Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.724exploits catalogados

35.724CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8.703Nuclei 4.314Metasploit 3.474✓ só verificadosrecentes populares risco

24.455 exploits

Exploit-DB✓ VexDay Proof

DCP-Portal 3.7/4.x/5.x/6.x - 'mycontents.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-1120—webappsphp09 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 6.1.1 and earlier, with register_globals enabled, allo

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Easy File Sharing Web Server 3.2 - Full Path Request Arbitrary File Upload

CVE-2006-1161—remotewindows09 mar 2006

Absolute path traversal vulnerability in Easy File Sharing (EFS) Web Server 3.2 allows remote registered users to execut

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

sBlog 0.7.2 - 'comments_do.php' Multiple POST Cross-Site Scripting Vulnerabilities

CVE-2006-1135—webappsphp09 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in sBlog 0.7.2 allow remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

JiRos Banner Experience 1.0 - Unauthorized Create Admin

CVE-2006-1213—webappsasp09 mar 2006

JiRo's Banner System Experience and Professional 1.0 and earlier allows remote attackers to bypass access restrictions a

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MyBloggie 2.1.2/2.1.3 - 'delcomment.php' Cross-Site Scripting

CVE-2006-1205—webappsphp09 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MyBloggie 2.1.2/2.1.3 - 'addcat.php' Cross-Site Scripting

CVE-2006-1205—webappsphp09 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

d2kBlog 1.0.3 - 'memName' SQL Injection

CVE-2006-1123—webappsasp09 mar 2006

SQL injection vulnerability in D2KBlog 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Easy File Sharing Web Server 3.2 - Format String Denial of Service

CVE-2006-1159—doswindows09 mar 2006

Format string vulnerability in Easy File Sharing (EFS) Web Server 3.2 allows remote attackers to cause a denial of servi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Light Weight Calendar 1.x - 'date' Remote Code Execution

CVE-2006-0206—webappsphp09 mar 2006

Eval injection vulnerability in Light Weight Calendar (LWC) 1.0 (20040909) and earlier allows remote attackers to execut

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MyBloggie 2.1.2/2.1.3 - 'delcat.php' Cross-Site Scripting

CVE-2006-1205—webappsphp09 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MyBloggie 2.1.2/2.1.3 - 'trackback_url' Cross-Site Scripting

CVE-2006-1205—webappsphp09 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MyBloggie 2.1.2/2.1.3 - 'edituser.php' Cross-Site Scripting

CVE-2006-1205—webappsphp09 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DCP-Portal 3.7/4.x/5.x/6.x - 'inbox.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-1120—webappsphp09 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 6.1.1 and earlier, with register_globals enabled, allo

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MyBloggie 2.1.2/2.1.3 - 'upload.php' Cross-Site Scripting

CVE-2006-1205—webappsphp09 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

sBlog 0.7.2 - 'search.php?keyword' POST Method Cross-Site Scripting

CVE-2006-1135—webappsphp09 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in sBlog 0.7.2 allow remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MyBloggie 2.1.2/2.1.3 - 'deluser.php' Cross-Site Scripting

CVE-2006-1205—webappsphp09 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DCP-Portal 3.7/4.x/5.x/6.x - 'forums.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-1120—webappsphp09 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 6.1.1 and earlier, with register_globals enabled, allo

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MyBloggie 2.1.2/2.1.3 - 'del.php' Cross-Site Scripting

CVE-2006-1205—webappsphp09 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MyBloggie 2.1.2/2.1.3 - 'editcat.php' Cross-Site Scripting

CVE-2006-1205—webappsphp09 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ADP Forum 2.0.x - 'Subject' HTML Injection

CVE-2006-1157—webappsphp09 mar 2006

Cross-site scripting (XSS) vulnerability in Vz Scripts ADP Forum 2.0.3 and earlier allows remote attackers to inject arb

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DCP-Portal 3.7/4.x/5.x/6.x - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-1120—webappsphp09 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 6.1.1 and earlier, with register_globals enabled, allo

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DCP-Portal 3.7/4.x/5.x/6.x - 'lostpassword.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-1120—webappsphp09 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 6.1.1 and earlier, with register_globals enabled, allo

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

UnrealIRCd 3.x - Remote Denial of Service

CVE-2006-1214—doswindows09 mar 2006

UnrealIRCd 3.2.3 allows remote attackers to cause an unspecified denial of service by causing a linked server to send ma

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DCP-Portal 3.7/4.x/5.x/6.x - 'calendar.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-1120—webappsphp09 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 6.1.1 and earlier, with register_globals enabled, allo

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MyBloggie 2.1.2/2.1.3 - 'adduser.php' Cross-Site Scripting

CVE-2006-1205—webappsphp09 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

RedBLoG 0.5 - 'cat_id' SQL Injection

CVE-2006-1140—webappsphp08 mar 2006

SQL injection vulnerability in rss.php in RedBLoG 0.5 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PeerCast 0.1216 - Remote Stack Overflow (Metasploit)

CVE-2006-1148—remotelinux08 mar 2006

Multiple stack-based buffer overflows in the procConnectArgs function in servmgr.cpp in PeerCast before 0.1217 allow rem

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

TextFileBB 1.0 - Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-1202—webappsphp08 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in textfileBB 1.0 and earlier allow remote attackers to inject arbit

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

LoudBlog 0.41 - 'index.php?template' Traversal Arbitrary File Access

CVE-2006-1114—webappsphp07 mar 2006

Multiple directory traversal vulnerabilities in Loudblog before 0.42 allow remote attackers to read or include arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Alien Arena 2006 Gold Edition 5.00 - Multiple Vulnerabilities

CVE-2006-1145—doswindows07 mar 2006

Format string vulnerability in the safe_cprintf function in acebot_cmds.c in Alien Arena 2006 Gold Edition 5.00 allows r

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.