Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.057exploits catalogados

36.288CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.910GitHub PoC 14.997VulnCheck XDB 8.843Nuclei 4.358Metasploit 3.489✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Eggdrop/Windrop 1.6.19 - ctcpbuf Remote Crash

CVE-2009-1789—dosmultiple

mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of

23RISCO

abrir ↗

Referência✓ VexDay Proof

ST-Gallery 0.1a - Multiple SQL Injections

CVE-2009-1799—webappsphp

Multiple SQL injection vulnerabilities in the getGalleryImage function in st_admin/gallery_output.php in ST-Gallery 0.1

23RISCO

abrir ↗

Referência✓ VexDay Proof

my-gesuad 0.9.14 - Authentication Bypass / SQL Injection / Cross-Site Scripting

CVE-2009-1811—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in myGesuad 0.9.14 (aka 0.9) allow remote attackers to inject arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

my-gesuad 0.9.14 - Authentication Bypass / SQL Injection / Cross-Site Scripting

CVE-2009-1812—webappsphp

Multiple SQL injection vulnerabilities in myGesuad 0.9.14 (aka 0.9) allow remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

Audioactive Player 1.93b - '.m3u' Local Buffer Overflow

CVE-2009-1815—localwindows

Stack-based buffer overflow in Sonic Spot Audioactive Player 1.93b allows remote attackers to execute arbitrary code via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Audioactive Player 1.93b - '.m3u' Local Buffer Overflow (SEH)

CVE-2009-1815—localwindows

Stack-based buffer overflow in Sonic Spot Audioactive Player 1.93b allows remote attackers to execute arbitrary code via

23RISCO

abrir ↗

Referência✓ VexDay Proof

DigiMode Maya 1.0.2 - '.m3u' / '.m3l' Buffer Overflow (PoC)

CVE-2009-1817—doswindows

Multiple buffer overflows in DigiMode Maya 1.0.2 allow remote attackers to execute arbitrary code via a long string in a

23RISCO

abrir ↗

Referência✓ VexDay Proof

2DayBiz Custom T-shirt Design - SQL Injection / Cross-Site Scripting

CVE-2009-1819—webappsphp

SQL injection vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component ArtForms 2.1 b7 - Remote File Inclusion

CVE-2009-1822—webappsphp

Multiple PHP remote file inclusion vulnerabilities in the InterJoomla ArtForms (com_artforms) component 2.1b7 for Joomla

23RISCO

abrir ↗

Referência✓ VexDay Proof

ArcaVir 2009 < 9.4.320X.9 - 'ps_drv.sys' Local Privilege Escalation

CVE-2009-1824—localwindows

The ps_drv.sys kernel driver in ArcaBit ArcaVir 2009 Antivirus Protection 9.4.3201.9 and earlier, ArcaVir 2009 Internet

23RISCO

abrir ↗

Referência✓ VexDay Proof

my-colex 1.4.2 - Authentication Bypass / SQL Injection / Cross-Site Scripting

CVE-2009-1825—webappsphp

modules/admuser.php in myColex 1.4.2 does not require administrative authentication, which allows remote authenticated u

23RISCO

abrir ↗

Referência✓ VexDay Proof

my-gesuad 0.9.14 - Authentication Bypass / SQL Injection / Cross-Site Scripting

CVE-2009-1826—webappsphp

modules/admuser.php in myGesuad 0.9.14 (aka 0.9) does not require administrative authentication, which allows remote aut

23RISCO

abrir ↗

Referência✓ VexDay Proof

Winamp 5.55 - MAKI script Universal Integer Overflow

CVE-2009-1831—localwindows

The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute

50RISCO

abrir ↗

Referência✓ VexDay Proof

Easy Px 41 CMS 09.00.00B1 - 'fiche' Local File Inclusion

CVE-2009-1847—webappsphp

Directory traversal vulnerability in index.php in Easy PX 41 CMS 9.0 B1 allows remote attackers to include and execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyForum 1.3 - Authentication Bypass

