Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.137exploits catalogados
35.961CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8773Nuclei 4340Metasploit 3485✓ solo verificadosrecientespopularesriesgo
24.458 exploits
Exploit-DB✓ VexDay Proof
Active Auction House - 'WatchThisItem.asp' Cross-Site Scripting
CVE-2005-1030—webappsasp06 abr 2005
Multiple cross-site scripting (XSS) vulnerabilities in Active Auction House allow remote attackers to inject arbitrary w
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
CubeCart 2.0.x - 'view_cart.php?add' Full Path Disclosure
CVE-2005-1033—webappsphp06 abr 2005
CubeCart 2.0.6 allows remote attackers to obtain sensitive information via an invalid (1) language parameter to index.ph
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Active Auction House - 'ItemInfo.asp' SQL Injection
CVE-2005-1029—webappsasp06 abr 2005
Multiple SQL injection vulnerabilities in Active Auction House allow remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP-Nuke 7.6 Web_Links Module - Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-1000—webappsphp06 abr 2005
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 7.6 allow remote attackers to inject arbitrary web scrip
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Active Auction House - 'sendpassword.asp' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-1030—webappsasp06 abr 2005
Multiple cross-site scripting (XSS) vulnerabilities in Active Auction House allow remote attackers to inject arbitrary w
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP-Nuke 6.x/7.x 'Downloads' Module - 'Lid' Cross-Site Scripting
CVE-2005-1027—webappsphp05 abr 2005
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x through 7.6 allow remote attackers to inject arbitra
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP-Nuke 6.x/7.x Your_Account Module - 'Username' Cross-Site Scripting
CVE-2005-1000—webappsphp05 abr 2005
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 7.6 allow remote attackers to inject arbitrary web scrip
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ProfitCode Software PayProCart 3.0 - 'Usrdetails.php' Cross-Site Scripting
CVE-2005-1004—webappsphp05 abr 2005
Cross-site scripting (XSS) vulnerability in usrdetails.php in ProfitCode PayProCart 3.0 allows remote attackers to injec
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Aeon 0.2a - Local Linux (1)
CVE-2005-1019—locallinux05 abr 2005
Buffer overflow in the getConfig function in Aeon 0.2a and earlier allows local users to gain privileges via a long HOME
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Aeon 0.2a - Local Linux (2)
CVE-2005-1019—locallinux05 abr 2005
Buffer overflow in the getConfig function in Aeon 0.2a and earlier allows local users to gain privileges via a long HOME
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
MailEnable Enterprise 1.x - SMTP Remote Denial of Service
CVE-2005-1013—doswindows05 abr 2005
The SMTP service in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP-Nuke 6.x/7.x Your_Account Module - Avatarcategory Cross-Site Scripting
CVE-2005-1000—webappsphp05 abr 2005
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 7.6 allow remote attackers to inject arbitrary web scrip
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
profitcode software payprocart 3.0 - Directory Traversal
CVE-2005-1005—webappsphp05 abr 2005
ProfitCode PayProCart 3.0 allows remote attackers to bypass authentication and gain administrative privileges to the adm
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Logics Software LOG-FT - Arbitrary File Disclosure
CVE-2005-1002—remotewindows05 abr 2005
logwebftbs2000.exe in Logics Software File Transfer (LOG-FT) allows remote attackers to read arbitrary files via modifie
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
GetDataBack Data Recovery 2.31 - Licence Recover
CVE-2005-1098—localwindows04 abr 2005
GetDataBack for NTFS 2.31 stores the username and license key in plaintext in the Name value in the License registry key
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Mozilla Suite/Firefox - JavaScript Lambda Replace Heap Memory Disclosure
CVE-2005-0989—doslinux04 abr 2005
The find_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netsc
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
SCO OpenServer 5.0.6/5.0.7 - NWPrint Command Line Argument Local Buffer Overflow
CVE-2005-0993—localunix04 abr 2005
Buffer overflow in nwprint in SCO OpenServer 5.0.7 allows local users to execute arbitrary code via a long command line
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Linux Kernel PPC64/IA64 (AIO) - Local Denial of Service
CVE-2005-0916—doslinux04 abr 2005
AIO in the Linux kernel 2.6.11 on the PPC64 or IA64 architectures with CONFIG_HUGETLB_PAGE enabled allows local users to
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
SonicWALL SOHO 5.1.7 - Web Interface Multiple Remote Input Validation Vulnerabilities
CVE-2005-1006—webappscgi04 abr 2005
Multiple cross-site scripting (XSS) vulnerabilities in SonicWALL SOHO 5.1.7.0 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Doomsday 1.8/1.9 - Multiple Remote Format String Vulnerabilities
CVE-2006-1618—dosmultiple03 abr 2005
Format string vulnerability in the (1) Con_message and (2) conPrintf functions in con_main.c in Doomsday engine 1.8.6 al
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpMyAdmin 2.x - Convcharset Cross-Site Scripting
CVE-2005-0992—webappsphp03 abr 2005
Cross-site scripting (XSS) vulnerability in index.php in phpMyAdmin before 2.6.2-rc1 allows remote attackers to inject a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
SiteEnable - SQL Injection
CVE-2005-1011—webappsasp02 abr 2005
SQL injection vulnerability in content.asp in SiteEnable allows remote attackers to execute arbitrary SQL commands via t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Star Wars Jedi Knight: Jedi Academy 1.0.11 - Buffer Overflow (PoC)
CVE-2005-0984—doswindows02 abr 2005
Buffer overflow in the G_Printf function in Star Wars Jedi Knight: Jedi Academy 1.011 and earlier allows remote attacker
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
RUMBA 7.3/7.4 - Profile Handling Multiple Buffer Overflow Vulnerabilities
CVE-2005-0979—doswindows01 abr 2005
Multiple buffer overflows in RUMBA 7.3 and earlier allow remote attackers to cause a denial of service and possibly exec
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Alstrasoft EPay Pro 2.0 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-0981—webappsphp01 abr 2005
Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft EPay Pro 2.0 allow remote attackers to inject arbitrar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
BlueSoleil 1.4 - Object Push Service BlueTooth Arbitrary File Upload / Directory Traversal
CVE-2005-0978—remotewindows01 abr 2005
Directory traversal vulnerability in the Object Push service in IVT BlueSoleil 1.4 allows remote attackers to upload arb
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Alstrasoft EPay Pro 2.0 - Remote File Inclusion
CVE-2005-0980—webappsphp01 abr 2005
PHP remote file inclusion vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to execute arbit
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
BakBone NetVault 6.x/7.x - Remote Heap Buffer Overflow (2)
CVE-2005-1009—remotewindows01 abr 2005
Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow (1) remote attackers to execute arbitrary code via a mod
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
BakBone NetVault 6.x/7.x - Local Stack Buffer Overflow
CVE-2005-1009—localwindows01 abr 2005
Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow (1) remote attackers to execute arbitrary code via a mod
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ASP-DEV XM Forum RC3 - IMG Tag Script Injection
CVE-2005-1008—webappsasp31 mar 2005
Cross-site scripting (XSS) vulnerability in posts.asp for ASP-DEv XM Forum RC3 allows remote attackers to inject arbitra
23RIESGO
abrir ↗
← anteriorpágina 675 / 816siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.