Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.057exploits catalogados

36.288CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.910GitHub PoC 14.997VulnCheck XDB 8.843Nuclei 4.358Metasploit 3.489✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

W3Filer 2.1.3 - Remote Stack Overflow (PoC)

CVE-2007-3548—doswindows

Stack-based buffer overflow in W3Filer 2.1.3 allows remote FTP servers to cause a denial of service (application hang or

23RISCO

abrir ↗

Referência✓ VexDay Proof

Live for Speed S1/S2/Demo - '.mpr replay' Local Buffer Overflow

CVE-2007-4140—localwindows

Buffer overflow in Live for Speed (LFS) S2 ALPHA PATCH 0.5x allows user-assisted remote attackers to execute arbitrary c

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpMyProfiler 0.9.6 - Remote File Inclusion

CVE-2006-5186—webappsphp

PHP remote file inclusion vulnerability in functions.php in phpMyProfiler 0.9.6 and earlier, when register_globals is en

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Stats 0.1.9.1b - 'PHP-stats-options.php' Command Execution

CVE-2006-7173—webappsphp

Direct static code injection vulnerability in admin.php in PHP-Stats 0.1.9.1b and earlier allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

CrystalPlayer 1.98 - '.mls' Local Buffer Overflow

CVE-2007-4032—localwindows

Buffer overflow in CrystalPlayer Pro 1.98 allows user-assisted remote attackers to execute arbitrary code via a long str

23RISCO

abrir ↗

Referência✓ VexDay Proof

Flatnuke 3 - Remote Cookie Manipulation / Privilege Escalation

CVE-2007-5772—webappsphp

Direct static code injection vulnerability in the download module in Flatnuke 3 allows remote authenticated administrato

23RISCO

abrir ↗

Referência✓ VexDay Proof

newsmanager 2.0 - Remote File Inclusion / File Disclosure / SQL Injection

CVE-2008-2341—webappsphp

PHP remote file inclusion vulnerability in ch_readalso.php in News Manager 2.0 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

MeltingIce File System 1.0 - Arbitrary Add User

CVE-2008-2348—webappsphp

MeltingIce File System 1.0 allows remote attackers to bypass application authentication, create new user accounts, and e

23RISCO

abrir ↗

Referência✓ VexDay Proof

CMS WebManager-Pro - Multiple SQL Injections

CVE-2008-2351—webappsphp

Multiple SQL injection vulnerabilities in index.php in CMS WebManager-Pro allow remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

How2ASP.net WebBoard 4.1 - SQL Injection

CVE-2008-2417—webappsphp

SQL injection vulnerability in showQAnswer.asp in How2ASP.net Webboard 4.1 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Konqueror 3.5.9 - 'color'/'bgcolor' Multiple Remote Crash Vulnerabilities

CVE-2008-5712—doslinux

The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service (application crash) via (1)

23RISCO

abrir ↗

Referência✓ VexDay Proof

Web Group Communication Center (WGCC) 1.0.3 - SQL Injection

CVE-2008-2446—webappsphp

Multiple SQL injection vulnerabilities in Web Group Communication Center (WGCC) 1.0.3 PreRelease 1 and earlier allow rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

e107 Plugin BLOG Engine 2.2 - 'rid' Blind SQL Injection

CVE-2008-2455—webappsphp

SQL injection vulnerability in comment.php in the MacGuru BLOG Engine plugin 2.2 for e107 allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

MolyX BOARD 2.5.0 - 'index.php?lang' Local File Inclusion

CVE-2007-2778—webappsphp

Multiple directory traversal vulnerabilities in MolyX BOARD 2.5.0 allow remote attackers to read arbitrary files via a .

23RISCO

abrir ↗

Referência✓ VexDay Proof

DB Top Sites 1.0 - Remote Command Execution

CVE-2009-2111—webappsphp

Static code injection vulnerability in add_reg.php in DB Top Sites 1.0 allows remote attackers to inject arbitrary PHP c

23RISCO

abrir ↗

Referência✓ VexDay Proof

EnjoySAP ActiveX kweditcontrol.kwedit.1 - Remote Stack Overflow (PoC)

CVE-2007-3607—doswindows

Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to cause a denia

23RISCO

abrir ↗

Referência✓ VexDay Proof

Furkan Tastan Blog - SQL Injection

CVE-2007-5272—webappsasp

SQL injection vulnerability in kategori.asp in Furkan Tastan Blog allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

MiniBill 20061010 - 'menu_builder.php' File Inclusion

CVE-2006-5620—webappsphp

PHP remote file inclusion vulnerability in include/menu_builder.php in MiniBILL 2006-10-10 (1.2.3) and earlier, when reg

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Upload Center 2.0 - 'activate.php' File Inclusion

CVE-2006-6360—webappsphp

PHP remote file inclusion vulnerability in activate.php in PHP Upload Center 2.0 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Zomplog 3.8.1 - Arbitrary File Upload

CVE-2007-5278—webappsphp

Zomplog 3.8.1 and earlier stores potentially sensitive information under the web root with insufficient access control,

23RISCO

abrir ↗

Referência✓ VexDay Proof

FlashChat 4.5.7 - 'aedating4CMS.php' Remote File Inclusion

CVE-2006-4583—webappsphp

Multiple PHP remote file inclusion vulnerabilities in FlashChat before 4.6.2 allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Orbit Downloader 2.8.7 - Arbitrary File Deletion

CVE-2009-1064—remotewindows

Argument injection vulnerability in orbitmxt.dll 2.1.0.2 in the Orbit Downloader 2.8.7 and earlier ActiveX control allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

R2K Gallery 1.7 - 'galeria.php?lang2' Local File Inclusion

CVE-2007-2642—webappsphp

Directory traversal vulnerability in galeria.php in R2K Gallery 1.7 allows remote attackers to read arbitrary files via

23RISCO

abrir ↗

Referência✓ VexDay Proof

idmos-phoenix CMS - 'aural.php' Remote File Inclusion

CVE-2007-5293—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in IDMOS 1.0-beta (aka Phoenix) allow remote attackers to inject arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pixie CMS - Cross-Site Scripting / SQL Injection

CVE-2009-1067—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in Pixie CMS 1.01a allows remote attackers to inject arbitrary web

23RISCO

abrir ↗

Referência✓ VexDay Proof

@lex Guestbook 4.0.2 - Remote Command Execution

CVE-2007-0202—webappsphp

SQL injection vulnerability in index.php in @lex Guestbook 4.0.2 and earlier, when magic_quotes_gpc is disabled, allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

Acidcat CMS 3.4.1 - Multiple Vulnerabilities

CVE-2008-1993—webappsphp

Acidcat CMS 3.4.1 does not restrict access to the FCKEditor component, which allows remote attackers to upload arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Google Chrome 0.2.149.27 - Inspect Element Denial of Service

CVE-2008-6997—doswindows

Google Chrome 0.2.149.27 allows user-assisted remote attackers to cause a denial of service (browser crash) via an IMG t

23RISCO

abrir ↗

Referência✓ VexDay Proof

EDraw Flowchart ActiveX Control 2.0 - Insecure Method

CVE-2007-5826—remotewindows

Absolute path traversal vulnerability in the EDraw Flowchart ActiveX control in EDImage.ocx 2.0.2005.1104 allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

bloofox 0.3 - SQL Injection / File Disclosure

CVE-2008-0427—webappsphp

Directory traversal vulnerability in file.php in bloofoxCMS 0.3 allows remote attackers to read arbitrary files via a ..

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.