Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.724exploits catalogados

35.724CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8.703Nuclei 4.314Metasploit 3.474✓ só verificadosrecentes populares risco

24.455 exploits

Exploit-DB✓ VexDay Proof

Invision Power Board (IP.Board) 2.0.4 - Mail Action 'MID' Cross-Site Scripting

CVE-2006-1326—webappsphp17 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbit

23RISCO

Exploit-DB✓ VexDay Proof

Invision Power Board (IP.Board) 2.0.4 - Calendar Action Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-1326—webappsphp17 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbit

23RISCO

Exploit-DB✓ VexDay Proof

Invision Power Board (IP.Board) 2.0.4 - Help Action 'HID' Cross-Site Scripting

CVE-2006-1326—webappsphp17 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbit

23RISCO

Exploit-DB✓ VexDay Proof

Invision Power Board (IP.Board) 2.0.4 - Search Action Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-1326—webappsphp17 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbit

23RISCO

Exploit-DB✓ VexDay Proof

Invision Power Board (IP.Board) 2.0.4 - 'index.php?st' Cross-Site Scripting

CVE-2006-1326—webappsphp17 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbit

23RISCO

Exploit-DB✓ VexDay Proof

Invision Power Board (IP.Board) 2.0.4 - Print Action 't' Cross-Site Scripting

CVE-2006-1326—webappsphp17 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbit

23RISCO

Exploit-DB✓ VexDay Proof

Oxynews - 'index.php' SQL Injection

CVE-2006-1271—webappsphp16 mar 2006

SQL injection vulnerability in index.php in OxyNews allows remote attackers to execute arbitrary SQL commands via the ox

23RISCO

Exploit-DB✓ VexDay Proof

phpMyAdmin 2.8.1 - Set_Theme Cross-Site Scripting

CVE-2006-1258—webappsphp16 mar 2006

Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.0.1 allows remote attackers to inject arbitrary web script or

23RISCO

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 5.0.1 - Script Action Handler Buffer Overflow

CVE-2006-1245—doswindows16 mar 2006

Buffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other versions, allows remote a

35RISCO

Exploit-DB

Zoo 2.10 - Parse.c Local Buffer Overflow

CVE-2006-1269—doslinux16 mar 2006

Buffer overflow in the parse function in parse.c in zoo 2.10 might allow local users to execute arbitrary code via long

23RISCO

Exploit-DB✓ VexDay Proof

DSDownload 1.0 - Multiple SQL Injections

CVE-2006-1232—webappsphp15 mar 2006

Multiple SQL injection vulnerabilities in DSDownload 1.0, with magic_quotes_gpc disabled, allow remote attackers to exec

23RISCO

Exploit-DB✓ VexDay Proof

GGZ Gaming Zone 0.0.12 - Multiple Denial of Service Vulnerabilities

CVE-2006-1275—dosmultiple14 mar 2006

GGZ Gaming Zone 0.0.12 allows remote attackers to cause a denial of service (client disconnect) via inputs that produce

23RISCO

Exploit-DB✓ VexDay Proof

DSCounter 1.2 - 'index.php' SQL Injection

CVE-2006-1234—webappsphp14 mar 2006

SQL injection vulnerability in index.php in DSCounter 1.2, with magic_quotes_gpc disabled, allows remote attackers to ex

23RISCO

Exploit-DB✓ VexDay Proof

Microsoft Windows - Telephony Service Command Execution (MS05-040)

CVE-2005-0058—localwindows14 mar 2006

Buffer overflow in the Telephony Application Programming Interface (TAPI) for Microsoft Windows 98, Windows 98 SE, Windo

35RISCO

Exploit-DB✓ VexDay Proof

ENet - Multiple Denial of Service Vulnerabilities

CVE-2006-1194—dosmultiple13 mar 2006

Integer signedness error in the enet_protocol_handle_incoming_commands function in protocol.c for ENet library CVS versi

