Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.331exploits catalogados
40.631CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.377Exploit-DB 24.489GitHub PoC 18.131VulnCheck XDB 10.218Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
24.489 exploits
Exploit-DB✓ VexDay Proof
AOL Instant Messenger 4.x/5.x - Smiley Icon Location Remote Denial of Service
CVE-2005-1655—doswindows09 may 2005
AOL Instant Messenger 5.5.x and earlier allows remote attackers to cause a denial of service (client crash) via an inval
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Orenosv HTTP/FTP Server 0.8.1 - 'CGISSI.exe' Remote Buffer Overflow (PoC)
CVE-2005-1666—doswindows09 may 2005
Multiple buffer overflows in Orenosv HTTP/FTP Server 0.8.1 allow remote authenticated users to cause a denial of service
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Remote File Manager 1.0 - Denial of Service
CVE-2005-1603—doswindows08 may 2005
NiteEnterprises Remote File Manager 1.0 allows remote attackers to cause a denial of service (crash) via a crafted strin
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Hosting Controller 0.6.1 - User Registration (2)
CVE-2005-1654—remotewindows07 may 2005
Hosting Controller 6.1 Hotfix 1.9 and earlier allows remote attackers to register arbitrary users via a direct request t
23RIESGO
abrir ↗
Exploit-DB
Sun Solaris AnswerBook2 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-0549—webappssolaris07 may 2005
Cross-site scripting (XSS) vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers
23RIESGO
abrir ↗
Exploit-DB
Sun Solaris AnswerBook2 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-0548—webappssolaris07 may 2005
Cross-site scripting (XSS) vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Ethereal 0.10.10 - 'dissect_ipc_state' Remote Denial of Service
CVE-2005-1470—dosmultiple07 may 2005
Multiple unknown vulnerabilities in the (1) TZSP, (2) MGCP, (3) ISUP, (4) SMB, or (5) Bittorrent dissectors in Ethereal
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Mozilla Firefox 1.0.3 - Install Method Arbitrary Code Execution
CVE-2005-1476—remotewindows07 may 2005
Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using an IFRAME and causing th
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Mozilla Firefox 1.0.3 - Install Method Arbitrary Code Execution
CVE-2005-1477—remotewindows07 may 2005
The install function in Firefox 1.0.3 allows remote web sites on the browser's whitelist, such as update.mozilla.org or
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
CJ Ultra Plus 1.0.3/1.0.4 - 'OUT.php' SQL Injection
CVE-2005-1506—webappsphp06 may 2005
SQL injection vulnerability in out.php in CJ Ultra (CJUltra) Plus 1.0.3 and 1.0.4 allows remote attackers to execute arb
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP Advanced Transfer Manager 1.21 - Arbitrary File Upload
CVE-2005-1604—remotephp06 may 2005
PHP Advanced Transfer Manager (phpATM) 1.21 allows remote attackers to upload arbitrary files via filenames containing m
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apache 1.3.x - HTDigest Realm Command Line Argument Buffer Overflow (1)
CVE-2005-1344—remoteunix06 may 2005
Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument. N
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
4D WebSTAR 5.3/5.4 Tomcat Plugin - Remote Buffer Overflow
CVE-2005-1507—remoteosx06 may 2005
Buffer overflow in the Tomcat plugin in 4d WebSTAR 5.33 and 5.4 allows remote attackers to cause a denial of service and
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
MidiCart PHP - 'Search_List.php?SearchString' SQL Injection
CVE-2005-1503—webappsphp05 may 2005
Multiple SQL injection vulnerabilities in MidiCart PHP Shopping Cart allow remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
MyBloggie 2.1 - 'index.php' Cross-Site Scripting
CVE-2005-1498—webappsphp05 may 2005
Multiple cross-site scripting (XSS) vulnerabilities in myBloggie 2.1.1 allow remote attackers to inject arbitrary web sc
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
MegaBook 2.0/2.1 - 'Admin.cgi?EntryID' Cross-Site Scripting
CVE-2005-1494—webappscgi05 may 2005
Multiple cross-site scripting (XSS) vulnerabilities in admin.cgi in MegaBook 2.0 and 2.1 allow remote attackers to injec
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
software602 602 lan suite 2004 - Directory Traversal
CVE-2005-1423—remotewindows05 may 2005
Directory traversal vulnerability in the mail program in 602LAN SUITE 2004.0.05.0413 allows remote attackers to cause a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FishCart 3.1 - 'display.php?psku' SQL Injection
CVE-2005-1487—webappsphp04 may 2005
Multiple SQL injection vulnerabilities in FishCart 3.1 allow remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FishCart 3.1 - 'upstnt.php?cartid' SQL Injection
CVE-2005-1487—webappsphp04 may 2005
Multiple SQL injection vulnerabilities in FishCart 3.1 allow remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
I-Mall Commerce - 'i-mall.cgi' Remote Command Execution
CVE-2004-2275—webappscgi04 may 2005
i-mall.cgi in I-Mall Commerce allows remote attackers to execute arbitrary commands via shell metacharacters via the p p
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.x - BlueTooth Directory Traversal
CVE-2005-1333—remoteosx04 may 2005
Directory traversal vulnerability in the Bluetooth file and object exchange (OBEX) services in Mac OS X 10.3.9 allows re
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Hosting Controller 0.6.1 - User Registration (1)
CVE-2005-1654—remotewindows04 may 2005
Hosting Controller 6.1 Hotfix 1.9 and earlier allows remote attackers to register arbitrary users via a direct request t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FishCart 3.1 - 'display.php?nlst' Cross-Site Scripting
CVE-2005-1486—webappsphp04 may 2005
Multiple cross-site scripting vulnerabilities in FishCart 3.1 allow remote attackers to inject arbitrary web script or H
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FishCart 3.1 - 'upstracking.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-1486—webappsphp04 may 2005
Multiple cross-site scripting vulnerabilities in FishCart 3.1 allow remote attackers to inject arbitrary web script or H
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Gossamer Threads Links 2.x - 'User.cgi' Cross-Site Scripting
CVE-2005-1492—webappscgi04 may 2005
Cross-site scripting (XSS) vulnerability in user.cgi in Gossamer Threads Links SQL 2.x and 3.0 allows remote attackers t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
simplecam 1.2 - Directory Traversal
CVE-2005-1493—remotewindows04 may 2005
Directory traversal vulnerability in SimpleCam 1.2 allows remote attackers to read arbitrary files via a ..\ (dot dot ba
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WebCrossing WebX 5.0 - Cross-Site Scripting
CVE-2005-1611—webappscgi03 may 2005
Cross-site scripting (XSS) vulnerability in WebX in Web Crossing 5.x allows remote attackers to inject arbitrary web scr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Mtp-Target 1.2.2 Client - Remote Format String
CVE-2005-1401—remotemultiple02 may 2005
Format string vulnerability in the client for Mtp-Target 1.2.2 and earlier allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Maxwebportal 1.3 - 'pic_popular.asp' SQL Injection
CVE-2005-1417—webappsasp02 may 2005
Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote attackers to execute a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Maxwebportal 1.3 - 'links_popular.asp' SQL Injection
CVE-2005-1417—webappsasp02 may 2005
Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote attackers to execute a
23RIESGO
abrir ↗
← anteriorpágina 669 / 817siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.