Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.331exploits catalogados
40.631CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.377Exploit-DB 24.489GitHub PoC 18.131VulnCheck XDB 10.218Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
24.489 exploits
Exploit-DB✓ VexDay Proof
ASP-DEV XM Forum RC3 - IMG Tag Script Injection
CVE-2005-1008—webappsasp31 mar 2005
Cross-site scripting (XSS) vulnerability in posts.asp for ASP-DEv XM Forum RC3 allows remote attackers to inject arbitra
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
InterAKT Online MX Shop 1.1.1 - SQL Injection
CVE-2005-0955—webappsphp31 mar 2005
SQL injection vulnerability in InterAKT MX Shop 1.1.1 allows remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
YepYep MTFTPD 0.2/0.3 - Remote CWD Argument Format String
CVE-2005-0959—remotelinux30 mar 2005
Buffer overflow in the mt_do_dir function in YepYep mtftpd 0.0.3 may allow attackers to execute arbitrary code via a lon
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
The Includer 1.0/1.1 - Remote File Inclusion
CVE-2005-0931—webappsphp29 mar 2005
PHP remote file inclusion vulnerability in The Includer 1.0 and 1.1 allows remote attackers to execute arbitrary PHP cod
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Lighthouse Development Squirrelcart 1.5.5 - SQL Injection
CVE-2005-0962—webappsphp29 mar 2005
SQL injection vulnerability in index.php for Lighthouse Squirrelcart allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
mtftpd 0.0.3 - Remote Code Execution
CVE-2005-0958—remotelinux29 mar 2005
Format string vulnerability in the log_do function in log.c for YepYep mtftpd 0.0.3, when the statistics option is enabl
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FastStone 4in1 Browser 1.2 - Web Server Directory Traversal
CVE-2005-0950—remotewindows29 mar 2005
Directory traversal vulnerability in FastStone 4in1 Browser 1.2 allows remote attackers to read arbitrary files via a (1
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
UApplication Ublog 1.0.x - Cross-Site Scripting
CVE-2005-0925—webappsphp29 mar 2005
Cross-site scripting (XSS) vulnerability in login.asp for Ublog Reload 1.0 through 1.0.4 allows remote attackers to inje
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Iatek IntranetApp 2.3 - 'ad_click.asp?banner_id' SQL Injection
CVE-2005-0948—webappsasp29 mar 2005
SQL injection vulnerability in ad_click.asp for PortalApp allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PhotoPost Pro 5.1 - 'showmembers.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-0928—webappsphp28 mar 2005
Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP Pro 5.x allow remote attackers to inject arbitrary
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Multiple Vendor Telnet Client - Env_opt_add Heap Buffer Overflow
CVE-2005-0468—doslinux28 mar 2005
Heap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based Telnet clients allows remote at
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PhotoPost Pro 5.1 - 'showphoto.php?photo' SQL Injection
CVE-2005-0929—webappsphp28 mar 2005
SQL injection vulnerability in PhotoPost PHP Pro 5.x may allow remote attackers to execute arbitrary SQL commands via (1
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PhotoPost Pro 5.1 - 'showgallery.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-0928—webappsphp28 mar 2005
Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP Pro 5.x allow remote attackers to inject arbitrary
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Smail 3.2.0.120 - Remote Heap Overflow
CVE-2005-0892—remotelinux28 mar 2005
Buffer overflow in smail 3.2.0.120 allows remote attackers or local users to execute arbitrary code via a long string in
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 2.4.x/2.6.x - BlueTooth Signed Buffer Index (PoC)
CVE-2005-0750—doslinux28 mar 2005
The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Tincat Network Library - Remote Buffer Overflow
CVE-2005-0906—remotemultiple28 mar 2005
Buffer overflow in a player logging function in the Tincat network library 2.x before 2.0.28, as used in games such as S
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PhotoPost Pro 5.1 - 'Slideshow.php?photo' Cross-Site Scripting
CVE-2005-0928—webappsphp28 mar 2005
Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP Pro 5.x allow remote attackers to inject arbitrary
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ACS Blog 0.8/0.9/1.0/1.1 - 'Name' HTML Injection
CVE-2005-0945—webappsasp28 mar 2005
Cross-site scripting (XSS) vulnerability in ACS Blog 1.1.1 allows remote attackers to inject arbitrary web script or HTM
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PhotoPost Pro 5.1 - 'showmembers.php?sl' SQL Injection
CVE-2005-0929—webappsphp28 mar 2005
SQL injection vulnerability in PhotoPost PHP Pro 5.x may allow remote attackers to execute arbitrary SQL commands via (1
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpMyFamily 1.4.0 - SQL Injection
CVE-2005-2323—webappsphp27 mar 2005
Multiple SQL injection vulnerabilities in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allow
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ESMI PayPal StoreFront 1.7 - 'pages.php?idpages' SQL Injection
CVE-2005-0935—webappsphp26 mar 2005
Multiple SQL injection vulnerabilities in ESMI PayPal Storefront allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ESMI PayPal StoreFront 1.7 - Cross-Site Scripting
CVE-2005-0936—webappsphp26 mar 2005
Cross-site scripting vulnerability in products1h.php in ESMI PayPal Storefront allows remote attackers to inject arbitra
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple QuickTime 6.5.1 - PictureViewer Buffer Overflow
CVE-2005-0903—doswindows26 mar 2005
Buffer overflow in QuickTime PictureViewer 6.5.1 allows remote attackers to cause a denial of service (application crash
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ESMI PayPal StoreFront 1.7 - 'products1.php?id2' SQL Injection
CVE-2005-0935—webappsphp26 mar 2005
Multiple SQL injection vulnerabilities in ESMI PayPal Storefront allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Netcomm NB1300 Modem/Router - Remote Denial of Service
CVE-2005-0895—doshardware25 mar 2005
Netcomm 1300NB DSL Modem allows remote attackers to cause a denial of service (device hang) via a large number of ping p
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
AIX 5.3.0 - 'invscout' Local Command Execution
CVE-2004-1054—localaix25 mar 2005
Untrusted execution path vulnerability in invscout in IBM AIX 5.1.0, 5.2.0, and 5.3.0 allows local users to gain privile
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Smail 3 - Multiple Remote/Local Vulnerabilities
CVE-2005-0892—remotelinux25 mar 2005
Buffer overflow in smail 3.2.0.120 allows remote attackers or local users to execute arbitrary code via a long string in
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHPMyDirectory 10.1.3 - 'review.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-0896—webappsphp25 mar 2005
Multiple cross-site scripting (XSS) vulnerabilities in review.php in phpMyDirectory 10.1.3-rel allow remote attackers to
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Maxthon Web Browser 1.2 - Search Bar Information Disclosure
CVE-2005-0905—remotewindows25 mar 2005
Maxthon 1.2.0 allows remote malicious web sites to obtain potentially sensitive data from the search bar via the m2_sear
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Dream4 Koobi CMS 4.2.3 - 'index.php' SQL Injection
CVE-2005-0890—webappsphp24 mar 2005
SQL injection vulnerability in Dream4 Koobi CMS 4.2.3 allows remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗
← anteriorpágina 677 / 817siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.