Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.057exploits catalogados

36.288CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.910GitHub PoC 14.997VulnCheck XDB 8.843Nuclei 4.358Metasploit 3.489✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

XChat 2.6.7 (Windows) - Remote Denial of Service

CVE-2006-4455—doswindows

Unspecified vulnerability in Xchat 2.6.7 and earlier allows remote attackers to cause a denial of service (crash) via un

23RISCO

abrir ↗

Referência✓ VexDay Proof

ItCMS 2.1a - Authentication Bypass

CVE-2009-0493—webappsphp

SQL injection vulnerability in login.php in IT!CMS 2.1a and earlier allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Module MambWeather 1.8.1 - Remote File Inclusion

CVE-2006-5519—webappsphp

PHP remote file inclusion vulnerability in Savant2/Savant2_Plugin_options.php in the MambWeather 1.8.1 and earlier compo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Enigma 2 Coppermine Bridge - 'boarddir' Remote File Inclusion

CVE-2006-6864—webappsphp

PHP remote file inclusion vulnerability in E2_header.inc.php in Enigma2 Coppermine Bridge 1.0 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

GNU/Linux mbse-bbs 0.70.0 - Local Buffer Overflow

CVE-2007-0368—locallinux

Stack-based buffer overflow in mbse-bbs 0.70 and earlier allows local users to execute arbitrary code via a long string

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pictures Rating - 'index.php?msgid' SQL Injection

CVE-2007-3881—webappsphp

SQL injection vulnerability in index.php in Pictures Rating (Picture Rating) allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Expert Advisior - 'index.php?id' SQL Injection

CVE-2007-3882—webappsphp

SQL injection vulnerability in index.php in Expert Advisor allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pluck CMS 4.5.3 - 'g_pcltar_lib_dir' Local File Inclusion

CVE-2008-6253—webappsphp

Directory traversal vulnerability in data/inc/lib/pcltar.lib.php in Pluck 4.5.3, when register_globals is enabled, allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Portfol 1.2 - 'vcatid' SQL Injection

CVE-2009-0494—webappsphp

SQL injection vulnerability in the Portfol (com_portfol) 1.2 component for Joomla! allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

yourplace 1.0.2 - Multiple Vulnerabilities / Remote Code Execution

CVE-2008-6769—webappsphp

Unrestricted file upload vulnerability in upload.php in YourPlace 1.0.2 and earlier allows remote authenticated users to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Realtor 747 - 'define.php?INC_DIR' Remote File Inclusion

CVE-2009-0495—webappsphp

PHP remote file inclusion vulnerability in include/define.php in REALTOR 747 4.11 allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

Net_DNS 0.3 - '/DNS/RR.php' Remote File Inclusion

CVE-2006-5521—webappsphp

PHP remote file inclusion vulnerability in DNS/RR.php in Net_DNS 0.03 and earlier allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

Web Wiz Forums 9.07 - 'sub' Directory Traversal

CVE-2008-0466—webappsasp

Web Wiz RTE_file_browser.asp in, as used in Web Wiz Rich Text Editor 4.0, Web Wiz Forums 9.07, and Web Wiz Newspad 1.02,

23RISCO

abrir ↗

Referência✓ VexDay Proof

Demo4 CMS - 'id' SQL Injection

CVE-2008-2983—webappsphp

SQL injection vulnerability in index.php in Demo4 CMS 01 Beta allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpProfiles 3.1.2b - Multiple Remote File Inclusions

CVE-2006-6740—webappsphp

Multiple PHP remote file inclusion vulnerabilities in phpProfiles 3.1.2b and earlier allow remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

ViRC 2.0 - JOIN Response Remote Overwrite (SEH)

CVE-2007-3612—remotewindows

Stack-based buffer overflow in Visual IRC (ViRC) 2.0 allows remote IRC servers to execute arbitrary code via a long resp

23RISCO

abrir ↗

Referência✓ VexDay Proof

Virtual Guestbook 2.1 - Remote Database Disclosure

CVE-2009-0498—webappsasp

Virtual GuestBook (vgbook) 2.1 stores sensitive information under the web root with insufficient access control, which a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Web Wiz Rich Text Editor 4.0 - Multiple Vulnerabilities

CVE-2008-0466—webappsasp

Web Wiz RTE_file_browser.asp in, as used in Web Wiz Rich Text Editor 4.0, Web Wiz Forums 9.07, and Web Wiz Newspad 1.02,

23RISCO

abrir ↗

Referência✓ VexDay Proof

Gravity Board X 2.0 Beta - SQL Injection / Cross-Site Scripting

CVE-2008-2996—webappsphp

Multiple SQL injection vulnerabilities in index.php in Gravity Board X (GBX) 2.0 Beta, when magic_quotes_gpc is disabled

23RISCO

abrir ↗

Referência✓ VexDay Proof

Gravity Board X 2.0 Beta - SQL Injection / Cross-Site Scripting

CVE-2008-2997—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in Gravity Board X (GBX) 2.0 Beta allows remote attackers to injec

23RISCO

abrir ↗

Referência✓ VexDay Proof

AllMyGuests 0.3.0 - 'AMG_serverpath' Remote File Inclusion

CVE-2007-0172—webappsphp

Multiple PHP remote file inclusion vulnerabilities in AllMyGuests 0.3.0 and earlier allow remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

i.Scribe SMTP Client 2.00b - 'wscanf' Remote Format String (PoC)

CVE-2008-7074—doswindows

Format string vulnerability in MemeCode Software i.Scribe 1.88 through 2.00 before Beta9 allows remote SMTP servers to c

23RISCO

abrir ↗

Referência✓ VexDay Proof

webframe 0.76 - Multiple File Inclusions

CVE-2009-0513—webappsphp

Multiple PHP remote file inclusion vulnerabilities in WebFrame 0.76 allow remote attackers to execute arbitrary PHP code

23RISCO

abrir ↗

Referência✓ VexDay Proof

IF-CMS 2.0 - 'id' Blind SQL Injection

CVE-2009-0528—webappsphp

SQL injection vulnerability in frame.php in Rhadrix If-CMS 2.07 and earlier allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

MPLAB IDE 8.30 - '.mcp' Universal Overwrite (SEH)

CVE-2009-1674—localwindows

Stack-based buffer overflow in Microchip MPLAB IDE 8.30 allows user-assisted remote attackers to execute arbitrary code

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component com_loudmouth 4.0j - Remote File Inclusion

CVE-2006-3748—webappsphp

PHP remote file inclusion vulnerability in includes/abbc/abbc.class.php in the LoudMouth Component for Mambo 4.0j, and p

23RISCO

abrir ↗

Referência✓ VexDay Proof

SnippetMaster Webpage Editor 2.2.2 - Remote File Inclusion / Cross-Site Scripting

CVE-2009-0529—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in SnippetMaster Webpage Editor 2.2.2 allows remote attackers to i

23RISCO

abrir ↗

Referência✓ VexDay Proof

SnippetMaster Webpage Editor 2.2.2 - Remote File Inclusion / Cross-Site Scripting

CVE-2009-0530—webappsphp

Multiple PHP remote file inclusion vulnerabilities in SnippetMaster 2.2.2, when register_globals is enabled, allow remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

A Better Member-Based ASP Photo Gallery - 'entry' SQL Injection

CVE-2009-0531—webappsphp

SQL injection vulnerability in gallery/view.asp in A Better Member-Based ASP Photo Gallery before 1.2 allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component beamospetition - SQL Injection

CVE-2008-3132—webappsphp

SQL injection vulnerability in the beamospetition (com_beamospetition) component for Joomla! allows remote attackers to

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.