Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.900exploits catalogados
35.840CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8722Nuclei 4320Metasploit 3477✓ solo verificadosrecientespopularesriesgo
24.458 exploits
Exploit-DB✓ VexDay Proof
MarmaraWeb E-Commerce - 'index.php?page' Cross-Site Scripting
CVE-2005-4288—webappsphp15 dic 2005
Cross-site scripting (XSS) vulnerability in index.php in MarmaraWeb E-commerce allows remote attackers to inject arbitra
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ZixForum 1.12 - 'forum.asp' Multiple SQL Injections
CVE-2005-4334—webappsasp15 dic 2005
SQL injection vulnerability in ZixForum 1.12 allows remote attackers to execute arbitrary SQL commands via the H_ID para
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
MarmaraWeb E-Commerce - Remote File Inclusion
CVE-2005-4287—webappsphp15 dic 2005
PHP remote file include vulnerability in MarmaraWeb E-commerce allows remote attackers to execute arbitrary code via the
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
TML 0.5 - 'index.php?id' SQL Injection
CVE-2005-4416—webappsphp15 dic 2005
SQL injection vulnerability in index.php in TML CMS 0.5 allows remote attackers to execute arbitrary SQL commands via th
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Atlant Pro 8.0.9 - Cross-Site Scripting
CVE-2005-4299—webappscgi15 dic 2005
Cross-site scripting (XSS) vulnerability in atl.cgi in Atlant Pro 4.02 and earlier allows remote attackers to inject arb
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Soft4e ECW-Cart 2.0.3 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-4290—webappscgi15 dic 2005
Cross-site scripting (XSS) vulnerability in index.cgi in ECW-Cart 2.03 and earlier allows remote attackers to inject arb
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Sitenet BBS 2.0 - 'netboardr.cgi' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-4306—webappscgi15 dic 2005
Multiple cross-site scripting (XSS) vulnerabilities in SiteNet BBS 2.0 and earlier allow remote attackers to inject arbi
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
eDatCat 3.0 - EDCstore.pl Cross-Site Scripting
CVE-2005-4289—webappscgi15 dic 2005
Cross-site scripting (XSS) vulnerability in EDCstore.pl in eDatCat 0.3 allows remote attackers to inject arbitrary web s
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Sitenet BBS 2.0 - 'search.cgi?cid' Cross-Site Scripting
CVE-2005-4306—webappscgi15 dic 2005
Multiple cross-site scripting (XSS) vulnerabilities in SiteNet BBS 2.0 and earlier allow remote attackers to inject arbi
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
QuickPayPro 3.1 - 'design.php?delete' SQL Injection
CVE-2005-4243—webappsphp14 dic 2005
Multiple SQL injection vulnerabilities in QuickPayPro 3.1 allow remote attackers to execute arbitrary SQL commands via t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Macromedia Flash Media Server 2 - Remote Denial of Service
CVE-2005-4216—doswindows14 dic 2005
The Administration Service (FMSAdmin.exe) in Macromedia Flash Media Server 2.0 r1145 allows remote attackers to cause a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
QuickPayPro 3.1 - 'sales.view.php?customerid' SQL Injection
CVE-2005-4243—webappsphp14 dic 2005
Multiple SQL injection vulnerabilities in QuickPayPro 3.1 allow remote attackers to execute arbitrary SQL commands via t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
QuickPayPro 3.1 - 'subscribers.tracking.edit.php?subtrackingid' SQL Injection
CVE-2005-4243—webappsphp14 dic 2005
Multiple SQL injection vulnerabilities in QuickPayPro 3.1 allow remote attackers to execute arbitrary SQL commands via t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP-Nuke 7.x - Content Filtering Bypass
CVE-2005-4260—webappsphp14 dic 2005
Interpretation conflict in includes/mainfile.php in PHP-Nuke 7.9 and later allows remote attackers to perform cross-site
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Netref 3.0 - 'index.php' SQL Injection
CVE-2005-4198—webappsphp14 dic 2005
