Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.057exploits catalogados

36.288CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.910GitHub PoC 14.997VulnCheck XDB 8.843Nuclei 4.358Metasploit 3.489✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

UploadImage/UploadScript 1.0 - Remote Change Admin Password

CVE-2008-0246—webappsphp

admin.php in UploadScript 1.0 does not check for the original password before making a change to a new password, which a

23RISCO

abrir ↗

Referência✓ VexDay Proof

FlashBlog - 'articulo_id' SQL Injection

CVE-2008-2572—webappsphp

SQL injection vulnerability in php/leer_comentarios.php in FlashBlog allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

ISPworker 1.21 - 'download.php' Remote File Disclosure

CVE-2007-5813—webappsphp

Multiple directory traversal vulnerabilities in download.php in ISPworker 1.21 allow remote attackers to read arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component equotes 0.9.4 - SQL Injection

CVE-2008-2628—webappsphp

SQL injection vulnerability in the eQuotes (com_equotes) component 0.9.4 for Joomla! allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

InteliEditor 1.2.x - 'lib.editor.inc.php' Remote File Inclusion

CVE-2006-5527—webappsphp

PHP remote file inclusion vulnerability in lib.editor.inc.php in Intelimen InteliEditor 1.2.x allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Aigaion 1.2.1 - 'DIR' Remote File Inclusion

CVE-2006-5930—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Aigaion Web based bibliography management system 1.2.1 and earlier

23RISCO

abrir ↗

Referência✓ VexDay Proof

FlexPHPDirectory 0.0.1 - Authentication Bypass

CVE-2008-6750—webappsphp

Unrestricted file upload vulnerability in add.php in FlexPHPDirectory 0.0.1 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

e-cart.biz Shopping Cart - Arbitrary File Upload

CVE-2009-1447—webappsphp

Unrestricted file upload vulnerability in admin/editor/image.php in e-cart.biz Free Shopping Cart allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

Xt-Stats 2.4.0.b3 (server_base_dir) - Remote File Inclusion

CVE-2007-0576—webappsphp

PHP remote file inclusion vulnerability in xt_counter.php in Xt-Stats 2.3.x up to 2.4.0.b3 allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

Zomplog 3.8 - 'force_download.php' Remote File Disclosure

CVE-2007-2157—webappsphp

Directory traversal vulnerability in upload/force_download.php in Zomplog 3.8 allows remote attackers to read arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component acctexp 0.12.x - Blind SQL Injection

CVE-2008-2632—webappsphp

SQL injection vulnerability in the acctexp (com_acctexp) component 0.12.x and earlier for Joomla! allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pre News Manager 1.0 - 'id' SQL Injection

CVE-2006-2763—webappsphp

SQL injection vulnerability in Pre News Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the (1

23RISCO

abrir ↗

Referência✓ VexDay Proof

SAPID 1.2.3.05 - 'ROOT_PATH' Remote File Inclusion

CVE-2006-4026—webappsphp

PHP remote file inclusion vulnerability in SAPID CMS 123 rc3 allows remote attackers to execute arbitrary PHP code via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpCMS 1.2.2 - 'file' Remote File Disclosure

CVE-2008-0513—webappsphp

Directory traversal vulnerability in parser/include/class.cache_phpcms.php in phpCMS 1.2.2 allows remote attackers to re

23RISCO

abrir ↗

Referência✓ VexDay Proof

Censtore 7.3.x - 'censtore.cgi' Remote Command Execution

CVE-2006-1799—webappscgi

censtore.cgi in Censtore 7.3.002 and earlier allows remote attackers to execute arbitrary commands via shell metacharact

23RISCO

abrir ↗

Referência✓ VexDay Proof

I-Pos Internet Pay Online Store 1.3 Beta - SQL Injection

CVE-2008-2634—webappsasp

SQL injection vulnerability in index.asp in I-Pos Internet Pay Online Store 1.3 Beta and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mini Web Calendar 1.2 - File Disclosure / Cross-Site Scripting

CVE-2008-5061—webappsphp

Cross-site scripting (XSS) vulnerability in php/cal_default.php in Mini Web Calendar (mwcal) 1.2 allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Digital Eye CMS 0.1.1b - 'module.php' Remote File Inclusion

CVE-2007-1600—webappsphp

PHP remote file inclusion vulnerability in module.php in Digital Eye Gallery 1.1 Beta (aka 0.1.1b) allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

NoAh 0.9 pre 1.2 - 'filepath' Remote File Disclosure

CVE-2007-6187—webappsphp

Multiple directory traversal vulnerabilities in PHP Content Architect (aka NoAh) 0.9 pre 1.2 and earlier allow remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

Konqueror 3.5.9 - 'load' Remote Crash

CVE-2008-5698—doslinux

HTMLTokenizer::scriptHandler in Konqueror in KDE 3.5.9 and 3.5.10 allows remote attackers to cause a denial of service (

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyKtools 2.4 - Arbitrary Database Backup

CVE-2008-6815—webappsphp

mykdownload.php in MyKtools 2.4 does not require administrative authentication, which allows remote attackers to read a

23RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin WP-Forum 1.7.4 - SQL Injection

CVE-2008-0388—webappsphp

SQL injection vulnerability in the WP-Forum 1.7.4 plugin for WordPress allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Rama CMS 0.9.8 - 'download.php' File Disclosure

CVE-2009-1768—webappsphp

Directory traversal vulnerability in download.php in Rama Zaiten CMS 0.9.8 and earlier allows remote attackers to read a

23RISCO

abrir ↗

Referência✓ VexDay Proof

mebiblio 0.4.7 - SQL Injection / Arbitrary File Upload / Cross-Site Scripting

CVE-2008-2646—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in meBiblio 0.4.7 allow remote attackers to inject arbitrary web scr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Megabbs Forum 2.2 - SQL Injection / Cross-Site Scripting

CVE-2008-2022—webappsasp

Mulatiple cross-site scripting (XSS) vulnerabilities in PD9 Software MegaBBS 2.2 allow remote attackers to inject arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Minerva 2.0.21 build 238a - 'phpbb_root_path' File Inclusion

CVE-2006-5077—webappsphp

PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Chris Smith Minerva Build 238 and ear

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component JooBB 0.5.9 - Blind SQL Injection

CVE-2008-2651—webappsphp

SQL injection vulnerability in the Joomla! Bulletin Board (aka Joo!BB or com_joobb) component 0.5.9 for Joomla! allows r

23RISCO

abrir ↗

Referência✓ VexDay Proof

LightNEasy sqlite / no database 1.2.2 - Multiple Vulnerabilities

CVE-2008-6593—webappsphp

SQL injection vulnerability in LightNEasy/lightneasy.php in LightNEasy SQLite 1.2.2 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

MemHT Portal 4.0.1 - Remote Code Execution

CVE-2009-0372—webappsphp

Unrestricted file upload vulnerability in index.php in Miltenovik Manojlo MemHT Portal 4.0.1 and earlier allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Company WebSite Builder PRO 1.9.8 - 'INCLUDE_PATH' Remote File Inclusion

CVE-2007-1513—webappsphp

PHP remote file inclusion vulnerability in comanda.php in GraFX Company WebSite Builder (CWB) PRO 1.9.8, when register_g

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.