Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.772exploits catalogados

35.760CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8.710Nuclei 4.319Metasploit 3.476✓ só verificadosrecentes populares risco

24.455 exploits

Exploit-DB✓ VexDay Proof

MiniNuke 1.8.2 - 'hid' SQL Injection

CVE-2006-0199—webappsasp14 jan 2006

SQL injection vulnerability in news.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute arb

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MiniNuke 1.8.2 - Multiple SQL Injections

CVE-2006-0199—webappsasp14 jan 2006

SQL injection vulnerability in news.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute arb

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Farmers WIFE 4.4 sp1 - 'FTP' Remote System Access

CVE-2006-0319—remotewindows14 jan 2006

Directory traversal vulnerability in the FTP server (port 22003/tcp) in Farmers WIFE 4.4 SP1 allows remote attackers to

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

HomeFtp 1.1 - 'NLST' Denial of Service

CVE-2006-0355—doswindows14 jan 2006

Helmsman Research (aka CoolUtils) HomeFtp 1.1 allows remote attackers to cause an unspecified denial of service via a lo

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Ultimate Auction 3.67 - Item.pl Cross-Site Scripting

CVE-2006-0217—webappscgi14 jan 2006

Multiple cross-site scripting (XSS) vulnerabilities in Ultimate Auction 3.67 allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Alstrasoft Template Seller Pro 3.25 - 'Fullview.php' Cross-Site Scripting

CVE-2006-0222—webappsphp13 jan 2006

Cross-site scripting (XSS) vulnerability in fullview.php in AlstraSoft Template Seller Pro allows remote attackers to in

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Xmame 0.102 - 'lang' Local Buffer Overflow

CVE-2006-0176—locallinux13 jan 2006

Buffer overflow in certain functions in src/fileio.c and src/unix/fileio.c in xmame before 11 January 2006 may allow loc

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Web Host Automation Ltd. Helm 3.2.8 - 'ForgotPassword.asp' Cross-Site Scripting

CVE-2006-0211—webappsasp13 jan 2006

Cross-site scripting (XSS) vulnerability in forgotPassword.asp in Helm Hosting Control Panel 3.2.8 and earlier allows re

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Interspire TrackPoint NX - 'index.php' Cross-Site Scripting

CVE-2006-0210—webappsphp12 jan 2006

Cross-site scripting (XSS) vulnerability in index.php in Interspire TrackPoint NX before 0.1 allows remote attackers to

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

TankLogger 2.4 General Functions Script - SQL Injection

CVE-2006-0209—webappsphp12 jan 2006

SQL injection vulnerability in general_functions.php in TankLogger 2.4 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Visual Studio - UserControl Remote Code Execution (2)

CVE-2006-0187—remotewindows12 jan 2006

By design, Microsoft Visual Studio 2005 automatically executes code in the Load event of a user-defined control (UserCon

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

eStara SoftPhone 3.0.1.46 - SIP Remote Buffer Overflow (1)

CVE-2006-0189—remotewindows12 jan 2006

Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a lo

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Visual Studio - UserControl Remote Code Execution (1)

CVE-2006-0187—remotewindows12 jan 2006

By design, Microsoft Visual Studio 2005 automatically executes code in the Load event of a user-defined control (UserCon

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Fog Creek Software FogBugz 4.0 29 - 'default.asp' Cross-Site Scripting

CVE-2006-0194—webappsasp12 jan 2006

Cross-site scripting (XSS) vulnerability in default.asp in FogBugz 4.029, and other versions before 4.0.33, allows remot

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

eStara SoftPhone 3.0.1.46 - SIP Remote Buffer Overflow (2)

CVE-2006-0189—remotewindows12 jan 2006

Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a lo

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CounterPath eyeBeam 1.1 build 3010n - SIP Header Data Remote Buffer Overflow (1)

CVE-2006-0359—doswindows11 jan 2006

Buffer overflow in CounterPath eyeBeam SIP Softphone allows remote attackers to (1) cause a denial of service (device cr

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MyPHPim - Login Page pass Field SQL Injection

CVE-2006-0167—webappsphp11 jan 2006

SQL injection vulnerability in MyPhPim 01.05 allows remote attackers to execute arbitrary SQL commands via the (1) cal_i

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MyPHPim - 'calendar.php3?cal_id' SQL Injection

CVE-2006-0167—webappsphp11 jan 2006

SQL injection vulnerability in MyPhPim 01.05 allows remote attackers to execute arbitrary SQL commands via the (1) cal_i

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Apple QuickTime 6.4/6.5/7.0.x - PictureViewer '.JPEG'/.PICT' File Buffer Overflow

CVE-2005-2340—doswindows11 jan 2006

Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a craft

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Cray UNICOS /usr/bin/script - Command Line Argument Local Overflow

CVE-2006-0177—locallinux10 jan 2006

Multiple buffer overflows in Cray UNICOS 9.0.2.2 might allow local users to gain privileges by (1) invoking /usr/bin/scr

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Hummingbird Collaboration - Application Cookie Internal Network Information Disclosure

CVE-2006-0174—webappscgi10 jan 2006

Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to obtain

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Hummingbird Collaboration - Crafted URL File Property Obscuration Download

CVE-2006-0173—webappscgi10 jan 2006

Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to misrepr

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Orjinweb - 'index.php' Remote File Inclusion

CVE-2006-0171—webappsphp10 jan 2006

PHP remote file include vulnerability in index.php in OrjinWeb E-commerce allows remote attackers to execute arbitrary c

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

WebWiz Forums - 'Search_form.asp' Cross-Site Scripting

CVE-2006-0175—webappsasp10 jan 2006

Cross-site scripting (XSS) vulnerability in search_form.asp in Web Wiz Forums 6.34 allows remote attackers to inject arb

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Cray UNICOS /etc/nu - '-c' Option Filename Processing Local Overflow

CVE-2006-0177—locallinux10 jan 2006

Multiple buffer overflows in Cray UNICOS 9.0.2.2 might allow local users to gain privileges by (1) invoking /usr/bin/scr

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Xmame 0.102 - '-lang' Local Buffer Overflow

CVE-2006-0176—locallinux10 jan 2006

Buffer overflow in certain functions in src/fileio.c and src/unix/fileio.c in xmame before 11 January 2006 may allow loc

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP-Nuke 7.7 EV Search Module - SQL Injection

CVE-2006-0163—webappsphp09 jan 2006

SQL injection vulnerability in the search module (modules/Search/index.php) of PHPNuke EV 7.7 -R1 allows remote attacker

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

427BB 2.2 - 'showthread.php' SQL Injection

CVE-2006-0154—webappsphp09 jan 2006

SQL injection vulnerability in showthread.php in 427BB 2.2 and 2.2.1 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Venom Board - 'Post.php3' Multiple SQL Injections

CVE-2006-0160—webappsphp09 jan 2006

SQL injection vulnerability in add_post.php3 in Venom Board 1.22 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows - Graphics Rendering Engine Multiple Memory Corruption Vulnerabilities

CVE-2006-0143—doswindows09 jan 2006

Microsoft Windows Graphics Rendering Engine (GRE) allows remote attackers to corrupt memory and cause a denial of servic

35RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.