Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
24.696 exploits
Exploit-DB✓ VexDay Proof
OTRS 2.0 - 'index.pl' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-3894—webappscgi22 nov 2005
Multiple cross-site scripting (XSS) vulnerabilities in index.pl in Open Ticket Request System (OTRS) 1.0.0 through 1.3.2
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
OTRS 2.0 - Login Function 'User' SQL Injection
CVE-2005-3893—webappscgi22 nov 2005
Multiple SQL injection vulnerabilities in index.pl in Open Ticket Request System (OTRS) 1.0.0 through 1.3.2 and 2.0.0 th
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Virtual Hosting Control System 2.2/2.4 - Error Message Cross-Site Scripting
CVE-2005-3902—webappsphp22 nov 2005
Cross-site scripting (XSS) vulnerability in gui/errordocs/index.php in Virtual Hosting Control System (VHCS) 2.2.0 throu
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
OTRS 2.0 - AgentTicketPlain Action Multiple SQL Injections
CVE-2005-3893—webappscgi22 nov 2005
Multiple SQL injection vulnerabilities in index.pl in Open Ticket Request System (OTRS) 1.0.0 through 1.3.2 and 2.0.0 th
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Advanced Poll 2.0.2/2.0.3 - 'popup.php' Cross-Site Scripting
CVE-2005-3742—webappsphp21 nov 2005
Cross-site scripting (XSS) vulnerability in popup.php in Advanced Poll 2.0.3 and earlier allows remote attackers to inje
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apache Struts 1.2.7 - Error Response Cross-Site Scripting
CVE-2005-3745—remotemultiple21 nov 2005
Cross-site scripting (XSS) vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
SimplePoll - 'results.php' SQL Injection
CVE-2005-3743—webappsphp21 nov 2005
SQL injection vulnerability in results.php in SimplePoll allows remote attackers to execute arbitrary SQL commands via t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP Download Manager 1.1.x - 'files.php' SQL Injection
CVE-2005-3769—webappsphp21 nov 2005
SQL injection vulnerability in files.php in PHP Download Manager 1.1.3 and earlier allows remote attackers to execute ar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FileZilla Server Terminal 0.9.4d - Buffer Overflow (PoC)
CVE-2005-3589—doswindows21 nov 2005
Buffer overflow in FileZilla Server Terminal 0.9.4d may allow remote attackers to cause a denial of service (terminal cr
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Tru-Zone Nuke ET 3.x - Search Module SQL Injection
CVE-2005-3748—webappsphp21 nov 2005
SQL injection vulnerability in the Search module in Tru-Zone Nuke ET 3.2, and possibly earlier versions, allows remote a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
APBoard - 'thread.php' SQL Injection
CVE-2005-3746—webappsphp21 nov 2005
SQL injection vulnerability in thread.php in APBoard allows remote attackers to execute arbitrary SQL commands via the s
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHPPost 1.0 - 'mail.php?user' Cross-Site Scripting
CVE-2005-3770—webappsphp21 nov 2005
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Post (PHPp) 1.0 allow remote attackers to inject arbitrary we
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Inkscape 0.41/0.42 - '.SVG' Image Buffer Overflow
CVE-2005-3737—remotelinux21 nov 2005
Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers to execute
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHPPost 1.0 - 'profile.php?user' Cross-Site Scripting
CVE-2005-3770—webappsphp21 nov 2005
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Post (PHPp) 1.0 allow remote attackers to inject arbitrary we
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
MailEnable 1.54 Pro - Universal IMAPD W3C Logging Buffer Overflow (Metasploit)
CVE-2005-3155—remotewindows20 nov 2005
Buffer overflow in the W3C logging for MailEnable Enterprise 1.1 and Professional 1.6 allows remote attackers to execute
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Google Search Appliance - proxystylesheet XSLT Java Code Execution (Metasploit)
CVE-2005-3757—remotehardware20 nov 2005
The Saxon XSLT parser in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Macromedia Flash Plugin 7.0.19.0 - 'action' Denial of Service
CVE-2005-3591—dosmultiple18 nov 2005
Macromedia Flash plugin (1) Flash.ocx 7.0.19.0 (Windows) and earlier and (2) libflashplayer.so before 7.0.25.0 (Unix) al
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Qualcomm WorldMail Server 3.0 - Directory Traversal
CVE-2005-3189—remotelinux17 nov 2005
Directory traversal vulnerability in Qualcomm WorldMail IMAP Server allows remote attackers to read arbitrary email mess
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
VP-ASP Shopping Cart - 'Shopadmin.asp' HTML Injection
CVE-2005-3685—webappsasp17 nov 2005
Cross-site scripting (XSS) vulnerability in shopadmin.asp in VP-ASP Shopping Cart 5.50 allows remote attackers to inject
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Revize CMS - 'Revize.XML' Information Disclosure
CVE-2005-3728—webappsjsp17 nov 2005
Idetix Software Systems Revize CMS stores conf/revize.xml under the web document root with insufficient access control,
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
freeFTPd 1.0.8 - 'USER' Remote Buffer Overflow
CVE-2005-3684—remotewindows17 nov 2005
Multiple buffer overflows in freeFTPd 1.0.8, without logging enabled, allow remote authenticated attackers to cause a de
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Revize CMS HTTPTranslatorServlet - Cross-Site Scripting
CVE-2005-3730—webappsjsp17 nov 2005
Multiple cross-site scripting (XSS) vulnerabilities in HTTPTranslatorServlet in Idetix Software Systems Revize CMS allow
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Litespeed 2.1.5 - 'ConfMgr.php' Cross-Site Scripting
CVE-2005-3695—webappsphp17 nov 2005
Cross-site scripting (XSS) vulnerability in admin/config/confMgr.php in LiteSpeed Web Server 2.1.5 allows remote attacke
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
freeFTPd 1.0.8 - 'USER' Remote Buffer Overflow
CVE-2005-3683—remotewindows17 nov 2005
Stack-based buffer overflow in freeFTPd before 1.0.9 with Logging enabled, allows remote attackers to cause a denial of
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Revize CMS - 'Query_results.jsp' SQL Injection
CVE-2005-3727—webappsjsp17 nov 2005
SQL injection vulnerability in debug/query_results.jsp in Idetix Software Systems Revize CMS allows remote attackers to
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP-Nuke 7.8 Search Module - SQL Injection
CVE-2005-3792—webappsphp16 nov 2005
Multiple SQL injection vulnerabilities in the Search module in PHP-Nuke 7.8, and possibly other versions before 7.9 with
35RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FTGate4 Groupware Mail Server 4.1 - imapd Remote Buffer Overflow (PoC)
CVE-2005-3640—doswindows16 nov 2005
Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate (FTGate4) 4.1 allow remote attackers to
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHPWebThings 1.4 - 'forum' SQL Injection
CVE-2005-4218—webappsphp16 nov 2005
SQL injection vulnerability in forum.php in PHPWebThings 1.4 allows remote attackers to execute arbitrary SQL commands v
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHPWebThings 1.4 - 'forum' SQL Injection
CVE-2005-4226—webappsphp16 nov 2005
Multiple "potential" SQL injection vulnerabilities in phpWebThings 1.4 Patched might allow remote attackers to execute a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHPWebThings 1.4 - 'msg'/'forum' SQL Injection
CVE-2005-4226—webappsphp16 nov 2005
Multiple "potential" SQL injection vulnerabilities in phpWebThings 1.4 Patched might allow remote attackers to execute a
23RIESGO
abrir ↗
← anteriorpágina 464 / 824siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.