Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.107exploits catalogados

36.322CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.464Referência 22.936GitHub PoC 15.010VulnCheck XDB 8.846Nuclei 4.361Metasploit 3.490✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

PHPFK 7.03 - 'page_bottom.php' Local File Inclusion

CVE-2009-2112—webappsphp

Directory traversal vulnerability in include/page_bottom.php in phpFK 7.03 allows remote attackers to include and execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

elvin bts 1.2.0 - Multiple Vulnerabilities

CVE-2009-2123—webappsphp

Multiple SQL injection vulnerabilities in Elvin 1.2.0 allow remote attackers to execute arbitrary SQL commands via the (

23RISCO

abrir ↗

Referência✓ VexDay Proof

elvin bts 1.2.0 - Multiple Vulnerabilities

CVE-2009-2124—webappsphp

Directory traversal vulnerability in page.php in Elvin 1.2.0 allows remote attackers to include and execute arbitrary lo

23RISCO

abrir ↗

Referência✓ VexDay Proof

elvin bts 1.2.0 - Multiple Vulnerabilities

CVE-2009-2130—webappsphp

Elvin 1.2.0 allows remote attackers to read the PHP source code of (1) login.ei, (2) jump_bug.ei, or (3) create_account.

23RISCO

abrir ↗

Referência✓ VexDay Proof

tbdev 01-01-2008 - Multiple Vulnerabilities

CVE-2009-2141—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in TBDev.NET 01-01-08 allow remote attackers to inject arbitrary web

23RISCO

abrir ↗

Referência✓ VexDay Proof

Zip Store Chat 4.0/5.0 - Authentication Bypass

CVE-2009-2142—webappsphp

Multiple SQL injection vulnerabilities in admin/index.asp in Zip Store Chat 4.0 and 5.0 allow remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpWebThings 1.5.2 - MD5 Hash Retrieve/File Disclosure

CVE-2009-2147—webappsphp

SQL injection vulnerability in fdown.php in phpWebThings 1.5.2 and earlier allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

campus virtual-lms - Cross-Site Scripting / SQL Injection

CVE-2009-2148—webappsphp

SQL injection vulnerability in news/index.php in Campus Virtual-LMS allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

adaptweb 0.9.2 - Local File Inclusion / SQL Injection

CVE-2009-2152—webappsphp

SQL injection vulnerability in a_index.php in AdaptWeb 0.9.2 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

2532/Gigs 1.2.2 Stable - Remote Authentication Bypass

CVE-2008-6907—webappsphp

Multiple SQL injection vulnerabilities in checkuser.php in 2532designs 2532|Gigs 1.2.2 Stable, when magic_quotes_gpc is

23RISCO

abrir ↗

Referência✓ VexDay Proof

Zeeways Shaadi Clone 2.0 - Authentication Bypass (1)

CVE-2008-6912—webappsphp

Zeeways SHAADICLONE 2.0 allows remote attackers to bypass authentication and gain administrative privileges via a direct

23RISCO

abrir ↗

Referência✓ VexDay Proof

impleo music Collection 2.0 - SQL Injection / Cross-Site Scripting

CVE-2009-2154—webappsphp

SQL injection vulnerability in admin/login.php in Impleo Music Collection 2.0, when magic_quotes_gpc is disabled, allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

ScriptsFeed (SF) Recipes Listing Portal - Arbitrary File Upload

CVE-2008-6943—webappsphp

Unrestricted file upload vulnerability in ScriptsFeed Recipes Listing Portal allows remote authenticated users to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

DD-WRT HTTPd Daemon/Service - Remote Command Execution

CVE-2008-6975—remotehardware

Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp2 allow remote attackers to hijac

23RISCO

abrir ↗

Referência✓ VexDay Proof

aspwebalbum 3.2 - Arbitrary File Upload / SQL Injection / Cross-Site Scripting

CVE-2008-6977—webappsphp

Cross-site scripting (XSS) vulnerability in album.asp in Full Revolution aspWebAlbum 3.2 allows remote attackers to inje

23RISCO

abrir ↗

Referência✓ VexDay Proof

AJ Article 1.0 - Remote Authentication Bypass

CVE-2008-7051—webappsphp

AJ Square AJ Article allows remote attackers to bypass authentication and access administrator functionality via a direc

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pre Real Estate Listings - Arbitrary File Upload

CVE-2008-7052—webappsphp

Unrestricted file upload vulnerability in profile.php in Pre Projects Pre Real Estate Listings allows remote authenticat

23RISCO

abrir ↗

Referência✓ VexDay Proof

TorrentTrader Classic 1.09 - Multiple Vulnerabilities

CVE-2009-2157—webappsphp

Multiple SQL injection vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

Kjtechforce mailman b1 - Delete Row 'code' SQL Injection

CVE-2009-2164—webappsphp

Multiple SQL injection vulnerabilities in Kjtechforce mailman beta1, when magic_quotes_gpc is disabled, allow remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

EgyPlus 7ml 1.0.1 - Authentication Bypass

CVE-2009-2168CRITICALwebappsphp

cpanel/login.php in EgyPlus 7ammel (aka 7ml) 1.0.1 and earlier sends a redirect to the web browser but does not exit whe

53RISCO

abrir ↗

Referência✓ VexDay Proof

Carom3D 5.06 - Unicode Buffer Overrun/Denial of Service

CVE-2009-2173—doswindows

The LAN game feature in Carom3D 5.06 allows remote authenticated users to cause a denial of service (application hang) v

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fuzzylime CMS 3.03a - Local Inclusion / Arbitrary File Corruption

CVE-2009-2176—webappsphp

Multiple directory traversal vulnerabilities in fuzzylime (cms) 3.03a and earlier, when magic_quotes_gpc is disabled, al

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fuzzylime CMS 3.03a - Local Inclusion / Arbitrary File Corruption

CVE-2009-2177—webappsphp

code/display.php in fuzzylime (cms) 3.03a and earlier, when magic_quotes_gpc is disabled, allows remote attackers to con

23RISCO

abrir ↗

Referência✓ VexDay Proof

Quicksilver Forums 1.4.2 (Windows) - Remote Code Execution

CVE-2008-7064—webappsphp

Directory traversal vulnerability in the get_lang function in global.php in Quicksilver Forums 1.4.2 and earlier, as use

23RISCO

abrir ↗

Referência✓ VexDay Proof

chipmunk topsites - Authentication Bypass / Cross-Site Scripting

CVE-2008-7071—webappsphp

SQL injection vulnerability in authenticate.php in Chipmunk Topsites allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpDatingClub 3.7 - SQL Injection / Cross-Site Scripting Injection

CVE-2009-2179—webappsphp

SQL injection vulnerability in search.php in phpDatingClub 3.7 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

pc4 Uploader 10.0 - Remote File Disclosure

CVE-2009-2180—webappsphp

Multiple directory traversal vulnerabilities in upfiles/index.php in Pc4 Uploader 10.0 and earlier allow remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

Star Articles 6.0 - Blind SQL Injection (2)

CVE-2008-7075—webappsphp

Multiple SQL injection vulnerabilities in Kalptaru Infotech Ltd. Star Articles 6.0 allow remote attackers to inject arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

SailPlanner 0.3a - Authentication Bypass

CVE-2008-7077—webappsphp

Multiple SQL injection vulnerabilities in SailPlanner 0.3a allow remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Limbo CMS 1.0.4.2L - 'com_contact' Remote Code Execution

CVE-2006-4859—webappsphp

Unrestricted file upload vulnerability in contact.html.php in the Contact (com_contact) component in Limbo (aka Lite Mam

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.