Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.057exploits catalogados

36.288CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.910GitHub PoC 14.997VulnCheck XDB 8.843Nuclei 4.358Metasploit 3.489✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Omegaboard 1.0beta4 - 'functions.php' Remote File Inclusion

CVE-2007-0683—webappsphp

PHP remote file inclusion vulnerability in includes/functions.php in Omegaboard 1.0beta4 and earlier allows remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

Scripteen Free Image Hosting Script 1.2 - 'cookie' Pass Grabber

CVE-2008-3211—webappsphp

Scripteen Free Image Hosting Script 1.2 and 1.2.1 allows remote attackers to bypass authentication and gain administrati

23RISCO

abrir ↗

Referência✓ VexDay Proof

Jaws 0.8.8 - Multiple Local File Inclusions

CVE-2009-0645—webappsphp

Directory traversal vulnerability in index.php in Jaws 0.8.8 allows remote authenticated users to read arbitrary files v

23RISCO

abrir ↗

Referência✓ VexDay Proof

4Site CMS 2.6 - Multiple SQL Injections

CVE-2009-0646—webappsphp

Multiple SQL injection vulnerabilities in 4Site CMS 2.6 and earlier allow remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

Nokia N95-8 browser - 'setAttributeNode' Method Crash

CVE-2009-0649—doshardware

The web browser in Symbian OS on the Nokia N95 cell phone allows remote attackers to cause a denial of service (crash) v

23RISCO

abrir ↗

Referência✓ VexDay Proof

Nessus Vulnerability Scanner 3.0.6 - ActiveX Command Execution

CVE-2007-4061—remotewindows

Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attac

28RISCO

abrir ↗

Referência✓ VexDay Proof

Data Dynamics ActiveBar - ActiveX 'actbar3.ocx 3.1' Insecure Methods

CVE-2007-3883—remotewindows

The Data Dynamics ActiveBar ActiveX control (actbar3.ocx) 3.2 and earlier allows remote attackers to create or overwrite

23RISCO

abrir ↗

Referência✓ VexDay Proof

TPTEST 3.1.7 - Stack Buffer Overflow (PoC)

CVE-2009-0650—doswindows

Stack-based buffer overflow in the GetStatsFromLine function in TPTEST 3.1.7 and earlier, and possibly 5.02, allows remo

28RISCO

abrir ↗

Referência✓ VexDay Proof

Web Content System 2.7.1 - Remote File Inclusion

CVE-2007-1771—webappsphp

PHP remote file inclusion vulnerability in manage/javascript/formjavascript.php in Ay System Solutions Web Content Syste

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bea Weblogic Apache Connector - Code Execution / Denial of Service

CVE-2008-3257—remotewindows

Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10

60RISCO

abrir ↗

Referência✓ VexDay Proof

Adobe Acrobat Reader - JBIG2 Local Buffer Overflow (PoC) (2)

CVE-2009-0658—doswindows

Buffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier, allows remote attackers to execute arbitra

60RISCO

abrir ↗

Referência✓ VexDay Proof

ravennuke 2.3.0 - Multiple Vulnerabilities

CVE-2009-0672—webappsphp

SQL injection vulnerability in the Resend_Email module in Raven Web Services RavenNuke 2.30 allows remote authenticated

23RISCO

abrir ↗

Referência✓ VexDay Proof

Morovia Barcode ActiveX Professional 3.3.1304 - Arbitrary File Overwrite

CVE-2007-2644—remotewindows

A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote attackers to overwrite arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

A-shop 0.70 - Remote File Deletion

CVE-2007-3937—webappsasp

Multiple SQL injection vulnerabilities in A-shop 0.70 and earlier allow remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

eCentrex VOIP Client module - 'uacomx.ocx 2.0.1' Remote Buffer Overflow

CVE-2007-4489—remotewindows

Buffer overflow in the IUAComFormX ActiveX control in uacomx.ocx 2.0.1 in the eCentrex VOIP Client module allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

dotCMS 1.6 - 'id' Local File Inclusion

CVE-2008-3708—webappsphp

Multiple directory traversal vulnerabilities in dotCMS 1.6.0.9 allow remote attackers to read arbitrary files via a .. (

