Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

80.842exploits catalogados
37.493CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.482Referência 23.901GitHub PoC 15.465VulnCheck XDB 9066Nuclei 4426Metasploit 3502✓ solo verificadosrecientespopularesriesgo
24.695 exploits
Exploit-DB✓ VexDay Proof
Ublog Reload 1.0.5 - 'index.asp' Multiple SQL Injections
CVE-2005-2009—webappsasp20 jun 2005
Multiple SQL injection vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Claroline E-Learning 1.6 - Remote Hash SQL Injection (2)
CVE-2005-1375—webappsphp19 jun 2005
Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow re
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
osCommerce 2.1/2.2 - Multiple HTTP Response Splitting Vulnerabilities
CVE-2005-1951—webappsphp17 jun 2005
Multiple HTTP Response Splitting vulnerabilities in osCommerce 2.2 Milestone 2 and earlier allow remote attackers to spo
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
JBoss 3.x/4.0.2 - HTTP Request Remote Information Disclosure
CVE-2005-2006—remotemultiple17 jun 2005
JBOSS 3.2.2 through 3.2.7 and 4.0.2 allows remote attackers to obtain sensitive information via a GET request (1) with a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Claroline E-Learning 1.6 - Remote Hash SQL Injection (1)
CVE-2005-1375—webappsphp17 jun 2005
Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow re
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ATutor 1.4.3 - 'tile.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-2044—webappsphp16 jun 2005
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ATutor 1.4.3 - 'contact.php?subject' Cross-Site Scripting
CVE-2005-2044—webappsphp16 jun 2005
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ATutor 1.4.3 - 'send_message.php?l' Cross-Site Scripting
CVE-2005-2044—webappsphp16 jun 2005
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ATutor 1.4.3 - 'browse.php?show_course' Cross-Site Scripting
CVE-2005-2044—webappsphp16 jun 2005
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ATutor 1.4.3 - 'content.php?cid' Cross-Site Scripting
CVE-2005-2044—webappsphp16 jun 2005
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ATutor 1.4.3 - 'subscribe_forum.php?us' Cross-Site Scripting
CVE-2005-2044—webappsphp16 jun 2005
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Ultimate PHP Board 1.8/1.9 - Weak Password Encryption
CVE-2005-2030—webappsphp16 jun 2005
Ultimate PHP Board (UPB) 1.9.6 GOLD uses weak encryption for passwords in the users.dat file, which allows attackers to
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ATutor 1.4.3 - 'search.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-2044—webappsphp16 jun 2005
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ATutor 1.4.3 - 'Directory.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-2044—webappsphp16 jun 2005
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Cool Cafe Chat 1.2.1 - 'login.asp' SQL Injection
CVE-2005-2035—webappsasp16 jun 2005
SQL injection vulnerability in login.asp for Cool Cafe (Cool Café) Chat 1.2.1 allows remote attackers to execute arbitra
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ATutor 1.4.3 - '/inbox/index.php?view' Cross-Site Scripting
CVE-2005-2044—webappsphp16 jun 2005
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Adobe Acrobat 7.0 / Adobe Reader 7.0 - File Existence / File Disclosure
CVE-2005-1306—remotewindows15 jun 2005
The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Mambo 4.5.2.1 - Fetch Password Hash
CVE-2005-2002—webappsphp15 jun 2005
SQL injection vulnerability in content.php in Mambo 4.5.2.2 and earlier allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
eXtropia Shopping Cart - 'web_store.cgi' Remote Command Execution
CVE-2004-0734—webappscgi15 jun 2005
Web_Store.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP Arena 1.1.3 - 'pafiledb.php' Remote Change Password
CVE-2005-2000—webappsphp15 jun 2005
Multiple SQL injection vulnerabilities in paFileDB 3.1 and earlier allow remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
McGallery 1.0/1.1 - Lang Argument File Disclosure
CVE-2005-1998—webappsphp15 jun 2005
Directory traversal vulnerability in admin.php in McGallery 1.1 allows remote attackers to read arbitrary files via a ..
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
AIX 5.2 - 'paginit' Local Privilege Escalation
CVE-2005-2236—localaix14 jun 2005
Format string vulnerability in the paginit command in IBM AIX 5.3, and possibly other versions, might allow local users
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4 - launchd Race Condition
CVE-2005-1725—localosx14 jun 2005
launchd 106 in Apple Mac OS X 10.4.x up to 10.4.1 allows local users to overwrite arbitrary files via a symlink attack o
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
AIX 5.2 - 'paginit' Local Privilege Escalation
CVE-2005-2232—localaix14 jun 2005
Buffer overflow in invscout in IBM AIX 5.1.0 through 5.3.0 might allow local users to execute arbitrary code via a long
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ViRobot Advanced Server 2.0 - 'addschup' Remote Cookie
CVE-2005-2041—remotelinux14 jun 2005
Buffer overflow in addschup in HAURI ViRobot 2.0, and possibly other products, allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
AIX 5.2 - 'ipl_varyon' Local Privilege Escalation
CVE-2005-0262—localaix14 jun 2005
Buffer overflow in ipl_varyon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -d argume
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
AIX 5.2 - 'netpmon' Local Privilege Escalation
CVE-2005-0263—localaix14 jun 2005
Buffer overflow in netpmon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -O argument.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Singapore 0.9.11 Beta Image Gallery - 'index.php' Cross-Site Scripting
CVE-2005-1955—webappsphp13 jun 2005
Cross-site scripting (XSS) vulnerability in index.php in singapore 0.9.11 allows remote attackers to inject arbitrary we
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
JamMail 1.8 - Jammail.pl Arbitrary Command Execution
CVE-2005-1959—webappscgi12 jun 2005
jammail.pl in jamchen JamMail 1.8 allows remote attackers to execute arbitrary commands via shell metacharacters in the
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Webhints 1.03 - Remote Command Execution (Perl) (3)
CVE-2005-1950—webappscgi11 jun 2005
hints.pl in Webhints 1.03 allows remote attackers to execute arbitrary commands via shell metacharacters in the argument
23RIESGO
abrir ↗
← anteriorpágina 483 / 824siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.