23RISCO

Exploit-DB✓ VexDay Proof

Apple Mac OSX 10.4.5 Mail.app - Real Name Buffer Overflow

CVE-2006-0396—remoteosx13 mar 2006

Buffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update 2006-001, allows remote a

28RISCO

Exploit-DB✓ VexDay Proof

Firebird 1.5 - Inet_Server Local Buffer Overflow

CVE-2006-1240—doswindows13 mar 2006

Buffer overflow in inet_server.cpp in (1) fb_inet_server and (2) fbserver in Firebird 1.5.2.4731 allows local users to g

23RISCO

Exploit-DB✓ VexDay Proof

Ubuntu 5.10 Installer - Password Disclosure

CVE-2006-1183—locallinux12 mar 2006

The Ubuntu 5.10 installer does not properly clear passwords from the installer log file (questions.dat), and leaves the

23RISCO

Exploit-DB✓ VexDay Proof

Jupiter CMS 1.1.5 - Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-1223—webappsphp11 mar 2006

Cross-site scripting (XSS) vulnerability in Jupiter Content Manager 1.1.5 and earlier allows remote attackers to inject

23RISCO

Exploit-DB✓ VexDay Proof

vCard 2.8/2.9 - 'create.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-1230—webappsphp11 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in create.php in vCard 2.x allow remote attackers to inject arbitrar

23RISCO

Exploit-DB✓ VexDay Proof

Dropbear / OpenSSH Server - 'MAX_UNAUTH_CLIENTS' Denial of Service

CVE-2006-1206—dosmultiple10 mar 2006

Matt Johnston Dropbear SSH server 0.47 and earlier, as used in embedded Linux devices and on general-purpose operating s

28RISCO

Exploit-DB✓ VexDay Proof

QwikiWiki 1.4/1.5 - 'login.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-1196—webappsphp10 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in QwikiWiki 1.5 allow remote attackers to inject arbitrary web scri

23RISCO

Exploit-DB✓ VexDay Proof

QwikiWiki 1.4/1.5 - 'pageindex.php?help' Cross-Site Scripting

CVE-2006-1196—webappsphp10 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in QwikiWiki 1.5 allow remote attackers to inject arbitrary web scri

23RISCO

Exploit-DB✓ VexDay Proof

QwikiWiki 1.4/1.5 - 'recentchanges.php?help' Cross-Site Scripting

CVE-2006-1196—webappsphp10 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in QwikiWiki 1.5 allow remote attackers to inject arbitrary web scri

23RISCO

Exploit-DB✓ VexDay Proof

Guppy 4.5.11 - Delete Databases Remote Denial of Service

CVE-2006-1224—dosphp10 mar 2006

Directory traversal vulnerability in dwnld.php in GuppY 4.5.11 allows remote attackers to overwrite arbitrary files via

23RISCO

Exploit-DB✓ VexDay Proof

WMNews - 'wmcomments.php?ArtID' Cross-Site Scripting

CVE-2006-1233—webappsphp10 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in WMNews allow remote attackers to inject arbitrary web script or H

23RISCO

Exploit-DB✓ VexDay Proof

Core News 2.0.1 - 'index.php' Remote Code Execution

CVE-2006-1212—webappsphp10 mar 2006

Unspecified vulnerability in index.php in Core CoreNews 2.0.1 allows remote attackers to execute arbitrary commands via

23RISCO

Exploit-DB✓ VexDay Proof

WMNews - 'wmview.php?ArtCat' Cross-Site Scripting

CVE-2006-1233—webappsphp10 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in WMNews allow remote attackers to inject arbitrary web script or H

23RISCO

Exploit-DB✓ VexDay Proof

QwikiWiki 1.4/1.5 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-1196—webappsphp10 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in QwikiWiki 1.5 allow remote attackers to inject arbitrary web scri

23RISCO

Exploit-DB✓ VexDay Proof

WMNews - 'footer.php?ctrrowcol' Cross-Site Scripting

CVE-2006-1233—webappsphp10 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in WMNews allow remote attackers to inject arbitrary web script or H

23RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.