Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.620exploits catalogados
35.647CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.455Referência 22.429GitHub PoC 14.270VulnCheck XDB 8.693Nuclei 4.299Metasploit 3.474✓ só verificadosrecentespopularesrisco
24.455 exploits
Exploit-DB✓ VexDay Proof
BT Voyager 2091 (Wireless ADSL) - Multiple Vulnerabilities
CVE-2006-3561—remotehardware18 jul 2006
BT Voyager 2091 Wireless firmware 2.21.05.08m_A2pB018c1.d16d and earlier, and 3.01m and earlier, allow remote attackers
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Invision Power Board 2.1 < 2.1.6 - SQL Injection (2)
CVE-2006-7071—webappsphp18 jul 2006
SQL injection vulnerability in classes/class_session.php in Invision Power Board (IPB) 2.1 up to 2.1.6 allows remote att
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.13 < 2.6.17.4 - 'logrotate prctl()' Local Privilege Escalation
CVE-2006-2451—locallinux18 jul 2006
The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a l
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MySQL 4.x/5.x - Server Date_Format Denial of Service
CVE-2006-3469—doslinux18 jul 2006
Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authe
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ListMessenger 0.9.3 - 'LM_Path' Remote File Inclusion
CVE-2006-3692—webappsphp17 jul 2006
PHP remote file inclusion vulnerability in enduser/listmessenger.php in ListMessenger 0.9.3 allows remote attackers to e
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Mambo Component perForms 1.0 - Remote File Inclusion
CVE-2006-3774—webappsphp17 jul 2006
PHP remote file inclusion vulnerability in performs.php in the perForms component (com_performs) 1.0 and earlier for Joo
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Mambo Module Calendar 1.5.7 - 'Com_Calendar.php' Remote File Inclusion
CVE-2006-3843—webappsphp17 jul 2006
PHP remote file inclusion vulnerability in com_calendar.php in Calendar Mambo Module 1.5.7 and earlier allows remote att
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Agnitum Outpost Firewall 3.5.631 - 'FiltNT.SYS' Local Denial of Service
CVE-2006-3696—doswindows17 jul 2006
filtnt.sys in Outpost Firewall Pro before 3.51.759.6511 (462) allows local users to cause a denial of service (crash) vi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Mambo Component pollxt 1.22.07 - Remote File Inclusion
CVE-2006-5045—webappsphp17 jul 2006
Unspecified vulnerability in PollXT component (com_pollxt) 1.22.07 and earlier for Joomla! has unspecified impact and at
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
D-Link Routers - UPNP Buffer Overflow
CVE-2006-3687—doshardware17 jul 2006
Stack-based buffer overflow in the Universal Plug and Play (UPnP) service in D-Link DI-524, DI-604 Broadband Router, DI-
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
FlushCMS 1.0.0-pre2 - 'class.rich.php' Remote File Inclusion
CVE-2006-3755—webappsphp16 jul 2006
PHP remote file inclusion vulnerability in Include/editor/class.rich.php in FlushCMS 1.0.0-pre2 and earlier allows remot
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MyBulletinBoard (MyBB) 1.1.5 - 'CLIENT-IP' SQL Injection
CVE-2011-4084—webappsphp15 jul 2006
20RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MyBulletinBoard (MyBB) 1.1.5 - 'CLIENT-IP' SQL Injection
CVE-2011-5035—webappsphp15 jul 2006
Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java System Application Server 8.1 a
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MyBulletinBoard (MyBB) 1.1.5 - 'CLIENT-IP' SQL Injection
CVE-2011-5034—webappsphp15 jul 2006
Apache Geronimo 2.2.1 and earlier computes hash values for form parameters without restricting the ability to trigger ha
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Rocks Clusters 4.1 - 'umount-loop' Local Privilege Escalation
CVE-2006-3693—locallinux15 jul 2006
Rocks Clusters 4.1 and earlier allows local users to gain privileges via commands enclosed with escaped backticks (\`) i
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MyBulletinBoard (MyBB) 1.1.5 - 'CLIENT-IP' SQL Injection
CVE-2011-4885—webappsphp15 jul 2006
PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions pre
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Rocks Clusters 4.1 - 'mount-loop' Local Privilege Escalation
CVE-2006-3693—locallinux15 jul 2006
Rocks Clusters 4.1 and earlier allows local users to gain privileges via commands enclosed with escaped backticks (\`) i
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Sunbelt Kerio Personal Firewall 4.3.426 - CreateRemoteThread Denial of Service
CVE-2006-3787—doshardware15 jul 2006
kpf4ss.exe in Sunbelt Kerio Personal Firewall 4.3.x before 4.3.268 does not properly hook the CreateRemoteThread API fun
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MyBulletinBoard (MyBB) 1.1.5 - 'CLIENT-IP' SQL Injection
CVE-2006-3775—webappsphp15 jul 2006
SQL injection vulnerability in the init function in class_session.php in MyBB (aka MyBulletinBoard) 1.1.5 allows remote
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Webmin < 1.290 / Usermin < 1.220 - Arbitrary File Disclosure
CVE-2006-3392—remotemultiple15 jul 2006
Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MyBulletinBoard (MyBB) 1.1.5 - 'CLIENT-IP' SQL Injection
CVE-2011-4858—webappsphp15 jul 2006
Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash values for form parameters without r
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
KDE Konqueror 3.5.x - ReplaceChild Denial of Service
CVE-2006-3672—doslinux14 jul 2006
KDE Konqueror 3.5.1 and earlier allows remote attackers to cause a denial of service (application crash) by calling the
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft PowerPoint 2003 - '.ppt' File Closure Memory Corruption
CVE-2006-3656—remotewindows14 jul 2006
Unspecified vulnerability in Microsoft PowerPoint 2003 allows user-assisted attackers to cause memory corruption via a c
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Subberz Lite - UserFunc Remote File Inclusion
CVE-2006-3689—webappsphp14 jul 2006
PHP remote file inclusion vulnerability in user-func.php in Codeworks Gnomedia SubberZ[Lite] allows remote attackers to
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft PowerPoint 2003 - 'powerpnt.exe' Remote Overflow
CVE-2006-3660—remotewindows14 jul 2006
Unspecified vulnerability in Microsoft PowerPoint 2003 has unknown impact and user-assisted attack vectors related to po
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft PowerPoint 2003 - 'mso.dll' '.PPT' Processing Code Execution
CVE-2006-3655—remotewindows14 jul 2006
Unspecified vulnerability in mso.dll in Microsoft PowerPoint 2003 allows user-assisted attackers to execute arbitrary co
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.13 < 2.6.17.4 - 'sys_prctl()' Local Privilege Escalation (4)
CVE-2006-2451—locallinux14 jul 2006
The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a l
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
FlatNuke 2.5.7 - 'index.php' Remote File Inclusion
CVE-2006-3608—webappsphp13 jul 2006
The Gallery module in Simone Vellei Flatnuke 2.5.7 and earlier, when Gallery uploads are enabled, does not restrict the
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Dream4 Koobi Pro 5.6 - 'showtopic' SQL Injection
CVE-2006-3621—webappsphp13 jul 2006
SQL injection vulnerability in the showtopic module in Koobi Pro CMS 5.6 allows remote attackers to execute arbitrary SQ
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.13 < 2.6.17.4 - 'sys_prctl()' Local Privilege Escalation (3)
CVE-2006-2451—locallinux13 jul 2006
The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a l
23RISCO
abrir ↗
← anteriorpágina 589 / 816próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.