CVE-2009-1852—webappsphp

Multiple SQL injection vulnerabilities in Graphiks MyForum 1.3 allow remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Kensei Board 2.0.0b - Multiple SQL Injections

CVE-2009-1853—webappsphp

Multiple SQL injection vulnerabilities in index.php in Kensei Board 2.0 BETA (aka 2.0.0b) and earlier allow remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

Million Dollar Text Links 1.x - Insecure Cookie Handling

CVE-2009-1854—webappsphp

Million Dollar Text Links 1.0 allows remote attackers to bypass authentication and gain administrative access by setting

23RISCO

abrir ↗

Referência✓ VexDay Proof

DNS Tools (PHP Digger) - Remote Command Execution

CVE-2009-1916—webappsphp

dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the

28RISCO

abrir ↗

Referência✓ VexDay Proof

CPCommerce 1.2.x - 'GLOBALS[prefix]' Arbitrary File Inclusion

CVE-2009-1936CRITICALwebappsphp

_functions.php in cpCommerce 1.2.x, possibly including 1.2.9, sends a redirect but does not exit when it is called direc

60RISCO

abrir ↗

Referência✓ VexDay Proof

WebEyes Guest Book 3 - 'yorum.asp?mesajid' SQL Injection

CVE-2009-1950—webappsasp

SQL injection vulnerability in yorum.asp in WebEyes Guest Book 3 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

propertymax pro free - SQL Injection / Cross-Site Scripting

CVE-2009-1951—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in PropertyMax Pro FREE 0.3 allows remote attackers to inject arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

propertymax pro free - SQL Injection / Cross-Site Scripting

CVE-2009-1952—webappsphp

Multiple SQL injection vulnerabilities in the administrative login feature in PropertyMax Pro FREE 0.3, when magic_quote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apache mod_dav / svn - Remote Denial of Service

CVE-2009-1955—dosmultiple

The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav

35RISCO

abrir ↗

Referência✓ VexDay Proof

Dokuwiki 2009-02-14 - Local File Inclusion

CVE-2009-1960—webappsphp

inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when register_globals is enabled, allows remote att

28RISCO

abrir ↗

Referência✓ VexDay Proof

Dokuwiki 2009-02-14 - Temporary/Remote File Inclusion

CVE-2009-1960—webappsphp

inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when register_globals is enabled, allows remote att

28RISCO

abrir ↗

Referência✓ VexDay Proof

Password Protector SD 1.3.1 - Insecure Cookie Handling

CVE-2009-2003—webappsphp

Ascad Networks Password Protector SD 1.3.1 allows remote attackers to bypass authentication and gain administrative acce

23RISCO

abrir ↗

Referência✓ VexDay Proof

Family Connections CMS 1.9 - SQL Injection

CVE-2009-2010—webappsphp

Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 1.9 and earlier allow remote authen

23RISCO

abrir ↗

Referência✓ VexDay Proof

Worldweaver DX Studio Player < 3.0.29.1 Firefox plugin - Command Injection

CVE-2009-2011—remotewindows

Worldweaver DX Studio Player 3.0.29.0, 3.0.22.0, 3.0.12.0, and probably other versions before 3.0.29.1, when used as a p

50RISCO

abrir ↗

Referência✓ VexDay Proof

p4CMS 1.05 - 'abs_pfad' Remote File Inclusion

CVE-2006-4769—webappsphp

PHP remote file inclusion vulnerability in abf_js.php in p4CMS 1.05 allows remote attackers to execute arbitrary PHP cod

23RISCO

abrir ↗

Referência✓ VexDay Proof

Racer 0.5.3 Beta 5 - Remote Buffer Overflow

CVE-2007-4370—remotewindows

Multiple buffer overflows in the (1) client and (2) server in Racer 0.5.3 beta 5 allow remote attackers to execute arbit

50RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.