Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados
40.553CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB✓ VexDay Proof
Caravel CMS 3.0 Beta 1 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-4381—webappsphp19 dic 2005
Multiple cross-site scripting (XSS) vulnerabilities in Caravel CMS 3.0 Beta 1 and earlier allow remote attackers to inje
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Info-ZIP UnZip 5.x - File Name Buffer Overflow
CVE-2005-4667—remotelinux19 dic 2005
Buffer overflow in UnZip 5.50 and earlier allows user-assisted attackers to execute arbitrary code via a long filename c
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Marwel 2.7 - 'index.php' SQL Injection
CVE-2005-4403—webappsphp19 dic 2005
SQL injection vulnerability in index.php in Marwel 2.7 and earlier allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Acidcat CMS 2.1.13 - 'acidcat.mdb' Remote Information Disclosure
CVE-2005-4371—webappsasp19 dic 2005
Acidcat 2.1.13 and earlier stores the database under the web root with insufficient access control, which allows remote
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Bitweaver 1.1.1 - 'view_post.php?post_id' Cross-Site Scripting
CVE-2005-4380—webappsphp19 dic 2005
Multiple SQL injection vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Baseline CMS 1.95 - Multiple Input Validation Vulnerabilities
CVE-2005-4378—webappsasp19 dic 2005
SQL injection vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft IIS - HTTP Request Denial of Service (2)
CVE-2005-4360—doswindows19 dic 2005
The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attacke
45RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Cofax 2.0 - search.htm Cross-Site Scripting
CVE-2005-4385—webappsphp19 dic 2005
Cross-site scripting (XSS) vulnerability in search.htm in Cofax 2.0 RC3 and earlier allows remote attackers to inject ar
38RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Liferay Portal Enterprise 3.6.1 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-4400—webappsphp19 dic 2005
Cross-site scripting (XSS) vulnerability in downloads/portal_ent in Liferay Portal Enterprise 3.6.1 and earlier allows r
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ScareCrow 2.13 - 'post.cgi?forum' Cross-Site Scripting
CVE-2005-4307—webappscgi16 dic 2005
Cross-site scripting (XSS) vulnerability in ScareCrow 2.13 and earlier allows remote attackers to inject arbitrary web s
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Binary Board System 0.2.5 - 'stats.pl' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-4333—webappscgi16 dic 2005
Multiple cross-site scripting (XSS) vulnerabilities in Binary Board System (BBS) 0.2.5 and earlier allow remote attacker
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WebGlimpse 2.x - Cross-Site Scripting
CVE-2005-4328—webappscgi16 dic 2005
Cross-site scripting (XSS) vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to i
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IHTML Merchant 2.0 - SQL Injection
CVE-2005-4331—webappsphp16 dic 2005
SQL injection vulnerability in merchant.ihtml in iHTML Merchant Version 2 Pro allows remote attackers to execute arbitra
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WebCal 3.0 4 - 'webcal.cgi' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-4327—webappscgi16 dic 2005
Multiple cross-site scripting (XSS) vulnerabilities in Michael Arndt WebCal 1.11-3.04 allow remote attackers to inject a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ScareCrow 2.13 - 'profile.cgi?user' Cross-Site Scripting
CVE-2005-4307—webappscgi16 dic 2005
Cross-site scripting (XSS) vulnerability in ScareCrow 2.13 and earlier allows remote attackers to inject arbitrary web s
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
EZDatabase 2.1.2 - 'index.php?p' Local File Inclusion
CVE-2005-4302—webappsphp16 dic 2005
Directory traversal vulnerability in index.php in ezDatabase 2.1.2 and earlier allows remote attackers to include arbitr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP Arena PAFileDB Extreme Edition - SQL Injection
CVE-2005-4329—webappsphp16 dic 2005
SQL injection vulnerability in pafiledb.php in PHP Arena paFileDB Extreme Edition RC 5 and earlier allows remote attacke
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
EZDatabase 2.1.2 - 'index.php?db_id' SQL Injection
CVE-2005-4303—webappsphp16 dic 2005
SQL injection vulnerability in index.php for ezDatabase 2.1.2 and earlier allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Binary Board System 0.2.5 - 'toc.pl?board' Cross-Site Scripting
CVE-2005-4333—webappscgi16 dic 2005
Multiple cross-site scripting (XSS) vulnerabilities in Binary Board System (BBS) 0.2.5 and earlier allow remote attacker
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ScareCrow 2.13 - 'forum.cgi?forum' Cross-Site Scripting
CVE-2005-4307—webappscgi16 dic 2005
Cross-site scripting (XSS) vulnerability in ScareCrow 2.13 and earlier allows remote attackers to inject arbitrary web s
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Binary Board System 0.2.5 - 'reply.pl' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-4333—webappscgi16 dic 2005
Multiple cross-site scripting (XSS) vulnerabilities in Binary Board System (BBS) 0.2.5 and earlier allow remote attacker
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IHTML Merchant Mall - SQL Injection
CVE-2005-4330—webappsphp16 dic 2005
SQL injection vulnerability in browse.ihtml in iHTML Merchant Mall allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Soft4e ECW-Cart 2.0.3 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-4290—webappscgi15 dic 2005
Cross-site scripting (XSS) vulnerability in index.cgi in ECW-Cart 2.03 and earlier allows remote attackers to inject arb
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Atlant Pro 8.0.9 - Cross-Site Scripting
CVE-2005-4299—webappscgi15 dic 2005
Cross-site scripting (XSS) vulnerability in atl.cgi in Atlant Pro 4.02 and earlier allows remote attackers to inject arb
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
AltantForum 4.0.2 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-4298—webappscgi15 dic 2005
Cross-site scripting (XSS) vulnerability in atl.cgi in AtlantForum 4.02 and earlier allows remote attackers to inject ar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Dick Copits PDEstore 1.8 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-4285—webappscgi15 dic 2005
Cross-site scripting (XSS) vulnerability in pdestore.cgi in Dick Copits PDEstore 1.8 and earlier allows remote attackers
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Kryptronic ClickCartPro 5.1/5.2 - 'CP-APP.cgi' Cross-Site Scripting
CVE-2005-4293—webappscgi15 dic 2005
Cross-site scripting (XSS) vulnerability in cp-app.cgi in ClickCartPro (CCP) 5.1 and earlier allows remote attackers to
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
DCForum 1-6 DCBoard Script - 'Page' Cross-Site Scripting
CVE-2005-4311—webappsphp15 dic 2005
Cross-site scripting (XSS) vulnerability in DCForum 6.25 and earlier, and possibly DCForum+ 1.x, allows remote attackers
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
eDatCat 3.0 - EDCstore.pl Cross-Site Scripting
CVE-2005-4289—webappscgi15 dic 2005
Cross-site scripting (XSS) vulnerability in EDCstore.pl in eDatCat 0.3 allows remote attackers to inject arbitrary web s
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Watchfire AppScan QA 5.0.x - Remote Code Execution
CVE-2005-4270—remotewindows15 dic 2005
Buffer overflow in Watchfire AppScan QA 5.0.609 and 5.0.134 allows remote web servers to execute arbitrary code via an H
23RIESGO
abrir ↗
← anteriorpágina 634 / 817siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.