Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.107exploits catalogados

36.322CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.464Referência 22.936GitHub PoC 15.010VulnCheck XDB 8.846Nuclei 4.361Metasploit 3.490✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

KTP Computer Customer Database CMS 1.0 - Local File Inclusion

CVE-2008-5953—webappsphp

Directory traversal vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc is disabled, all

23RISCO

abrir ↗

Referência✓ VexDay Proof

Absolute Form Processor XE-V 1.5 - Insecure Cookie Handling

CVE-2009-1504—webappsasp

Absolute Form Processor XE 1.5 allows remote attackers to bypass authentication and gain administrative access by settin

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bitweaver 2.6 - 'saveFeed()' Remote Code Execution

CVE-2009-1678—webappsphp

Directory traversal vulnerability in the saveFeed function in rss/feedcreator.class.php in Bitweaver 2.6 and earlier all

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebText 0.4.5.2 - Remote Code Execution

CVE-2006-6856—webappsphp

Direct static code injection vulnerability in WebText CMS 0.4.5.2 and earlier allows remote attackers to inject arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

MODx CMS 0.9.6.2 - Remote File Inclusion / Cross-Site Scripting

CVE-2008-5938—webappsphp

PHP remote file inclusion vulnerability in assets/snippets/reflect/snippet.reflect.php in MODx CMS 0.9.6.2 and earlier,

23RISCO

abrir ↗

Referência✓ VexDay Proof

FTP Explorer 1.0.1 Build 047 - Remote CPU Consumption (Denial of Service)

CVE-2007-1082—doswindows

FTP Explorer 1.0.1 Build 047, and other versions before 1.0.1.52, allows remote servers to cause a denial of service (CP

23RISCO

abrir ↗

Referência✓ VexDay Proof

XCMS 1.1 - 'Galerie.php' Local File Inclusion

CVE-2007-3523—webappsphp

Multiple directory traversal vulnerabilities in Module/Galerie.php in XCMS 1.1 allow remote attackers to include and exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

AJSquare Free Polling Script - 'DB' Multiple Vulnerabilities

CVE-2008-7045—webappsphp

AJ Square Free Polling Script (AJPoll) Database version allows remote attackers to bypass authentication and reset poll

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPortal 1.0 - Insecure Cookie Handling

CVE-2009-2117—webappsphp

uye_paneli.php in phPortal 1.0 allows remote attackers to bypass authentication and obtain administrative access by sett

23RISCO

abrir ↗

Referência✓ VexDay Proof

newsmanager 2.0 - Remote File Inclusion / File Disclosure / SQL Injection

CVE-2008-2343—webappsphp

News Manager 2.0 allows remote attackers to bypass restrictions and obtain sensitive information via a direct request to

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPIndexPage 1.0.1 - 'config.php' Remote File Inclusion

CVE-2007-0499—webappsphp

PHP remote file inclusion vulnerability in config.php in Sangwan Kim phpIndexPage 1.0.1 and earlier allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

WinPcap 4.0 - 'NPF.SYS' Local Privilege Escalation

CVE-2007-3681—localwindows

The IOCTL 9031 (BIOCGSTATS) handler in the NPF.SYS device driver in WinPcap before 4.0.1 allows local users to overwrite

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fastpublish CMS 1.9999 - Local File Inclusion / SQL Injection

CVE-2008-4519—webappsphp

Multiple directory traversal vulnerabilities in Fastpublish CMS 1.9999 d allow remote attackers to include and execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component SimpleFAQ 2.11 - SQL Injection

CVE-2007-4456—webappsphp

SQL injection vulnerability in index.php in the SimpleFAQ (com_simplefaq) 2.11 component for Mambo allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

xKiosk 3.0.1i - 'xkurl.php?PEARPATH' Remote File Inclusion

CVE-2007-5314—webappsphp

PHP remote file inclusion vulnerability in system/funcs/xkurl.php in xKiosk WEB 3.0.1i, when register_globals is enabled

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pre Simple CMS - Authentication Bypass

CVE-2008-5058—webappsphp

SQL injection vulnerability in siteadmin/loginsucess.php in Pre Simple CMS allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

XZero Community Classifieds 4.95.11 - Local File Inclusion / SQL Injection

CVE-2007-6566—webappsphp

SQL injection vulnerability in post.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

Lithium CMS 4.04c - '/classes/index.php' Local File Inclusion

CVE-2006-5731—webappsphp

Directory traversal vulnerability in classes/index.php in Lithium CMS 4.04c and earlier allows remote attackers to inclu

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ourspace 2.0.9 - 'uploadmedia.cgi' Arbitrary File Upload

CVE-2007-4647—webappscgi

newswire/uploadmedia.cgi in 2coolcode Our Space (Ourspace) 2.0.9 allows remote attackers to upload certain files via uns

23RISCO

abrir ↗

Referência✓ VexDay Proof

moziloCMS 1.10.1 - 'download.php' Arbitrary Download File

CVE-2008-3589—webappsphp

Directory traversal vulnerability in download.php in moziloCMS 1.10.1, when magic_quotes_gpc is disabled, allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

TinyCMS 1.1.2 - 'templater.php' Local File Inclusion

CVE-2008-4740—webappsphp

Directory traversal vulnerability in templater.php in the ZZ_Templater module in TinyCMS 1.1.2, when register_globals is

23RISCO

abrir ↗

Referência✓ VexDay Proof

mBlog 1.2 - 'page' Remote File Disclosure

CVE-2007-6582—webappsphp

Directory traversal vulnerability in index.php in mBlog 1.2 allows remote attackers to read arbitrary files via a .. (do

23RISCO

abrir ↗

Referência✓ VexDay Proof

artmedic weblog 1.0 - Multiple Local File Inclusions

CVE-2008-0798—webappsphp

Multiple directory traversal vulnerabilities in artmedic webdesign weblog 1.0, when magic_quotes_gpc is disabled, allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

celerbb 0.0.2 - Multiple Vulnerabilities

CVE-2009-0853—webappsphp

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mini File Host 1.2 - 'language' Local File Inclusion

CVE-2008-0357—webappsphp

Directory traversal vulnerability in pages/upload.php in Galaxyscripts Mini File Host 1.2.1 and earlier allows remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

Kmita Tellfriend 2.0 - 'file' Remote File Inclusion

CVE-2008-2198—webappsphp

PHP remote file inclusion vulnerability in kmitaadmin/kmitat/htmlcode.php in Kmita Tellfriend 2.0 and earlier, when regi

23RISCO

abrir ↗

Referência✓ VexDay Proof

PortalApp 4.0 - SQL Injection / Cross-Site Scripting / Authentication Bypass

CVE-2008-4613—webappsasp

SQL injection vulnerability in forums.asp in PortalApp 4.0 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

eSHOP100 - 'SUB' SQL Injection

CVE-2008-5190—webappsphp

SQL injection vulnerability in index.php in eSHOP100 allows remote attackers to execute arbitrary SQL commands via the S

23RISCO

abrir ↗

Referência✓ VexDay Proof

OpenX 2.6 - 'bannerid' Blind SQL Injection

CVE-2008-6163—webappsphp

SQL injection vulnerability in www/delivery/ac.php in OpenX 2.6.1 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

DevelopItEasy Events Calendar 1.2 - Multiple SQL Injections

CVE-2008-6608—webappsphp

Multiple SQL injection vulnerabilities in DevelopItEasy Events Calendar 1.2 allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.