Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.794exploits catalogados

36.057CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.459Referência 22.721GitHub PoC 14.946VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Geeklog 2 - 'BaseView.php' Remote File Inclusion

CVE-2007-0810—webappsphp

PHP remote file inclusion vulnerability in MVCnPHP/BaseView.php in GeekLog 2 and earlier allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

MojoAuto - Blind SQL Injection

CVE-2008-3383—webappscgi

SQL injection vulnerability in mojoAuto.cgi in MojoAuto allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência✓ VexDay Proof

Alstrasoft Video Share Enterprise 4.5.1 - 'UID' SQL Injection

CVE-2008-3386—webappsphp

SQL injection vulnerability in album.php in AlstraSoft Video Share Enterprise 4.51 allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Woltlab Burning Board Lite 1.0.2pl3e - 'pms.php' SQL Injection

CVE-2007-0812—webappsphp

SQL injection vulnerability in pms.php in Woltlab Burning Board (wBB) Lite 1.0.2pl3e and earlier allows remote authentic

23RISCO

abrir ↗

Referência✓ VexDay Proof

Drake CMS 0.4.11 - Blind SQL Injection

CVE-2008-6475—webappsphp

SQL injection vulnerability in the guestbook component (components/guestbook/guestbook.php) in Drake CMS 0.4.11 and earl

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPFootball 1.6 - SQL Injection

CVE-2008-3387—webappsphp

SQL injection vulnerability in show.php in PHPFootball 1.6 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

XRms 1.99.2 - Remote File Inclusion / Cross-Site Scripting / Information Gathering

CVE-2008-3400—webappsphp

XRMS CRM 1.99.2 allows remote attackers to obtain configuration information via a direct request to tests/info.php, whic

23RISCO

abrir ↗

Referência✓ VexDay Proof

MojoPersonals - Blind SQL Injection

CVE-2008-3403—webappscgi

SQL injection vulnerability in mojoClassified.cgi in MojoPersonals allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

IceBB 1.0-RC9.2 - Blind SQL Injection / Session Hijacking

CVE-2008-3416—webappsphp

SQL injection vulnerability in modules/members.php in IceBB before 1.0-rc9.3 allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

FipsCMS Light 2.1 - 'r' SQL Injection

CVE-2008-3417—webappsasp

SQL injection vulnerability in home/index.asp in fipsCMS light 2.1 and earlier allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Youtuber Clone - SQL Injection

CVE-2008-3419—webappsphp

SQL injection vulnerability in ugroups.php in Youtuber Clone allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mobius 1.4.4.1 - SQL Injection

CVE-2008-3420—webappsphp

Multiple SQL injection vulnerabilities in Mobius for Mimsy XG 1 1.4.4.1 and earlier allow remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpMyRealty 2.0.0 - 'location' SQL Injection

CVE-2008-3445—webappsphp

SQL injection vulnerability in index.php in phpMyRealty (PMR) 2.0.0 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

otscms 2.1.5 - SQL Injection / Cross-Site Scripting

CVE-2007-0847—webappsphp

SQL injection vulnerability in mod/PM/reply.php in Open Tibia Server CMS (OTSCMS) 2.1.5 and earlier allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

LetterIt 2 - 'Language' Local File Inclusion

CVE-2008-3446—webappsphp

Directory traversal vulnerability in inc/wysiwyg.php in LetterIt 2 allows remote attackers to include and execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Scripts24 iPost 1.0.1 - 'id' SQL Injection

CVE-2008-3491—webappsphp

SQL injection vulnerability in go.php in Scripts24 iPost 1.0.1 and iTGP 1.0.4 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

Scripts24 iTGP 1.0.4 - 'id' SQL Injection

CVE-2008-3491—webappsphp

SQL injection vulnerability in go.php in Scripts24 iPost 1.0.1 and iTGP 1.0.4 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

SoftComplex PHP Image Gallery - 'ctg' SQL Injection

CVE-2008-6485—webappsphp

SQL injection vulnerability in index.php in SoftComplex PHP Image Gallery allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

DigiAffiliate 1.4 - Authentication Bypass

CVE-2008-6487—webappsasp

Multiple SQL injection vulnerabilities in login.asp in Digiappz DigiAffiliate 1.4 and earlier allow remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

OpenX 2.6.3 - 'MAX_type' Local File Inclusion

CVE-2009-0291—webappsphp

Directory traversal vulnerability in fc.php in OpenX 2.6.3 allows remote attackers to include and execute arbitrary file

23RISCO

abrir ↗

Referência✓ VexDay Proof

RealVNC Windows Client 4.1.2 - Remote Denial of Service Crash (PoC)

CVE-2008-3493—doswindows

vncviewer.exe in RealVNC Windows Client 4.1.2.0 allows remote VNC servers to cause a denial of service (application cras

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyPHP CMS 0.3.1 - 'pid' SQL Injection

CVE-2008-3497—webappsphp

SQL injection vulnerability in pages.php in MyPHP CMS 0.3.1 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

polypager 1.0rc2 - SQL Injection / Cross-Site Scripting

CVE-2008-3505—webappsphp

Cross-site scripting (XSS) vulnerability in PolyPager 1.0 rc2 and earlier allows remote attackers to inject arbitrary we

23RISCO

abrir ↗

Referência✓ VexDay Proof

LiteNews 0.1 - 'id' SQL Injection

CVE-2008-3507—webappsphp

SQL injection vulnerability in index.php in LiteNews 0.1 (aka 01), and possibly 1.2 and earlier, allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component MyAlbum 1.0 - 'album' SQL Injection

CVE-2008-6489—webappsphp

SQL injection vulnerability in MyAlbum component (com_myalbum) 1.0 for Joomla! allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Safari - RSS 'feed://' Buffer Overflow via libxml2 (PoC)

CVE-2008-3529—doswindows

Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-de

28RISCO

abrir ↗

Referência✓ VexDay Proof

Discuz! 6.0.1 - 'searchid' SQL Injection

CVE-2008-3554—webappsphp

SQL injection vulnerability in index.php in Discuz! 6.0.1 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cisco WebEx Meeting Manager UCF - 'atucfobj.dll' ActiveX Remote Buffer Overflow

CVE-2008-3558—remotewindows

Stack-based buffer overflow in the WebexUCFObject ActiveX control in atucfobj.dll in Cisco WebEx Meeting Manager before

50RISCO

abrir ↗

Referência✓ VexDay Proof

ABG Blocking Script 1.0a - 'abg_path' Remote File Inclusion

CVE-2008-3570—webappsphp

PHP remote file inclusion vulnerability in index.php in Africa Be Gone (ABG) 1.0a allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

k-links directory - SQL Injection / Cross-Site Scripting

CVE-2008-3580—webappsphp

Multiple SQL injection vulnerabilities in Qsoft K-Links allow remote attackers to execute arbitrary SQL commands via (1)

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.