Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.057exploits catalogados

36.288CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.910GitHub PoC 14.997VulnCheck XDB 8.843Nuclei 4.358Metasploit 3.489✓ só verificadosrecentes populares risco

22.910 exploits

Referência

CVE-2018-20219

CVE-2018-20219—

An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below. After successful authentication, the de

28RISCO

abrir ↗

Referência✓ VexDay Proof

myPHPNuke Module My_eGallery 2.5.6 - 'basepath' Remote File Inclusion

CVE-2006-6795—webappsphp

PHP remote file inclusion vulnerability in gallery/displayCategory.php in the My_eGallery 2.5.6 module in myPHPNuke (MPN

23RISCO

abrir ↗

Referência✓ VexDay Proof

MTCMS 2.0 - '/admin/admin_settings.php' Remote File Inclusion

CVE-2006-6796—webappsphp

PHP remote file inclusion vulnerability in admin/admin_settings.php in MTCMS 2.0 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

SH-News 0.93 - 'misc.php' Remote File Inclusion

CVE-2006-6801—webappsphp

PHP remote file inclusion vulnerability in misc.php in SH-News 0.93, when register_globals is enabled, allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

Enthrallweb ePages - 'actualpic.asp' SQL Injection

CVE-2006-6802—webappsasp

SQL injection vulnerability in actualpic.asp in Enthrallweb ePages allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

Enthrallweb eCars 1.0 - 'types.asp' SQL Injection

CVE-2006-6803—webappsasp

SQL injection vulnerability in Types.asp in Enthrallweb eCars 1.0 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

Dragon Business Directory 3.01.12 - 'ID' SQL Injection

CVE-2006-6804—webappsasp

SQL injection vulnerability in bus_details.asp in Dragon Business Directory - Pro (aka Dragon Internet Business Search D

23RISCO

abrir ↗

Referência✓ VexDay Proof

Enthrallweb eJobs - 'newsdetail.asp' SQL Injection

CVE-2006-6805—webappsasp

SQL injection vulnerability in newsdetail.asp in Enthrallweb eJobs allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ananda Real Estate 3.4 - 'agent' SQL Injection

CVE-2006-6807—webappsasp

SQL injection vulnerability in list.asp in Softwebs Nepal (aka Ananda Raj Pandey) Ananda Real Estate 3.4 and earlier all

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bubla 1.0.0rc2 - '/bu/process.php' Remote File Inclusion

CVE-2006-6809—webappsphp

Multiple PHP remote file inclusion vulnerabilities in process.php in Vladimir Menshakov buratinable templator (aka bubla

23RISCO

abrir ↗

Referência✓ VexDay Proof

Nitrotech 0.0.3a - Remote Code Execution

CVE-2006-6938—webappsphp

Directory traversal vulnerability in includes/common.php in NitroTech 0.0.3a, as distributed before 2006, allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

FreeWebShop.org script 2.2.2 - Multiple Vulnerabilities

CVE-2006-6941—webappsphp

index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to obtain sensitive information via an invalid action

23RISCO

abrir ↗

Referência✓ VexDay Proof

SCart 2.0 - 'page' Remote Code Execution

CVE-2006-7012—webappsphp

scart.cgi in SCart 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the page parame

23RISCO

abrir ↗

Referência✓ VexDay Proof

FlashBB 1.1.8 - 'phpbb_root_path' Remote File Inclusion

CVE-2006-7032—webappsphp

PHP remote file inclusion vulnerability in phpbb/getmsg.php in FlashBB 1.1.5 and earlier allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

TinyPHP Forum 3.6 - 'profile.php' Remote Code Execution

CVE-2006-7063—webappsphp

Directory traversal vulnerability in profile.php in TinyPHPforum 3.6 and earlier allows remote attackers to include and

23RISCO

abrir ↗

Referência

CVE-2018-20469

CVE-2018-20469—

An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A parameter in the web reports module is vulnerable to

28RISCO

abrir ↗

Referência✓ VexDay Proof

exV2 < 2.0.4.3 - 'extract()' Remote Command Execution

CVE-2006-7080—webappsphp

Directory traversal vulnerability in the avatar upload feature in exV2 2.0.4.3 and earlier allows remote attackers to de

23RISCO

abrir ↗

Referência✓ VexDay Proof

PhpNews 1.0 - 'Include' Remote File Inclusion

CVE-2006-7081—webappsphp

Multiple PHP remote file inclusion vulnerabilities in PhpNews 1.0 allow remote attackers to execute arbitrary PHP code v

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPWind 5.0.1 - 'AdminUser' Blind SQL Injection

CVE-2006-7101—webappsphp

SQL injection vulnerability in admin.php in PHPWind 5.0.1 and earlier allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Power Phlogger 2.0.9 - 'config.inc.php3' File Inclusion

CVE-2006-7106—webappsphp

PHP remote file inclusion vulnerability in config.inc.php3 in Power Phlogger 2.0.9 and earlier allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

FreePBX 2.1.3 - 'upgrade.php' Remote File Inclusion

CVE-2006-7107—webappsphp

PHP remote file inclusion vulnerability in upgrade.php in Coalescent Systems freePBX 2.1.3 allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

MDPro 1.0.76 - 'Cookie PNSVlang' Local File Inclusion

CVE-2006-7112—webappsphp

Directory traversal vulnerability in error.php in MD-Pro 1.0.76 and earlier allows remote authenticated users to read an

23RISCO

abrir ↗

Referência✓ VexDay Proof

AllMyLinks 0.5.0 - 'index.php' Remote File Inclusion

CVE-2007-0171—webappsphp

PHP remote file inclusion vulnerability in index.php in AllMyLinks 0.5.0 and earlier allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

MOTIONBORG Web Real Estate 2.1 - SQL Injection

CVE-2007-0196—webappsasp

SQL injection vulnerability in admin_check_user.asp in Motionborg Web Real Estate 2.1 and earlier allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

uniForum 4 - 'wbsearch.aspx' SQL Injection

CVE-2007-0226—webappsphp

SQL injection vulnerability in wbsearch.aspx in uniForum 4 and earlier allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Core 2.0.6 - 'wp-trackback.php' SQL Injection

CVE-2007-0233—webappsphp

wp-trackback.php in WordPress 2.0.6 and earlier does not properly unset variables when the input data includes a numeric

28RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Mac OSX 10.4.8 - AppleTalk 'ATPsndrsp()' Heap Buffer Overflow (PoC)

CVE-2007-0236—dososx

Double free vulnerability in the _ATPsndrsp function in Apple Mac OS X 10.4.8, and possibly other versions, allows remot

28RISCO

abrir ↗

Referência✓ VexDay Proof

sNews 1.5.30 - Remote Reset Admin Pass / Command Execution

CVE-2007-0261—webappsphp

snews.php in sNews 1.5.30 and earlier does not properly exit when authentication fails, which allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2018-6084

CVE-2018-6084—

Insufficiently sanitized distributed objects in Updater in Google Chrome on macOS prior to 66.0.3359.117 allowed a local

23RISCO

abrir ↗

Referência

CVE-2018-6180

CVE-2018-6180—

A flaw in the profile section of Online Voting System 1.0 allows an unauthenticated user to set an arbitrary password fo

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.