23RISCO

abrir ↗

Referência✓ VexDay Proof

Advanced Electron Forum 1.0.6 - Remote Code Execution

CVE-2008-5090—webappsphp

Electron Inc. Advanced Electron Forum before 1.0.7 allows remote attackers to execute arbitrary PHP code via PHP code em

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sejoong Namo ActiveSquare 6 - 'NamoInstaller.dll' ActiveX Buffer Overflow

CVE-2008-0634—remotewindows

Buffer overflow in the NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1, as used in Sejoong Namo

23RISCO

abrir ↗

Referência✓ VexDay Proof

LinkedIn Toolbar 3.0.2.1098 - Remote Buffer Overflow

CVE-2007-3955—remotewindows

Buffer overflow in the IEToolbar.IEContextMenu.1 ActiveX control in LinkedInIEToolbar.dll in the LinkedIn Toolbar 3.0.2.

23RISCO

abrir ↗

Referência✓ VexDay Proof

JBlog 1.0 - Create / Delete Admin Authentication Bypass

CVE-2007-3974—webappsphp

admin/ajoutaut.php in JBlog 1.0 does not require authentication, which allows remote attackers to create arbitrary accou

23RISCO

abrir ↗

Referência✓ VexDay Proof

Maian Recipe 1.2 - Insecure Cookie Handling

CVE-2008-3322—webappsphp

admin/index.php in Maian Recipe 1.2 and earlier allows remote attackers to bypass authentication and gain administrative

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component ionFiles 4.4.2 - File Disclosure

CVE-2008-6080—webappsphp

Directory traversal vulnerability in download.php in the ionFiles (com_ionfiles) 4.4.2 component for Joomla! allows remo

43RISCO

abrir ↗

Referência✓ VexDay Proof

Coppermine Photo Gallery 1.4.18 - Local File Inclusion / Remote Code Execution

CVE-2008-3486—webappsphp

Directory traversal vulnerability in the user_get_profile function in include/functions.inc.php in Coppermine Photo Gall

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP 5.2.4 ionCube - 'ioncube_read_file' Safe Mode / disable_functions Bypass

CVE-2007-5447—localwindows

ioncube_loader_win_5.2.dll in the ionCube Loader 6.5 extension for PHP 5.2.4 does not follow safe_mode and disable_funct

23RISCO

abrir ↗

Referência✓ VexDay Proof

WSN Guest 1.23 - 'Search' SQL Injection

CVE-2009-0704—webappsphp

SQL injection vulnerability in search.php in WSN Guest 1.23 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpAuction GPL Enhanced 2.51 - 'profile.php' SQL Injection

CVE-2008-3487—webappsphp

SQL injection vulnerability in profile.php in PHPAuction GPL Enhanced 2.51 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

PowerNews 2.5.4 - 'newsid' SQL Injection

CVE-2009-0705—webappsphp

SQL injection vulnerability in news.php in PowerScripts PowerNews 2.5.4, when magic_quotes_gpc is disabled, allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

SimpleBlog 3.0 - 'comments_get.asp?id' SQL Injection

CVE-2007-4055—webappsasp

SQL injection vulnerability in comments_get.asp in SimpleBlog 3.0 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

AuthPhp 1.0 - Authentication Bypass

CVE-2009-0738—webappsphp

SQL injection vulnerability in login.php in Auth Php 1.0 allows remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Yaws < 1.80 - Multiple Headers Remote Denial of Service Vulnerabilities

CVE-2009-0751—dosmultiple

Yaws before 1.80 allows remote attackers to cause a denial of service (memory consumption and crash) via a request with

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.