Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.107exploits catalogados

36.322CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.464Referência 22.936GitHub PoC 15.010VulnCheck XDB 8.846Nuclei 4.361Metasploit 3.490✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Adobe JRun 4 - 'logfile' (Authenticated) Directory Traversal

CVE-2009-1873—remotewindows

Directory traversal vulnerability in logging/logviewer.jsp in the Management Console in Adobe JRun Application Server 4

23RISCO

abrir ↗

Referência✓ VexDay Proof

ICQ 6.5 - URL Search Hook (Windows Explorer) Remote Buffer Overflow (PoC)

CVE-2009-1915—doswindows

Stack-based buffer overflow in the URL Search Hook (ICQToolBar.dll) in ICQ 6.5 allows remote attackers to cause a denial

23RISCO

abrir ↗

Referência✓ VexDay Proof

DNS Tools (PHP Digger) - Remote Command Execution

CVE-2009-1916—webappsphp

dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the

28RISCO

abrir ↗

Referência✓ VexDay Proof

CPCommerce 1.2.x - 'GLOBALS[prefix]' Arbitrary File Inclusion

CVE-2009-1936CRITICALwebappsphp

_functions.php in cpCommerce 1.2.x, possibly including 1.2.9, sends a redirect but does not exit when it is called direc

60RISCO

abrir ↗

Referência✓ VexDay Proof

WebEyes Guest Book 3 - 'yorum.asp?mesajid' SQL Injection

CVE-2009-1950—webappsasp

SQL injection vulnerability in yorum.asp in WebEyes Guest Book 3 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

propertymax pro free - SQL Injection / Cross-Site Scripting

CVE-2009-1951—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in PropertyMax Pro FREE 0.3 allows remote attackers to inject arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

propertymax pro free - SQL Injection / Cross-Site Scripting

CVE-2009-1952—webappsphp

Multiple SQL injection vulnerabilities in the administrative login feature in PropertyMax Pro FREE 0.3, when magic_quote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apache mod_dav / svn - Remote Denial of Service

CVE-2009-1955—dosmultiple

The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav

35RISCO

abrir ↗

Referência✓ VexDay Proof

Dokuwiki 2009-02-14 - Local File Inclusion

CVE-2009-1960—webappsphp

inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when register_globals is enabled, allows remote att

28RISCO

abrir ↗

Referência✓ VexDay Proof

Dokuwiki 2009-02-14 - Temporary/Remote File Inclusion

CVE-2009-1960—webappsphp

inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when register_globals is enabled, allows remote att

28RISCO

abrir ↗

Referência✓ VexDay Proof

Password Protector SD 1.3.1 - Insecure Cookie Handling

CVE-2009-2003—webappsphp

Ascad Networks Password Protector SD 1.3.1 allows remote attackers to bypass authentication and gain administrative acce

23RISCO

abrir ↗

Referência✓ VexDay Proof

Family Connections CMS 1.9 - SQL Injection

CVE-2009-2010—webappsphp

Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 1.9 and earlier allow remote authen

23RISCO

abrir ↗

Referência✓ VexDay Proof

Worldweaver DX Studio Player < 3.0.29.1 Firefox plugin - Command Injection

CVE-2009-2011—remotewindows

Worldweaver DX Studio Player 3.0.29.0, 3.0.22.0, 3.0.12.0, and probably other versions before 3.0.29.1, when used as a p

50RISCO

abrir ↗

Referência✓ VexDay Proof

Frontis 3.9.01.24 - 'source_class' SQL Injection

CVE-2009-2013—webappsphp

SQL injection vulnerability in bin/aps_browse_sources.php in Frontis 3.9.01.24 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Virtue Shopping Mall - 'cid' SQL Injection

CVE-2009-2016—webappsphp

SQL injection vulnerability in products.php in Virtue Shopping Mall allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

YNP Portal System 2.2.0 - 'showpage.cgi p' Remote File Disclosure

CVE-2007-4256—webappscgi

Directory traversal vulnerability in showpage.cgi in YNP Portal System 2.2.0 allows remote attackers to read arbitrary f

23RISCO

abrir ↗

Referência✓ VexDay Proof

Live for Speed S1/S2/Demo - '.ply' Local Buffer Overflow

CVE-2007-4257—localwindows

Multiple buffer overflows in Live for Speed (LFS) S1 and S2 allow user-assisted remote attackers to execute arbitrary co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Live for Speed S1/S2/Demo - '.spr' Local Buffer Overflow

CVE-2007-4257—localwindows

Multiple buffer overflows in Live for Speed (LFS) S1 and S2 allow user-assisted remote attackers to execute arbitrary co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Prozilla Pub Site Directory - 'Directory.php?cat' SQL Injection

CVE-2007-4258—webappsphp

SQL injection vulnerability in directory.php in Prozilla Pub Site Directory allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

FrontAccounting 1.12 build 31 - Remote File Inclusion

CVE-2007-4279—webappsphp

PHP remote file inclusion vulnerability in config.php in FrontAccounting 1.12 Build 31 allows remote attackers to execut

45RISCO

abrir ↗

Referência✓ VexDay Proof

Virtue Book Store - 'cid' SQL Injection

CVE-2009-2017—webappsphp

SQL injection vulnerability in products.php in Virtue Book Store allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

virtue news - SQL Injection / Cross-Site Scripting

CVE-2009-2019—webappsphp

SQL injection vulnerability in news_detail.php in Virtue News Manager allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Virtue Classifieds - 'category' SQL Injection

CVE-2009-2021—webappsphp

SQL injection vulnerability in search.php in Virtue Classifieds allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPCollegeExchange 0.1.5c - 'listing_view.php?itemnr' SQL Injection

CVE-2009-2096—webappsphp

SQL injection vulnerability in house/listing_view.php in phpCollegeExchange 0.1.5c allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPortal 1 - 'topicler.php?id' SQL Injection

CVE-2009-2098—webappsphp

SQL injection vulnerability in topicler.php in phPortal 1.0 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

p4CMS 1.05 - 'abs_pfad' Remote File Inclusion

CVE-2006-4769—webappsphp

PHP remote file inclusion vulnerability in abf_js.php in p4CMS 1.05 allows remote attackers to execute arbitrary PHP cod

23RISCO

abrir ↗

Referência✓ VexDay Proof

Racer 0.5.3 Beta 5 - Remote Buffer Overflow

CVE-2007-4370—remotewindows

Multiple buffer overflows in the (1) client and (2) server in Racer 0.5.3 beta 5 allow remote attackers to execute arbit

50RISCO

abrir ↗

Referência✓ VexDay Proof

Getleft 1.2 - Remote Buffer Overflow (PoC)

CVE-2008-6897—dosmultiple

Multiple buffer overflows in Getleft.exe in Andres Garcia Getleft 1.2 allow remote attackers to cause a denial of servic

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Jumi - 'fileid' Blind SQL Injection

CVE-2009-2102—webappsphp

SQL injection vulnerability in the Jumi (com_jumi) component 2.0.3 and possibly other versions for Joomla allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

DB Top Sites 1.0 - 'index.php?u' Local File Inclusion

CVE-2009-2110—webappsphp

Multiple directory traversal vulnerabilities in DB Top Sites 1.0, when magic_quotes_gpc is disabled, allow remote attack

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.