEffects Stack Overflow

CVE-2006-3943—doswindows27 jul 2006

Stack-based buffer overflow in NDFXArtEffects in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Bosdates 3.x/4.0 - 'Payment.php' Remote File Inclusion

CVE-2006-3957—webappsphp27 jul 2006

PHP remote file inclusion vulnerability in payment.php in BosDev BosDates allows remote attackers to execute arbitrary P

23RISCO

abrir ↗

Exploit-DB

ZYXEL Prestige 660H-61 ADSL Router - Cross-Site Scripting

CVE-2006-3929—webappshardware27 jul 2006

Cross-site scripting (XSS) vulnerability in the Forms/rpSysAdmin script on the Zyxel Prestige 660H-61 ADSL Router runnin

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Linux-HA Heartbeat 1.2.3/2.0.x - Insecure Default Permissions on Shared Memory

CVE-2006-3815—locallinux27 jul 2006

heartbeat.c in heartbeat before 2.0.6 sets insecure permissions in a shmget call for shared memory, which allows local u

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

eIQnetworks License Manager - Remote Buffer Overflow (multi) (1)

CVE-2006-3838—remotewindows27 jul 2006

Multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer (ESA) before 2.5.0, as used in product

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

wwwThreads - 'calendar.php' Cross-Site Scripting

CVE-2006-3909—webappsphp26 jul 2006

Cross-site scripting (XSS) vulnerability in calendar.php in WWWthreads allows remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

eIQnetworks License Manager - Remote Buffer Overflow (Metasploit) (2)

CVE-2006-3838—remotewindows26 jul 2006

Multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer (ESA) before 2.5.0, as used in product

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

eIQnetworks License Manager - Remote Buffer Overflow (Metasploit) (1)

CVE-2006-3838—remotewindows26 jul 2006

Multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer (ESA) before 2.5.0, as used in product

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

phpBB-Auction 1.x - 'auction_store.php?u' SQL Injection

CVE-2006-3940—webappsphp26 jul 2006

Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via (1)

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

phpBB-Auction 1.x - 'auction_room.php?ar' SQL Injection

CVE-2006-3940—webappsphp26 jul 2006

Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via (1)

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Mozilla Suite/Firefox < 1.5.0.5 - Navigator Object Code Execution (Metasploit)

CVE-2006-3677—remotemultiple25 jul 2006

Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by chang

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

LinksCaffe 3.0 - 'menu.inc.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-3883—webappsphp25 jul 2006

Multiple cross-site scripting (XSS) vulnerabilities in Gonafish LinksCaffe 3.0 allow remote attackers to inject arbitrar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

LinksCaffe 3.0 - 'counter.php?tablewidth' Cross-Site Scripting

CVE-2006-3883—webappsphp25 jul 2006

Multiple cross-site scripting (XSS) vulnerabilities in Gonafish LinksCaffe 3.0 allow remote attackers to inject arbitrar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPSavant Savant2 - 'Stylesheet.php?MosConfig_absolute_path' Remote File Inclusion

CVE-2006-3990—webappsphp25 jul 2006

Multiple PHP remote file inclusion vulnerabilities in Paul M. Jones Savant2, possibly when used with the com_mtree compo

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP Pro Bid 5.2.4 - 'auctionsearch.php?advsrc' Cross-Site Scripting

CVE-2006-3927—webappsphp25 jul 2006

Cross-site scripting (XSS) vulnerability in auctionsearch.php in PhpProBid 5.24 allows remote attackers to inject arbitr

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

LinksCaffe 3.0 - 'links.php' Multiple SQL Injections

CVE-2006-3884—webappsphp25 jul 2006

Multiple SQL injection vulnerabilities in links.php in Gonafish LinksCaffe 3.0 allow remote attackers to execute arbitra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP Pro Bid 5.2.4 - 'viewfeedback.php' Multiple SQL Injections

CVE-2006-3926—webappsphp25 jul 2006

Multiple SQL injection vulnerabilities in PhpProBid 5.24 allow remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP Pro Bid 5.2.4 - 'categories.php?orderType' SQL Injection

CVE-2006-3926—webappsphp25 jul 2006

Multiple SQL injection vulnerabilities in PhpProBid 5.24 allow remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

libmikmod 3.2.2 - GT2 Loader Local Heap Overflow (PoC)

CVE-2006-3879—dosmultiple25 jul 2006

Integer overflow in the loadChunk function in loaders/load_gt2.c in libmikmod in Mikmod Sound System 3.2.2 allows remote

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

LinksCaffe 3.0 - 'links.php?newdays' Cross-Site Scripting

CVE-2006-3883—webappsphp25 jul 2006

Multiple cross-site scripting (XSS) vulnerabilities in Gonafish LinksCaffe 3.0 allow remote attackers to inject arbitrar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows XP/2000/2003 - Remote Denial of Service

CVE-2006-3880—doswindows24 jul 2006

Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Small Business Server 2003 allow remote attackers to cau

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MusicBox 2.3.4 - 'page' SQL Injection

CVE-2006-3886—webappsphp24 jul 2006

SQL injection vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 6 - Native Function Iterator Denial of Service

CVE-2006-3915—doswindows24 jul 2006

Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by iteratin

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Mambo Component PrinceClan Chess 0.8 - Remote File Inclusion

CVE-2006-5044—webappsphp24 jul 2006

Unspecified vulnerability in Prince Clan (Princeclan) Chess component (com_pcchess) 0.8 and earlier for Mambo and Joomla

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Solaris 10 - 'sysinfo()' Local Kernel Memory Disclosure (1)

CVE-2006-3824—localsolaris24 jul 2006

systeminfo.c for Sun Solaris allows local users to read kernel memory via a 0 variable count argument to the sysinfo sys

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.