Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.794exploits catalogados

36.057CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.459Referência 22.721GitHub PoC 14.946VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

cmreams CMS 1.3.1.1 beta2 - Local File Inclusion / Cross-Site Scripting

CVE-2008-2985—webappsphp

Directory traversal vulnerability in load_language.php in CMReams CMS 1.3.1.1 Beta 2, when register_globals is enabled,

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpDMCA 1.0.0 - Multiple Remote File Inclusions

CVE-2008-2986—webappsphp

Multiple PHP remote file inclusion vulnerabilities in phpDMCA 1.0.0 allow remote attackers to execute arbitrary PHP code

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component FacileForms 1.4.4 - Remote File Inclusion

CVE-2008-2990—webappsphp

PHP remote file inclusion vulnerability in facileforms.frame.php in the FacileForms (com_facileforms) component 1.4.4 fo

23RISCO

abrir ↗

Referência✓ VexDay Proof

TurnkeyForms Local Classifieds - Cross-Site Scripting / SQL Injection

CVE-2008-6350—webappsphp

SQL injection vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

TurnkeyForms Local Classifieds - Cross-Site Scripting / SQL Injection

CVE-2008-6351—webappsphp

Cross-site scripting (XSS) vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to in

23RISCO

abrir ↗

Referência✓ VexDay Proof

Xpoze 4.10 - 'menu' Blind SQL Injection

CVE-2008-6352—webappsphp

SQL injection vulnerability in home.html in Xpoze Pro 4.10 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

FOG Forum 0.8.1 - Multiple Local File Inclusions

CVE-2008-2993—webappsphp

Multiple directory traversal vulnerabilities in index.php in FOG Forum 0.8.1 allow remote attackers to include and execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPortal 1.2 - Multiple Remote File Inclusions

CVE-2008-3022—webappsphp

Multiple PHP remote file inclusion vulnerabilities in sablonlar/gunaysoft/gunaysoft.php in PHPortal 1.2 Beta allow remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

vp-asp shopping cart 6.09 - SQL Injection / Cross-Site Scripting

CVE-2007-0224—webappsasp

SQL injection vulnerability in shopgiftregsearch.asp in VP-ASP Shopping Cart 6.09 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

@lex Guestbook 4.0.2 - Remote Command Execution

CVE-2007-0205—webappsphp

Directory traversal vulnerability in admin/skins.php for @lex Guestbook 4.0.2 and earlier allows remote attackers to cre

23RISCO

abrir ↗

Referência✓ VexDay Proof

JV2 Folder Gallery 3.0 - 'download.php' Remote File Disclosure

CVE-2007-0329—webappsphp

download.php in Joonas Viljanen JV2 Folder Gallery allows remote attackers to read sensitive files via a relative pathna

23RISCO

abrir ↗

Referência✓ VexDay Proof

Efestech Shop 2.0 - 'cat_id' SQL Injection

CVE-2008-3030—webappsphp

SQL injection vulnerability in default.asp in EfesTECH Shop 2.0 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Agenda 2.2.4 - 'index.php' Local File Inclusion

CVE-2008-3031—webappsphp

Directory traversal vulnerability in index.php in Simple PHP Agenda 2.2.4 and earlier allows remote attackers to include

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Brightcode Weblinks - 'catid' SQL Injection

CVE-2008-3083—webappsphp

SQL injection vulnerability in Brightcode Weblinks (com_brightweblinks) component for Joomla! allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Kasseler CMS 1.3.0 - Local File Inclusion / Cross-Site Scripting

CVE-2008-3088—webappsphp

Cross-site scripting (XSS) vulnerability in the Files module in Kasseler CMS 1.3.0 and 1.3.1 Lite allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ocean12 FAQ Manager Pro - 'ID' Blind SQL Injection

CVE-2008-6372—webappsphp

SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPmotion 2.0 - 'update_profile.php' Arbitrary File Upload

CVE-2008-3117—webappsphp

Unrestricted file upload vulnerability in update_profile.php in PHPmotion 2.0 and earlier allows remote authenticated us

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mole Group Real Estate Script 1.1 - SQL Injection

CVE-2008-3123—webappsphp

SQL injection vulnerability in index.php in Mole Group Real Estate Script 1.1 and earlier allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mole Group Hotel Script 1.0 - SQL Injection

CVE-2008-3124—webappsphp

SQL injection vulnerability in index.php in Mole Group Hotel Script 1.0 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Woltlab Burning Board 1.0.2/2.3.6 - 'search.php' SQL Injection (2)

CVE-2007-0388—webappsphp

SQL injection vulnerability in search.php in Woltlab Burning Board (wBB) 1.0.2 and earlier, and 2.3.6 and earlier in the

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mole Group Last Minute Script 4.0 - SQL Injection

CVE-2008-3125—webappsphp

SQL injection vulnerability in index.php in Mole Group Lastminute Script 4.0 allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Gallery MX 2.0.0 - Blind SQL Injection

CVE-2008-6379—webappsasp

SQL injection vulnerability in pics_pre.asp in Gallery MX 2.0.0 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pivot 1.40.5 - Dreamwind 'load_template()' Credentials Disclosure

CVE-2008-3128—webappsphp

Directory traversal vulnerability in search.php in Pivot 1.40.5 allows remote attackers to read arbitrary files via a ..

23RISCO

abrir ↗

Referência✓ VexDay Proof

Catviz 0.4.0 beta1 - Multiple SQL Injections

CVE-2008-3129—webappsphp

Multiple SQL injection vulnerabilities in index.php in Catviz 0.4 beta 1 allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

pSys 0.7.0 Alpha - 'chatbox.php' SQL Injection

CVE-2008-3131—webappsphp

SQL injection vulnerability in chatbox.php in pSys 0.7.0 Alpha, when magic_quotes_gpc is disabled, allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

AShop Deluxe 4.x - 'catalogue.php' SQL Injection

CVE-2008-3136—webappsphp

SQL injection vulnerability in catalogue.php in AShop Deluxe 4.x allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

Rae Media Contact MS - Authentication Bypass

CVE-2008-6389—webappsphp

SQL injection vulnerability in asadmin/default.asp in Rae Media Contact Management Software SOHO, Standard, and Enterpri

23RISCO

abrir ↗

Referência✓ VexDay Proof

SmartPPC Pay Per Click Script - 'idDirectory' Blind SQL Injection (2)

CVE-2008-3152—webappsphp

SQL injection vulnerability in directory.php in SmartPPC and SmartPPC Pro allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

Triton CMS Pro 1.06 - 'x-forwarded-for' Blind SQL Injection

CVE-2008-3153—webappsphp

SQL injection vulnerability in Triton CMS Pro allows remote attackers to execute arbitrary SQL commands via the X-Forwar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fuzzylime CMS 3.01 - Remote Command Execution

CVE-2008-3165—webappsphp

Directory traversal vulnerability in rss.php in fuzzylime (cms) 3.01a and earlier, when magic_quotes_gpc is disabled, al

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.