Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
24.696 exploits
Exploit-DB✓ VexDay Proof
ASPMForum - 'forum.asp?baslik' SQL Injection
CVE-2005-4141—webappsasp07 dic 2005
Multiple SQL injection vulnerabilities in ASPMForum allow remote attackers to execute arbitrary SQL commands via the (1)
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Appfluent Database IDS < 2.1.0.103 - Environment Variable Local Overflow
CVE-2005-4076—localsolaris07 dic 2005
Buffer overflow in Appfluent Technology Database IDS 2.0 allows local users to execute arbitrary code via a long APPFLUE
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ASPMForum - 'kullanicilistesi.asp?harf' SQL Injection
CVE-2005-4141—webappsasp07 dic 2005
Multiple SQL injection vulnerabilities in ASPMForum allow remote attackers to execute arbitrary SQL commands via the (1)
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PluggedOut Blog 1.9.x - 'index.php' Multiple SQL Injections
CVE-2005-4054—webappsphp06 dic 2005
SQL injection vulnerability in index.php in PluggedOut Blog 1.9.5 and earlier allows remote attackers to execute arbitra
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
A-FAQ 1.0 - 'faqDsp.asp?catcode' SQL Injection
CVE-2005-4064—webappsasp06 dic 2005
Multiple SQL injection vulnerabilities in A-FAQ 1.0 allow remote attackers to execute arbitrary SQL commands via the (1)
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IISWorks ASPKnowledgeBase 2.0 - 'KB.asp' Cross-Site Scripting
CVE-2005-4047—webappsasp06 dic 2005
Cross-site scripting (XSS) vulnerability in kb.asp in IISWorks ASPKnowledgeBase 2.0 allows remote attackers to inject ar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
A-FAQ 1.0 - 'faqDspItem.asp?faqid' SQL Injection
CVE-2005-4064—webappsasp06 dic 2005
Multiple SQL injection vulnerabilities in A-FAQ 1.0 allow remote attackers to execute arbitrary SQL commands via the (1)
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
DuWare DuPortalPro 3.4.3 - 'Password.asp' Cross-Site Scripting
CVE-2005-4166—webappsasp06 dic 2005
Cross-site scripting (XSS) vulnerability in password.asp in DUWare DUportal Pro 3.4.3 allows remote attackers to inject
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
NetAuctionHelp 3.0 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-4063—webappsasp06 dic 2005
Multiple cross-site scripting (XSS) vulnerabilities in NetAuctionHelp 3.0 and earlier allow remote attackers to inject a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
RWAuction Pro 4.0 - 'search.asp' Cross-Site Scripting
CVE-2005-4060—webappsasp06 dic 2005
Cross-site scripting (XSS) vulnerability in search.asp in rwAuction Pro 4.0 and 5.0 allows remote attackers to inject ar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Multiple Vendor BIOS - Keyboard Buffer Password Persistence (1)
CVE-2005-4176—localwindows06 dic 2005
AWARD Bios Modular 4.50pg does not clear the keyboard buffer after reading the BIOS password during system startup, whic
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Cars Portal 1.1 - 'index.php' Multiple SQL Injections
CVE-2005-4055—webappsphp06 dic 2005
SQL injection vulnerability in index.php in Cars Portal 1.1 and earlier allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Multiple Vendor BIOS - Keyboard Buffer Password Persistence (2)
CVE-2005-4176—localunix06 dic 2005
AWARD Bios Modular 4.50pg does not clear the keyboard buffer after reading the BIOS password during system startup, whic
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Horde IMP 2.2.x/3.2.x/4.0.x - Email Attachments HTML Injection
CVE-2005-4080—remotelinux06 dic 2005
Horde IMP 4.0.4 and earlier does not sanitize strings containing UTF16 null characters, which allows remote attackers to
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Hobosworld HobSR - Multiple SQL Injections
CVE-2005-4043—webappsphp05 dic 2005
SQL injection vulnerability in view.php in Hobosworld HobSR 1.0 and earlier allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
1-Script 1-Search 1.8 - '1search.CGI' Cross-Site Scripting
CVE-2005-4091—webappscgi05 dic 2005
