Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.057exploits catalogados

36.288CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.910GitHub PoC 14.997VulnCheck XDB 8.843Nuclei 4.358Metasploit 3.489✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Quate CMS 0.3.4 - Multiple Vulnerabilities

CVE-2008-2496—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in Quate CMS 0.3.4 allow remote attackers to inject arbitrary web sc

23RISCO

abrir ↗

Referência✓ VexDay Proof

CoreHTTP 0.5.3alpha - HTTPd Remote Buffer Overflow

CVE-2007-4060—remotelinux

Multiple buffer overflows in the HttpSprockMake function in http.c in Frank Yaul corehttp 0.5.3alpha allow remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simple Machines Forum (SMF) 1.1.6 - Local File Inclusion / Code Execution

CVE-2008-6659—webappsphp

Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15 and 1.1 before 1.1.7 all

23RISCO

abrir ↗

Referência✓ VexDay Proof

ZeusCMS 0.3 - Blind SQL Injection

CVE-2007-6623—webappsphp

Absolute path traversal vulnerability in ZeusCMS 0.3 and earlier might allow remote attackers to list arbitrary director

23RISCO

abrir ↗

Referência✓ VexDay Proof

blogit! - SQL Injection / File Disclosure / Cross-Site Scripting

CVE-2009-0336—webappsphp

Katy Whitton BlogIt! stores sensitive information under the web root with insufficient access control, which allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

blogit! - SQL Injection / File Disclosure / Cross-Site Scripting

CVE-2009-0337—webappsphp

SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

S-Gastebuch 1.5.3 - 'gb_pfad' Remote File Inclusion

CVE-2007-1011—webappsphp

PHP remote file inclusion vulnerability in functions_inc.php in VS-Gastebuch 1.5.3 and earlier allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Miniweb 0.8.19 - Multiple Vulnerabilities

CVE-2008-0337—remotewindows

Heap-based buffer overflow in the _mwProcessReadSocket function in http.c in MiniWeb HTTP Server 0.8.19 allows remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

Advanced Links Management (ALM) 1.52 - SQL Injection

CVE-2008-2529—webappsphp

SQL injection vulnerability in read.php in Advanced Links Management (ALM) 1.5.2 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

FTPShell Server 4.3 - Licence Key Remote Buffer Overflow (PoC)

CVE-2009-0349—doswindows

Stack-based buffer overflow in FTPShell Server 4.3 allows user-assisted remote attackers to cause a denial of service (p

23RISCO

abrir ↗

Referência✓ VexDay Proof

CDex 1.70b2 (Windows XP SP3) - '.ogg' Local Buffer Overflow

CVE-2009-1039—localwindows

Buffer overflow in CDex 1.70b2 allows remote attackers to execute arbitrary code via a crafted Info header in an Ogg Vor

23RISCO

abrir ↗

Referência✓ VexDay Proof

JV2 Folder Gallery 3.0 - Remote File Inclusion

CVE-2007-0682—webappsphp

PHP remote file inclusion vulnerability in theme/include_mode/template.php in JV2 Folder Gallery 3.0.2 and earlier allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

Phoenix View CMS Pre Alpha2 - SQL Injection / Local File Inclusion / Cross-Site Scripting

CVE-2008-2535—webappsphp

Multiple SQL injection vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Merak Media Player 3.2 - '.m3u' File Local Buffer Overflow (PoC)

CVE-2009-0350—doswindows

Stack-based buffer overflow in Merak Media Player 3.2 allows remote attackers to execute arbitrary code via a long strin

28RISCO

abrir ↗

Referência✓ VexDay Proof

wavewoo 0.1.1 - 'loading.php?path_include' Remote File Inclusion

CVE-2007-2273—webappsphp

PHP remote file inclusion vulnerability in include/loading.php in Alessandro Lulli wavewoo 0.1.1 allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mail Machine 3.989 - Local File Inclusion

CVE-2007-3702—webappsphp

Directory traversal vulnerability in the load function in cgi-bin/mail/mailmachine.cgi in Mail Machine 3.989 and earlier

23RISCO

abrir ↗

Referência✓ VexDay Proof

WinFTP Server 2.3.0 - 'LIST' (Authenticated) Remote Buffer Overflow

CVE-2009-0351—remotewindows

Stack-based buffer overflow in WFTPSRV.exe in WinFTP 2.3.0 allows remote authenticated users to execute arbitrary code v

23RISCO

abrir ↗

Referência✓ VexDay Proof

PsNews 1.1 - 'show.php?newspath' Local File Inclusion

CVE-2007-3772—webappsphp

Directory traversal vulnerability in news/show.php in PsNews 1.1 allows remote attackers to include and execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

CityWriter 0.9.7 - 'head.php' Remote File Inclusion

CVE-2007-6324—webappsphp

PHP remote file inclusion vulnerability in head.php in CityWriter 0.9.7 allows remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência✓ VexDay Proof

Snircd 1.3.4 - 'send_user_mode' Denial of Service

CVE-2008-1501—dosmultiple

The send_user_mode function in s_user.c in (1) Undernet ircu 2.10.12.12 and earlier, (2) snircd 1.3.4 and earlier, and u

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component EasyBook 1.1 - 'gbid' SQL Injection

CVE-2008-2569—webappsphp

SQL injection vulnerability in the EasyBook (com_easybook) component 1.1 for Joomla! allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Internet Explorer 7 - Clickjacking

CVE-2009-0369—remotewindows

Microsoft Internet Explorer 7 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick acti

28RISCO

abrir ↗

Referência✓ VexDay Proof

SiteXS CMS 0.1.1 - Local File Inclusion

CVE-2009-0371—webappsphp

Directory traversal vulnerability in post.php in SiteXS CMS 0.1.1 and earlier allows remote attackers to include and exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component ElearningForce Flash Magazine Deluxe - SQL Injection

CVE-2009-0373—webappsphp

SQL injection vulnerability in the ElearningForce Flash Magazine Deluxe (com_flashmagazinedeluxe) component for Joomla!

23RISCO

abrir ↗

Referência✓ VexDay Proof

PLog 1.0.6 - 'albumID' SQL Injection

CVE-2008-2629—webappsphp

SQL injection vulnerability in the LifeType (formerly pLog) module for Drupal allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component beamospetition 1.0.12 - SQL Injection / Cross-Site Scripting

CVE-2009-0377—webappsphp

SQL injection vulnerability in the beamospetition (com_beamospetition) 1.0.12 component for Joomla! allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component beamospetition 1.0.12 - SQL Injection / Cross-Site Scripting

CVE-2009-0378—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in the beamospetition (com_beamospetition) 1.0.12 component for Jo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Blog:CMS 4.1.3 - 'NP_UserSharing.php' Remote File Inclusion

CVE-2006-6552—webappsphp

PHP remote file inclusion vulnerability in admin/plugins/NP_UserSharing.php in BLOG:CMS 4.1.3 and earlier allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

CitectSCADA ODBC Server - Remote Stack Buffer Overflow (Metasploit)

CVE-2008-2639—remotewindows

Stack-based buffer overflow in the ODBC server service in Citect CitectSCADA 6 and 7, and CitectFacilities 7, allows rem

60RISCO

abrir ↗

Referência✓ VexDay Proof

Jupiter CMS 1.1.5 - '/index.php' Local/Remote File Inclusion

CVE-2007-0986—webappsphp

PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5, when PHP 5.0.0 or later is used, allows remot

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.