Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.620exploits catalogados

35.647CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.429GitHub PoC 14.270VulnCheck XDB 8.693Nuclei 4.299Metasploit 3.474✓ só verificadosrecentes populares risco

24.455 exploits

Exploit-DB✓ VexDay Proof

free QBoard 1.1 - 'index.php?qb_path' Remote File Inclusion

CVE-2006-3475—webappsphp03 jul 2006

Multiple PHP remote file inclusion vulnerabilities in free QBoard 1.1 allow remote attackers to execute arbitrary PHP co

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

free QBoard 1.1 - 'faq.php?qb_path' Remote File Inclusion

CVE-2006-3475—webappsphp03 jul 2006

Multiple PHP remote file inclusion vulnerabilities in free QBoard 1.1 allow remote attackers to execute arbitrary PHP co

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Quake 3 Engine Client (Windows x86) - CS_ITEms Remote Overflow

CVE-2006-3325—doswindows_x8602 jul 2006

client/cl_parse.c in the id3 Quake 3 Engine 1.32c and the Icculus Quake 3 Engine (ioquake3) revision 810 and earlier all

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Quake 3 Engine Client - 'CG_ServerCommand()' Remote Overflow

CVE-2006-3324—doswindows02 jul 2006

The Automatic Downloading option in the id3 Quake 3 Engine and the Icculus Quake 3 Engine (ioquake3) before revision 804

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Quake 3 Engine Client - 'CG_ServerCommand()' Remote Overflow

CVE-2006-3325—doswindows02 jul 2006

client/cl_parse.c in the id3 Quake 3 Engine 1.32c and the Icculus Quake 3 Engine (ioquake3) revision 810 and earlier all

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Plume CMS 1.1.3 - 'dbinstall.php' Remote File Inclusion

CVE-2006-7021—webappsphp01 jul 2006

PHP remote file inclusion vulnerability in manager/tools/link/dbinstall.php in Plume CMS 1.1.3 allows remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SturGeoN Upload - Arbitrary File Upload

CVE-2006-3381—webappsphp01 jul 2006

SturGeoN Upload allows remote attackers to execute arbitrary PHP code by uploading a file with a .php extension, then di

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Stud.IP 1.3.0-2 - Multiple Remote File Inclusions

CVE-2006-3361—webappsphp01 jul 2006

PHP remote file inclusion vulnerability in Stud.IP 1.3.0-2 and earlier, when register_globals is enabled, allows remote

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SmartSite CMS 1.0 - 'root' Multiple Remote File Inclusions

CVE-2006-3421—webappsphp01 jul 2006

PHP remote file inclusion vulnerability in SmartSiteCMS 1.0 and earlier, when register_globals is enabled, allows remote

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Diesel Joke Site - 'Category.php' SQL Injection

CVE-2006-3763—webappsphp01 jul 2006

SQL injection vulnerability in category.php in Diesel Joke Site allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows - TCP/IP Protocol Driver Remote Buffer Overflow

CVE-2006-2379—doswindows30 jun 2006

Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and ear

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SoftBiz Banner Exchange Script 1.0 - 'gen_confirm_mem.php?PHPSESSID' Cross-Site Scripting

CVE-2006-3607—webappsphp29 jun 2006

Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Scrip

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SoftBiz Banner Exchange Script 1.0 - 'index.php?PHPSESSID' Cross-Site Scripting

CVE-2006-3607—webappsphp29 jun 2006

Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Scrip

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

newsPHP 2006 PRO - '/inc/rss_feed.php?category' SQL Injection

CVE-2006-3359—webappsphp29 jun 2006

Multiple SQL injection vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

newsPHP 2006 PRO - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-3358—webappsphp29 jun 2006

Multiple cross-site scripting (XSS) vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject ar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows - RRAS RASMAN Registry Stack Overflow (MS06-025) (Metasploit)

CVE-2006-2370—remotewindows29 jun 2006

Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Serve

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SoftBiz Banner Exchange Script 1.0 - 'lostpassword.php?PHPSESSID' Cross-Site Scripting

CVE-2006-3607—webappsphp29 jun 2006

Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Scrip

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

newsPHP 2006 PRO - 'index.php' Multiple SQL Injections

CVE-2006-3358—webappsphp29 jun 2006

Multiple cross-site scripting (XSS) vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject ar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SoftBiz Banner Exchange Script 1.0 - 'insertmember.php?city' Cross-Site Scripting

CVE-2006-3607—webappsphp29 jun 2006

Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Scrip

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Blog:CMS 4.0.0k - SQL Injection

CVE-2006-3364—webappsphp28 jun 2006

SQL injection vulnerability in index.php in the NP_SEO plugin in BLOG:CMS before 4.1.0 allows remote attackers to execut

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPClassifieds.Info - Multiple Input Validation Vulnerabilities

CVE-2006-3329—webappsphp28 jun 2006

SQL injection vulnerability in search.php in PHP/MySQL Classifieds (PHP Classifieds) allows remote attackers to execute

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MF Piadas 1.0 - 'admin.php' Cross-Site Scripting

CVE-2006-3323—webappsphp27 jun 2006

PHP remote file inclusion vulnerability in admin/admin.php in MF Piadas 1.0 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MF Piadas 1.0 - 'admin.php' Remote File Inclusion

CVE-2006-3323—webappsphp27 jun 2006

PHP remote file inclusion vulnerability in admin/admin.php in MF Piadas 1.0 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 5.0.1 - OuterHTML redirection Handling Information Disclosure

CVE-2006-3280—remotewindows27 jun 2006

Cross-domain vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to access restricted information f

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Apple Mac OSX 10.4.x - OpenLDAP Denial of Service

CVE-2006-1470—dososx27 jun 2006

OpenLDAP in Apple Mac OS X 10.4 up to 10.4.6 allows remote attackers to cause a denial of service (crash) via an invalid

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CrisoftRicette 1.0 - 'Cookbook.php' Remote File Inclusion

CVE-2006-3343—webappsphp27 jun 2006

PHP remote file inclusion vulnerability in recipe/cookbook.php in CrisoftRicette 1.0pre15b allows remote attackers to ex

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

cPanel 10 - Select.HTML Cross-Site Scripting

CVE-2006-3337—webappsphp26 jun 2006

Cross-site scripting (XSS) vulnerability in frontend/x/files/select.html in cPanel 10.8.2-CURRENT 118 and earlier allows

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

OpenGuestbook 0.5 - 'header.php?title' Cross-Site Scripting

CVE-2006-3295—webappsphp26 jun 2006

Cross-site scripting (XSS) vulnerability in header.php in Open Guestbook 0.5 allows remote attackers to inject arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

OpenGuestbook 0.5 - 'view.php?offset' SQL Injection

CVE-2006-3296—webappsphp26 jun 2006

SQL injection vulnerability in view.php in Open Guestbook 0.5 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MVNForum Activatemember 1.0 - Cross-Site Scripting

CVE-2006-3245—webappsphp26 jun 2006

Multiple cross-site scripting (XSS) vulnerabilities in activatemember in mvnForum 1.0 GA and earlier allow remote attack

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.