SQL injection vulnerability in index.php in Netref 3.0 allows remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Limbo CMS 1.0.4.2 - 'index.php?_SERVER[REMOTE_ADDR]' Cross-Site Scripting
CVE-2005-4317—webappsphp14 dic 2005
Limbo CMS 1.0.4.2 and earlier, with register_globals off, does not protect the $_SERVER variable from external modificat
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
QuickPayPro 3.1 - 'popups.edit.php?popupid' SQL Injection
CVE-2005-4243—webappsphp14 dic 2005
Multiple SQL injection vulnerabilities in QuickPayPro 3.1 allow remote attackers to execute arbitrary SQL commands via t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Limbo 1.0.4.2 - '_SERVER[REMOTE_ADDR]' Remote Command Execution
CVE-2005-4318—webappsphp14 dic 2005
SQL injection vulnerability in index.php in Limbo CMS 1.0.4.2 and earlier, with register_globals off, allows remote atta
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ASPBB 0.4 - 'profile.asp?PROFILE_ID' SQL Injection
CVE-2005-4259—webappsasp14 dic 2005
Multiple SQL injection vulnerabilities in ASPBB 0.4 allow remote attackers to execute arbitrary SQL commands via the (1)
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Westell Versalink 327W - LanD Packet Denial of Service
CVE-2005-4276—doshardware14 dic 2005
Westell Versalink 327W allows remote attackers to cause a denial of service (device crash) via an IP packet with the sam
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
QuickPayPro 3.1 - 'tracking.details.php?trackingid' SQL Injection
CVE-2005-4243—webappsphp14 dic 2005
Multiple SQL injection vulnerabilities in QuickPayPro 3.1 allow remote attackers to execute arbitrary SQL commands via t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
News Module for Envolution - 'modules.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-4262—webappsphp14 dic 2005
Cross-site scripting (XSS) vulnerability in the News module in Envolution allows remote attackers to inject arbitrary we
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ASPBB 0.4 - 'forum.asp?FORUM_ID' SQL Injection
CVE-2005-4259—webappsasp14 dic 2005
Multiple SQL injection vulnerabilities in ASPBB 0.4 allow remote attackers to execute arbitrary SQL commands via the (1)
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ASPBB 0.4 - 'topic.asp?TID' SQL Injection
CVE-2005-4259—webappsasp14 dic 2005
Multiple SQL injection vulnerabilities in ASPBB 0.4 allow remote attackers to execute arbitrary SQL commands via the (1)
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP Web Scripts Ad Manager Pro 2.0 - 'Advertiser_statistic.php' SQL Injection
CVE-2005-4233—webappsphp14 dic 2005
SQL injection vulnerability in advertiser_statistic.php in Ad Manager Pro 2.0 and earlier allows remote attackers to exe
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Limbo CMS 1.0.4.2 - 'option' Traversal Arbitrary File Access
CVE-2005-4319—webappsphp14 dic 2005
Directory traversal vulnerability in index2.php in Limbo CMS 1.0.4.2 and earlier allows remote attackers to include arbi
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
AppServ Open Project 2.5.3 - Remote Denial of Service
CVE-2005-4296—doswindows14 dic 2005
AppServ Open Project 2.5.3 allows remote attackers to cause a denial of service via a large HTTP request.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Scientific Atlanta DPX2100 Cable Modem - LanD Packet Denial of Service
CVE-2005-4275—doshardware14 dic 2005
Scientific Atlanta DPX2100 Cable Modem allows remote attackers to cause a denial of service (device crash) via an IP pac
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
DreamLevels Dream Poll 3.0 - 'View_Results.php' SQL Injection
CVE-2005-4254—webappsphp14 dic 2005
SQL injection vulnerability in view_Results.php in DreamLevels DreamPoll 3.0 final allows remote attackers to execute ar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WikkaWiki 1.1.6 - 'TextSearch.php' Cross-Site Scripting
CVE-2005-4255—webappsphp14 dic 2005
Cross-site scripting (XSS) vulnerability in TextSearch in WikkaWiki 1.1.6.0 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗
← anteriorpágina 634 / 816siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.