Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.057exploits catalogados

36.288CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.910GitHub PoC 14.997VulnCheck XDB 8.843Nuclei 4.358Metasploit 3.489✓ só verificadosrecentes populares risco

22.910 exploits

Referência✓ VexDay Proof

PHP-Update 2.7 - 'extract()' Authentication Bypass / Shell Injection

CVE-2006-6661—webappsphp

Variable overwrite vulnerability in blog.php in PHP-Update 2.7 and earlier allows remote attackers to overwrite arbitrar

23RISCO

abrir ↗

Referência

CVE-2026-15249

CVE-2026-15249MEDIUM

Patterns Kit <= 1.0.3 - Contributor+ Stored XSS via YouTube Popup Link

33RISCO

abrir ↗

Referência✓ VexDay Proof

RealPlayer 10.5 - ActiveX Control Denial of Service

CVE-2006-6759—doswindows

A certain ActiveX control in rpau3260.dll in RealNetworks RealPlayer 10.5 allows remote attackers to cause a denial of s

23RISCO

abrir ↗

Referência

CVE-2018-20011

CVE-2018-20011—

DomainMOD 4.11.01 has XSS via the assets/add/category.php Category Name or Stakeholder field.

38RISCO

abrir ↗

Referência✓ VexDay Proof

PHPMyManga 0.8.1 - 'template.php' Multiple File Inclusions

CVE-2006-6760—webappsphp

Multiple PHP remote file inclusion vulnerabilities in template.php in Phpmymanga 0.8.1 and earlier allow remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pagetool CMS 1.07 - 'pt_upload.php' Remote File Inclusion

CVE-2006-6765—webappsphp

Multiple PHP file inclusion vulnerabilities in src/admin/pt_upload.php in Pagetool 1.07 allow remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

Jinzora 2.7 - 'INCLUDE_PATH' Multiple Remote File Inclusions

CVE-2006-6770—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Jinzora Media Jukebox 2.7 and earlier, when register_globals is en

23RISCO

abrir ↗

Referência

CVE-2018-20062

CVE-2018-20062CRITICALsob ataque

An issue was discovered in NoneCms V1.3. thinkphp/library/think/App.php allows remote attackers to execute arbitrary PHP

100RISCO

abrir ↗

Referência✓ VexDay Proof

Irokez Blog 0.7.1 - Multiple Remote File Inclusions

CVE-2006-6771—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Irokez CMS 0.7.1 and earlier, when register_globals is enabled, al

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ciberia Content Federator 1.0.1 - 'path' Remote File Inclusion

CVE-2006-6774—webappsphp

PHP remote file inclusion vulnerability in socios/maquetacion_socio.php (members/maquetacion_member.php) in Ciberia Cont

23RISCO

abrir ↗

Referência✓ VexDay Proof

acFTP FTP Server 1.5 - 'REST/PBSZ' Remote Denial of Service

CVE-2006-6775—doswindows

acFTP 1.5 allows remote authenticated users to cause a denial of service via a crafted argument to the (1) REST or (2) P

23RISCO

abrir ↗

Referência✓ VexDay Proof

open NewsLetter 2.5 - Multiple Vulnerabilities (2)

CVE-2006-6785—webappsphp

The (1) settings.php and (2) subscribers.php scripts in Open Newsletter 2.5 and earlier do not exit when authentication

23RISCO

abrir ↗

Referência✓ VexDay Proof

Calendar MX BASIC 1.0.2 - 'ID' SQL Injection

CVE-2006-6792—webappsasp

SQL injection vulnerability in calendar_detail.asp in Calendar MX BASIC 1.0.2 and earlier allows remote attackers to exe

23RISCO

abrir ↗

Referência

CVE-2018-20219

CVE-2018-20219—

An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below. After successful authentication, the de

28RISCO

abrir ↗

Referência✓ VexDay Proof

myPHPNuke Module My_eGallery 2.5.6 - 'basepath' Remote File Inclusion

CVE-2006-6795—webappsphp

PHP remote file inclusion vulnerability in gallery/displayCategory.php in the My_eGallery 2.5.6 module in myPHPNuke (MPN

23RISCO

abrir ↗

Referência✓ VexDay Proof

MTCMS 2.0 - '/admin/admin_settings.php' Remote File Inclusion

CVE-2006-6796—webappsphp

PHP remote file inclusion vulnerability in admin/admin_settings.php in MTCMS 2.0 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

SH-News 0.93 - 'misc.php' Remote File Inclusion

CVE-2006-6801—webappsphp

PHP remote file inclusion vulnerability in misc.php in SH-News 0.93, when register_globals is enabled, allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

Enthrallweb ePages - 'actualpic.asp' SQL Injection

CVE-2006-6802—webappsasp

SQL injection vulnerability in actualpic.asp in Enthrallweb ePages allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

Enthrallweb eCars 1.0 - 'types.asp' SQL Injection

CVE-2006-6803—webappsasp

SQL injection vulnerability in Types.asp in Enthrallweb eCars 1.0 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

Dragon Business Directory 3.01.12 - 'ID' SQL Injection

CVE-2006-6804—webappsasp

SQL injection vulnerability in bus_details.asp in Dragon Business Directory - Pro (aka Dragon Internet Business Search D

23RISCO

abrir ↗

Referência✓ VexDay Proof

Enthrallweb eJobs - 'newsdetail.asp' SQL Injection

CVE-2006-6805—webappsasp

SQL injection vulnerability in newsdetail.asp in Enthrallweb eJobs allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ananda Real Estate 3.4 - 'agent' SQL Injection

CVE-2006-6807—webappsasp

SQL injection vulnerability in list.asp in Softwebs Nepal (aka Ananda Raj Pandey) Ananda Real Estate 3.4 and earlier all

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bubla 1.0.0rc2 - '/bu/process.php' Remote File Inclusion

CVE-2006-6809—webappsphp

Multiple PHP remote file inclusion vulnerabilities in process.php in Vladimir Menshakov buratinable templator (aka bubla

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPGiggle 12.08 - 'CFG_PHPGIGGLE_ROOT' File Inclusion

CVE-2006-7119—webappsphp

PHP remote file inclusion vulnerability in kernel/system/startup.php in J. He PHPGiggle 12.08 and earlier, as distribute

23RISCO

abrir ↗

Referência

CVE-2018-20503

CVE-2018-20503—

Allied Telesis 8100L/8 devices allow XSS via the edit-ipv4_interface.php vlanid or subnet_mask parameter.

23RISCO

abrir ↗

Referência✓ VexDay Proof

JAF CMS 4.0 RC2 - Multiple Remote File Inclusions

CVE-2006-7127—webappsphp

Multiple PHP remote file inclusion vulnerabilities in JAF CMS 4.0 and 4.0 RC2 allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência

CVE-2018-20523

CVE-2018-20523—

Xiaomi Stock Browser 10.2.4.g on Xiaomi Redmi Note 5 Pro devices and other Redmi Android phones allows content provider

28RISCO

abrir ↗

Referência✓ VexDay Proof

JAF CMS 4.0 RC1 - 'forum.php' Remote File Inclusion

CVE-2006-7128—webappsphp

PHP remote file inclusion vulnerability in forum/forum.php JAF CMS 4.0 RC1 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Jinzora 2.6 - '/extras/mt.php' Remote File Inclusion

CVE-2006-7131—webappsphp

PHP remote file inclusion vulnerability in extras/mt.php in Jinzora 2.6 allows remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência

CVE-2018-2628

CVE-2018-2628CRITICALsob ataque

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.