Cross-site scripting (XSS) vulnerability in 1search.cgi in 1-Script 1-Search 1.8 allows remote attackers to inject arbit
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Web4Future eCommerce Enterprise Edition 2.1 - 'view.php' Multiple SQL Injections
CVE-2005-4035—webappsphp05 dic 2005
Multiple SQL injection vulnerabilities in Web4Future eCommerce Enterprise Edition 2.1 and earlier allow remote attackers
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Web4Future eCommerce Enterprise Edition 2.1 - 'viewbrands.php?bid' SQL Injection
CVE-2005-4035—webappsphp05 dic 2005
Multiple SQL injection vulnerabilities in Web4Future eCommerce Enterprise Edition 2.1 and earlier allow remote attackers
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Web4Future eDating Professional 5.0 - 'index.php' Multiple SQL Injections
CVE-2005-4034—webappsphp05 dic 2005
Multiple SQL injection vulnerabilities in Web4Future eDating Professional 5 allow remote attackers to execute arbitrary
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
SAMEDIA LandShop 0.6.3 - 'ls.php' Multiple SQL Injections
CVE-2005-4018—webappsphp05 dic 2005
SQL injection vulnerability in ls.php in Landshop Real Estate Commerce System 0.6.3 and earlier allows remote attackers
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Web4Future Portal Solutions - 'Arhiva.php' Directory Traversal
CVE-2005-4039—webappsphp05 dic 2005
Directory traversal vulnerability in arhiva.php in Web4Future Portal Solutions News Portal allows remote attackers to re
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Web4Future eCommerce Enterprise Edition 2.1 - 'index.php' Multiple SQL Injections
CVE-2005-4035—webappsphp05 dic 2005
Multiple SQL injection vulnerabilities in Web4Future eCommerce Enterprise Edition 2.1 and earlier allow remote attackers
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Web4Future eDating Professional 5.0 - 'articles.php?cat' SQL Injection
CVE-2005-4034—webappsphp05 dic 2005
Multiple SQL injection vulnerabilities in Web4Future eDating Professional 5 allow remote attackers to execute arbitrary
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Relative Real Estate Systems 1.2 - SQL Injection
CVE-2005-4019—webappsphp05 dic 2005
SQL injection vulnerability in index.php in Relative Real Estate Systems 1.02 and earlier allows remote attackers to exe
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Blog System 1.2 - 'index.php?cat' SQL Injection
CVE-2005-4049—webappsphp05 dic 2005
Multiple SQL injection vulnerabilities in Blog System 1.2 allow remote attackers to execute arbitrary SQL commands via (
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Web4Future eDating Professional 5.0 - 'fq.php?cid' SQL Injection
CVE-2005-4034—webappsphp05 dic 2005
Multiple SQL injection vulnerabilities in Web4Future eDating Professional 5 allow remote attackers to execute arbitrary
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Web4Future Affiliate Manager PRO 4.1 - 'functions.php' SQL Injection
CVE-2005-4037—webappsphp05 dic 2005
SQL injection vulnerability in functions.php in Web4Future Affiliate Manager PRO 4.1 and earlier allows remote attackers
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Web4Future eDating Professional 5.0 - 'gift.php?cid' SQL Injection
CVE-2005-4034—webappsphp05 dic 2005
Multiple SQL injection vulnerabilities in Web4Future eDating Professional 5 allow remote attackers to execute arbitrary
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Easy Search System 1.1 - 'search.cgi' Cross-Site Scripting
CVE-2005-4032—webappscgi05 dic 2005
Cross-site scripting (XSS) vulnerability in search.cgi in Easy Search System 1.1 and earlier allows remote attackers to
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Edgewall Software Trac 0.7.1/0.8/0.9 Search Module - SQL Injection
CVE-2005-4065—webappsphp05 dic 2005
SQL injection vulnerability in the search module in Edgewall Trac before 0.9.2 allows remote attackers to execute arbitr
23RIESGO
abrir ↗
← anteriorpágina 458 / 824siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.