Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.900exploits catalogados
35.840CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8722Nuclei 4320Metasploit 3477✓ solo verificadosrecientespopularesriesgo
24.458 exploits
Exploit-DB✓ VexDay Proof
Eudora Qualcomm WorldMail 3.0 - 'IMAPd' Remote Overflow
CVE-2006-0637—remotewindows20 dic 2005
Buffer overflow in cram.dll in QUALCOMM Eudora WorldMail 3.0 allows remote attackers to execute arbitrary code via an IM
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Golden FTP Server 1.92 - 'APPE' Remote Overflow (Metasploit)
CVE-2005-4553—remotewindows20 dic 2005
Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long APPE command. NO
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHPGedView 3.3.7 - Remote Code Execution
CVE-2005-4467—webappsphp20 dic 2005
Directory traversal vulnerability in help_text_vars.php in PHPGedView 3.3.7 and earlier allows remote attackers to read
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Enterprise Connector 1.0.2 - 'main.php' SQL Injection
CVE-2005-4563—webappsphp20 dic 2005
SQL injection vulnerability in main.php in Enterprise Heart Enterprise Connector 1.0.2 allows remote attackers to execut
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
AbleDesign D-Man 3.0 - 'Title' Cross-Site Scripting
CVE-2005-4435—webappsphp20 dic 2005
Cross-site scripting (XSS) vulnerability in index.php AbleDesign D-Man 3.x allows remote attackers to inject arbitrary w
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Lighthouse CMS 1.1 - Search Cross-Site Scripting
CVE-2005-4780LOWwebappsphp19 dic 2005
Cross-site scripting (XSS) vulnerability in Fidra Lighthouse CMS 1.1.0 and earlier allows remote attackers to inject arb
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
allinta CMS 2.3.2 - 'search.asp?searchQuery' Cross-Site Scripting
CVE-2005-4374—webappsasp19 dic 2005
Multiple cross-site scripting (XSS) vulnerabilities in Allinta 2.3.2 and earlier allow remote attackers to inject arbitr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Bitweaver 1.1.1 - 'my.php?sort_mode' Cross-Site Scripting
CVE-2005-4380—webappsphp19 dic 2005
Multiple SQL injection vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Libertas Enterprise CMS 3.0 - 'index.php' Cross-Site Scripting
CVE-2005-4399—webappsphp19 dic 2005
Cross-site scripting (XSS) vulnerability in search/index.php in Libertas Enterprise CMS 3.0 and earlier allows remote at
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
allinta CMS 2.3.2 - 'faq.asp?s' Cross-Site Scripting
CVE-2005-4374—webappsasp19 dic 2005
Multiple cross-site scripting (XSS) vulnerabilities in Allinta 2.3.2 and earlier allow remote attackers to inject arbitr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Acidcat CMS 2.1.13 - 'ID' SQL Injection
CVE-2005-4370—webappsasp19 dic 2005
SQL injection vulnerability in main_content.asp in Acidcat 2.1.13 and earlier allows remote attackers to execute arbitra
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Miraserver 1.0 RC4 - 'newsitem.php?id' SQL Injection
CVE-2005-4408—webappsphp19 dic 2005
Multiple SQL injection vulnerabilities in Miraserver 1.0 RC4 and earlier allow remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Marwel 2.7 - 'index.php' SQL Injection
CVE-2005-4403—webappsphp19 dic 2005
SQL injection vulnerability in index.php in Marwel 2.7 and earlier allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Liferay Portal Enterprise 3.6.1 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-4400—webappsphp19 dic 2005
Cross-site scripting (XSS) vulnerability in downloads/portal_ent in Liferay Portal Enterprise 3.6.1 and earlier allows r
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Cofax 2.0 - search.htm Cross-Site Scripting
CVE-2005-4385—webappsphp19 dic 2005
Cross-site scripting (XSS) vulnerability in search.htm in Cofax 2.0 RC3 and earlier allows remote attackers to inject ar
38RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Bitweaver 1.1.1 - 'message_box.php?sort_mode' Cross-Site Scripting
CVE-2005-4380—webappsphp19 dic 2005
Multiple SQL injection vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Komodo CMS 2.1 - Multiple Input Validation Vulnerabilities
CVE-2005-4363—webappsphp19 dic 2005
Cross-site scripting (XSS) vulnerability in the search engine in Komodo CMS 2.1 allows remote attackers to inject arbitr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Bitweaver 1.1.1 - 'view.php?blog_id' Cross-Site Scripting
CVE-2005-4380—webappsphp19 dic 2005
Multiple SQL injection vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ContentServ 3.0/3.1/4.0 - 'index.php' SQL Injection
CVE-2005-4390—webappsphp19 dic 2005
SQL injection vulnerability in index.php in ContentServ 3.1 and earlier allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Baseline CMS 1.95 - Multiple Input Validation Vulnerabilities
CVE-2005-4378—webappsasp19 dic 2005
SQL injection vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Box UK Amaxus CMS 3.0 - Cross-Site Scripting
CVE-2005-4375—webappsphp19 dic 2005
Cross-site scripting (XSS) vulnerability in Amaxus 3 and earlier allows remote attackers to inject arbitrary web script
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
MailEnable Enterprise Edition 1.1 - 'EXAMINE' Remote Buffer Overflow
CVE-2005-4456—remotewindows19 dic 2005
Multiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 before patch ME-10009 allow remote attacker
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
MailEnable Enterprise Edition 1.1 - 'EXAMINE' Remote Buffer Overflow
CVE-2005-4402—remotewindows19 dic 2005
Buffer overflow in MailEnable Professional 1.71 and earlier, and Enterprise 1.1 and earlier, allows remote authenticated
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Hot Banana Web Content Management Suite 5.3 - Cross-Site Scripting
CVE-2005-4364—webappscfm19 dic 2005
Cross-site scripting (XSS) vulnerability in index.cfm in Hot Banana Web Content Management Suite 5.3 allows remote attac
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Bitweaver 1.1.1 - 'view_post.php?post_id' Cross-Site Scripting
CVE-2005-4380—webappsphp19 dic 2005
Multiple SQL injection vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FLIP 0.9.0.1029 - 'text.php?name' Cross-Site Scripting
CVE-2005-4365—webappsphp19 dic 2005
Multiple cross-site scripting (XSS) vulnerabilities in FLIP 0.9.0.1029 allow remote attackers to inject arbitrary web sc
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Caravel CMS 3.0 Beta 1 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-4381—webappsphp19 dic 2005
Multiple cross-site scripting (XSS) vulnerabilities in Caravel CMS 3.0 Beta 1 and earlier allow remote attackers to inje
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PlaySms 0.8 - 'index.php' Cross-Site Scripting
CVE-2005-4432—webappsphp19 dic 2005
Cross-site scripting (XSS) vulnerability in index.php in PlaySMS 0.8 allows remote attackers to inject arbitrary web scr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FLIP 0.9.0.1029 - 'forum.php?frame' Cross-Site Scripting
CVE-2005-4365—webappsphp19 dic 2005
Multiple cross-site scripting (XSS) vulnerabilities in FLIP 0.9.0.1029 allow remote attackers to inject arbitrary web sc
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Acidcat CMS 2.1.13 - 'acidcat.mdb' Remote Information Disclosure
CVE-2005-4371—webappsasp19 dic 2005
Acidcat 2.1.13 and earlier stores the database under the web root with insufficient access control, which allows remote
23RIESGO
abrir ↗
← anteriorpágina 632 / 816siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.