Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.097exploits catalogados

36.319CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.936GitHub PoC 15.007VulnCheck XDB 8.843Nuclei 4.361Metasploit 3.490✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

WebCards 1.3 - SQL Injection

CVE-2008-4877—webappsphp

SQL injection vulnerability in admin.php in WebCards 1.3, when magic_quotes_gpc is disabled, allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Maran PHP Shop - 'prod.php' SQL Injection

CVE-2008-4879—webappsphp

SQL injection vulnerability in prod.php in Maran PHP Shop allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Xilisoft Video Converter Wizard 3 - '.cue' Stack Buffer Overflow (PoC)

CVE-2009-1370—doswindows

Stack-based buffer overflow in ape_plugin.plg in Xilisoft Video Converter 3.1.53.0704n and 5.1.23.0402 allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

OpenSSL < 0.9.8i - DTLS ChangeCipherSpec Remote Denial of Service

CVE-2009-1386—dosmultiple

ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and

60RISCO

abrir ↗

Referência✓ VexDay Proof

CRE Loaded 6.2 - 'products_id' SQL Injection

CVE-2009-1403—webappsphp

SQL injection vulnerability in product_info.php in CRE Loaded 6.2 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyForum 1.3 - Insecure Cookie Handling

CVE-2008-5040—webappsphp

Graphiks MyForum 1.3 allows remote attackers to bypass authentication and gain administrative access by setting the (1)

23RISCO

abrir ↗

Referência✓ VexDay Proof

Seditio CMS Events Plugin - 'c' SQL Injection

CVE-2009-1411—webappsphp

SQL injection vulnerability in events/inc/events.inc.php in the Events plugin for Seditio CMS 1.0 allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

Flatchat 3.0 - 'pmscript.php' Local File Inclusion

CVE-2009-1486—webappsphp

Directory traversal vulnerability in pmscript.php in Flatchat 3.0 allows remote attackers to include and execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

fungamez rc1 - Authentication Bypass / Local File Inclusion

CVE-2009-1488—webappsphp

Directory traversal vulnerability in admin/load.php in FunGamez RC1 allows remote attackers to include and execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

Invision Power Board 2.0.3 - 'login.php' SQL Injection

CVE-2005-1598—webappsphp

SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary

28RISCO

abrir ↗

Referência✓ VexDay Proof

Check New 4.52 - SQL Injection

CVE-2008-5586—webappsphp

SQL injection vulnerability in findoffice.php in Check Up New Generation (aka Check New) 4.52, when magic_quotes_gpc is

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpPgAdmin 4.2.1 - '_language' Local File Inclusion

CVE-2008-5587—webappsphp

Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when register_globals is ena

43RISCO

abrir ↗

Referência✓ VexDay Proof

Adobe Reader 8.1.4/9.1 - 'GetAnnots()' Remote Code Execution

CVE-2009-1492—remotelinux

The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1, 8.1.4, 7.1.1, and earlier allows remote

28RISCO

abrir ↗

Referência✓ VexDay Proof

Adobe 8.1.4/9.1 - 'customDictionaryOpen()' Code Execution

CVE-2009-1493—remotelinux

The customDictionaryOpen spell method in the JavaScript API in Adobe Reader 9.1, 8.1.4, 7.1.1, and earlier on Linux and

28RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft GDI Plugin - '.png' Infinite Loop Denial of Service (PoC)

CVE-2009-1511—doswindows

GDI+ in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service (infinite loop) via a PNG file tha

28RISCO

abrir ↗

Referência✓ VexDay Proof

Google Chrome 1.0.154.53 - Null Pointer Remote Crash

CVE-2009-1514—doswindows

Google Chrome 1.0.154.53 allows remote attackers to cause a denial of service (NULL pointer dereference and application

23RISCO

abrir ↗

Referência✓ VexDay Proof

Icewarp Merak Mail Server 9.4.1 - 'Base64FileEncode()' Buffer Overflow (PoC)

CVE-2009-1516—doswindows

Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1

23RISCO

abrir ↗

Referência✓ VexDay Proof

Norton Ghost Support module for EasySetup wizard - Remote Denial of Service (PoC)

CVE-2009-1517—doswindows

Multiple insecure method vulnerabilities in the Symantec.EasySetup.1 ActiveX control in EasySetupInt.dll 14.0.4.30167 in

23RISCO

abrir ↗

Referência✓ VexDay Proof

pecio CMS 1.1.5 - 'index.php?language' Local File Inclusion

CVE-2009-1519—webappsphp

Directory traversal vulnerability in index.php in Pecio CMS 1.1.5 allows remote attackers to read arbitrary files via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

AGTC MyShop 3.2 - Insecure Cookie Handling

CVE-2009-1549—webappsphp

AGTC MyShop 3.2b allows remote attackers to bypass authentication and obtain administrative access setting the log_accep

23RISCO

abrir ↗

Referência✓ VexDay Proof

Qt QuickTeam - Multiple Remote File Inclusions

CVE-2009-1551—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Qt quickteam 2 allow remote attackers to execute arbitrary PHP cod

28RISCO

abrir ↗

Referência✓ VexDay Proof

TemaTres 1.0.3 - Blind SQL Injection

CVE-2009-1584—webappsphp

Multiple SQL injection vulnerabilities in TemaTres 1.0.3 and 1.031, when magic_quotes_gpc is disabled, allow remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

Grabit 1.7.2 Beta 3 - '.nzb' Local Buffer Overflow (SEH)

CVE-2009-1586—localwindows

Stack-based buffer overflow in the NZB importer feature in GrabIt 1.7.2 Beta 3 and earlier allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

32bit FTP (09.04.24) - 'Banner' Remote Buffer Overflow (PoC)

CVE-2009-1592—doswindows_x86

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

32bit FTP (09.04.24) - 'Banner' Remote Buffer Overflow

CVE-2009-1592—remotewindows_x86

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Job Script 2.0 - Arbitrary Change Admin Password

CVE-2009-1610—webappsphp

admin/changepassword.php in Job Script Job Board Software 2.0 allows remote attackers to change the administrator passwo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Leap CMS 0.1.4 - 'searchterm' Blind SQL Injection

CVE-2009-1613—webappsphp

Multiple SQL injection vulnerabilities in leap.php in Leap CMS 0.1.4, when magic_quotes_gpc is disabled, allow remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

Leap CMS 0.1.4 - SQL Injection / Cross-Site Scripting / Arbitrary File Upload

CVE-2009-1613—webappsphp

Multiple SQL injection vulnerabilities in leap.php in Leap CMS 0.1.4, when magic_quotes_gpc is disabled, allow remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

Leap CMS 0.1.4 - SQL Injection / Cross-Site Scripting / Arbitrary File Upload

CVE-2009-1614—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in Leap CMS 0.1.4 allow remote attackers to inject arbitrary web scr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Leap CMS 0.1.4 - SQL Injection / Cross-Site Scripting / Arbitrary File Upload

CVE-2009-1615—webappsphp

Unrestricted file upload vulnerability in Leap CMS 0.1.4 allows remote attackers to execute arbitrary code by uploading

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.