Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.620exploits catalogados

35.647CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.429GitHub PoC 14.270VulnCheck XDB 8.693Nuclei 4.299Metasploit 3.474✓ só verificadosrecentes populares risco

24.455 exploits

Exploit-DB✓ VexDay Proof

PhotoCycle 1.0 - 'PhotoCycle.php' Cross-Site Scripting

CVE-2006-3680—webappsphp13 jul 2006

Cross-site scripting (XSS) vulnerability in photocycle in Photocycle 1.0 allows remote attackers to inject arbitrary web

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Linux Kernel 2.6.13 < 2.6.17.4 - 'sys_prctl()' Local Privilege Escalation (3)

CVE-2006-2451—locallinux13 jul 2006

The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a l

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Lazarus Guestbook 1.6 - 'picture.php?img' Cross-Site Scripting

CVE-2006-3616—webappsphp12 jul 2006

Multiple cross-site scripting (XSS) vulnerabilities in Carbonize Lazarus Guestbook 1.6 and earlier allow remote attacker

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 6 - RevealTrans Denial of Service

CVE-2006-3605—doswindows12 jul 2006

Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Transition pro

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Lazarus Guestbook 1.6 - 'codes-english.php?show' Cross-Site Scripting

CVE-2006-3616—webappsphp12 jul 2006

Multiple cross-site scripting (XSS) vulnerabilities in Carbonize Lazarus Guestbook 1.6 and earlier allow remote attacker

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Linux Kernel 2.6.13 < 2.6.17.4 - 'sys_prctl()' Local Privilege Escalation (2)

CVE-2006-2451—locallinux12 jul 2006

The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a l

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

FLV Players 8 - 'popup.php?url' Cross-Site Scripting

CVE-2006-3624—remotemultiple12 jul 2006

Multiple cross-site scripting (XSS) vulnerabilities in FLV Players 8 allow remote attackers to inject arbitrary web scri

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

FlexWATCH 3.0 - 'AIndex.asp' Authentication Bypass

CVE-2006-3604—webappsasp12 jul 2006

Directory traversal vulnerability in FlexWATCH Network Camera 3.0 and earlier allows remote attackers to bypass access r

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

FLV Players 8 - 'player.php?url' Cross-Site Scripting

CVE-2006-3624—remotemultiple12 jul 2006

Multiple cross-site scripting (XSS) vulnerabilities in FLV Players 8 allow remote attackers to inject arbitrary web scri

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 6 - TriEditDocument Denial of Service

CVE-2006-3591—doswindows11 jul 2006

Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) by accessing the

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Fantastic Guestbook 2.0.1 - 'Guestbook.php' HTML Injection

CVE-2006-3568—webappsphp11 jul 2006

Multiple cross-site scripting (XSS) vulnerabilities in guestbook.php in Fantastic Guestbook 2.0.1, and possibly earlier

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SaPHPLesson 2.0 - 'add.php' SQL Injection

CVE-2006-2835—webappsphp11 jul 2006

SQL injection vulnerability in saphplesson 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) for

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Linux Kernel 2.6.13 < 2.6.17.4 - 'sys_prctl()' Local Privilege Escalation (1)

CVE-2006-2451—locallinux11 jul 2006

The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a l

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Office 2000/2002 - Property Code Execution

CVE-2006-2389—remotewindows11 jul 2006

Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allo

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 6 - 'HtmlDlgSafeHelper' Remote Denial of Service

CVE-2006-3511—doswindows10 jul 2006

Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by setting the fonts

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SIPfoundry sipXtapi - 'CSeq' Remote Buffer Overflow (PoC)

CVE-2006-3524—doshardware10 jul 2006

Buffer overflow in SIPfoundry sipXtapi released before 20060324 allows remote attackers to execute arbitrary code via a

50RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Word 2000/2003 - Unchecked Boundary Condition

CVE-2006-3493—doswindows10 jul 2006

Buffer overflow in LsCreateLine function (mso_203) in mso.dll and mso9.dll, as used by Microsoft Word and possibly other

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Farsinews 3.0 - 'Tiny_mce_gzip.php' Directory Traversal

CVE-2006-3602—webappsphp10 jul 2006

Directory traversal vulnerability in jscripts/tiny_mce/tiny_mce_gzip.php in FarsiNews 3.0 BETA 1 allows remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Graffiti Forums 1.0 - 'Topics.php' SQL Injection

CVE-2006-3560—webappsphp10 jul 2006

SQL injection vulnerability in topics.php in Blue Dojo Graffiti Forums 1.0 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Webmin < 1.290 / Usermin < 1.220 - Arbitrary File Disclosure

CVE-2006-3392—remotemultiple09 jul 2006

Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 6 - Object.Microsoft.DXTFilter Denial of Service

CVE-2006-3512—doswindows09 jul 2006

Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) by setting the Enabled pr

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Webvizyon - 'SayfalaAltList.asp' SQL Injection

CVE-2006-3518—webappsasp08 jul 2006

SQL injection vulnerability in SayfalaAltList.asp in Webvizyon Portal 2006 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 6 - DirectAnimation.DAUserData Denial of Service

CVE-2006-3513—doswindows08 jul 2006

danim.dll in Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) by a

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 6 - RDS.DataControl Denial of Service

CVE-2006-3510—doswindows08 jul 2006

The Remote Data Service Object (RDS.DataControl) in Microsoft Internet Explorer 6 on Windows 2000 allows remote attacker

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

RW::Download - 'stats.php' Remote File Inclusion

CVE-2006-3517—webappsphp08 jul 2006

PHP remote file inclusion vulnerability in stats.php in RW::Download, when register_globals is enabled, allows remote at

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ATutor 1.5.3 - Multiple Input Validation Vulnerabilities

CVE-2006-3662—webappsphp08 jul 2006

SQL injection vulnerability in index.php in ATutor 1.5.3 allows remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Extcalendar 2.0 - 'Extcalendar.php' Remote File Inclusion

CVE-2006-3556—webappsphp07 jul 2006

PHP remote file inclusion vulnerability in extcalendar.php in Mohamed Moujami ExtCalendar 2.0 allows remote attackers to

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 6 - Table.Frameset NULL Dereference

CVE-2006-3471—doswindows07 jul 2006

Microsoft Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) via a table wit

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Pivot 1.30 RC2 - Privilege Escalation / Remote Code Execution

CVE-2006-3532—webappsphp07 jul 2006

PHP file inclusion vulnerability in includes/edit_new.php in Pivot 1.30 RC2 and earlier, when register_globals is enable

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Pivot 1.30 RC2 - Privilege Escalation / Remote Code Execution

CVE-2006-3533—webappsphp07 jul 2006

Multiple cross-site scripting (XSS) vulnerabilities in Pivot 1.30 RC2 and earlier, when register_globals is enabled, all

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.