Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
Phpclanwebsite 1.23.1 - BBCode IMG Tag Script Injection
CVE-2006-0366—webappsphp28 dez 2005
Cross-site scripting (XSS) vulnerability in Phpclanwebsite (aka PCW) allows remote attackers to inject arbitrary web scr
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IceWarp Universal WebMail - '/accounts/inc/include.php' Multiple Remote File Inclusions
CVE-2005-4556—webappsphp27 dez 2005
PHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail S
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Dev Web Management System 1.5 - 'add.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-4555—webappsphp27 dez 2005
Cross-site scripting (XSS) vulnerability in add.php in DEV web management system 1.5 and earlier allows remote attackers
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Cerberus Helpdesk 2.649 - 'display_ticket_thread.php?ticket' SQL Injection
CVE-2005-4427—webappsphp27 dez 2005
Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IceWarp Universal WebMail - '/mail/include.html' Crafted HTTP_USER_AGENT Arbitrary File Access
CVE-2005-4559—webappsphp27 dez 2005
mail/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
BZFlag 2.0.4 - undelimited string Denial of Service
CVE-2005-4584—dosmultiple27 dez 2005
BZFlag server 2.0.4 and earlier allows remote attackers to cause a denial of service (application crash) via a callsign
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Cerberus Helpdesk 2.649 - 'addresses_export.php?queues' SQL Injection
CVE-2005-4427—webappsphp27 dez 2005
Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Cerberus Helpdesk 2.649 - 'cer_KnowledgebaseHandler.class.php?_load_article_details' SQL Injection
CVE-2005-4427—webappsphp27 dez 2005
Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗
Metasploit500
Windows XP/2003/Vista Metafile Escape() SetAbortProc Code Execution
CVE-2005-4560—27 dez 2005
The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote attackers to execute arbit
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IceWarp Universal WebMail - '/mail/index.html?lang_settings' Remote File Inclusion
CVE-2005-4558—webappsphp27 dez 2005
IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not pro
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Dev Web Management System 1.5 - 'getfile.php?cat' SQL Injection
CVE-2005-4554—webappsphp27 dez 2005
Multiple SQL injection vulnerabilities in DEV web management system 1.5 and earlier allow remote attackers to execute ar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IceWarp Universal WebMail - '/mail/settings.html?Language' Local File Inclusion
CVE-2005-4558—webappsphp27 dez 2005
IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not pro
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
FatWire UpdateEngine 6.2 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-4576—webappsjava27 dez 2005
Multiple cross-site scripting (XSS) vulnerabilities in the UpdateEngine program in Fatwire UpdateEngine 6.2 and earlier
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Dev Web Management System 1.5 - 'download_now.php?target' SQL Injection
CVE-2005-4554—webappsphp27 dez 2005
Multiple SQL injection vulnerabilities in DEV web management system 1.5 and earlier allow remote attackers to execute ar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IceWarp Universal WebMail - '/dir/include.html?lang' Local File Inclusion
CVE-2005-4557—webappsphp27 dez 2005
dir/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 b
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IceWarp Universal WebMail - '/admin/inc/include.php' Multiple Remote File Inclusions
CVE-2005-4556—webappsphp27 dez 2005
PHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail S
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MyBB 1.0.2 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2006-0470—webappsphp26 dez 2005
Cross-site scripting (XSS) vulnerability in search.php in MyBulletinBoard (MyBB) 1.02 allows remote attackers to inject
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
EZ Invoice Inc. EZI 2.0 - 'Invoices.php' SQL Injection
CVE-2005-3845—webappsphp25 dez 2005
SQL injection vulnerability in invoices.php in EZ Invoice Inc 2.0 allows remote attackers to execute arbitrary SQL comma
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
CS-Cart - Multiple SQL Injections
CVE-2005-4429—webappsphp25 dez 2005
SQL injection vulnerability in CS-Cart 1.3.0 allows remote attackers to execute arbitrary SQL commands via the (1) sort_
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
LogicBill 1.0 - Multiple SQL Injections
CVE-2005-4430—webappsphp25 dez 2005
SQL injection vulnerability in LogicBill 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via t
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Dev Web Management System 1.5 - 'cat' SQL Injection
CVE-2005-4554—webappsphp24 dez 2005
Multiple SQL injection vulnerabilities in DEV web management system 1.5 and earlier allow remote attackers to execute ar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
oracle Application server discussion forum portlet - Multiple Vulnerabilities
CVE-2005-4550—webappsjsp23 dez 2005
The PORTAL schema in Oracle Application Server (OracleAS) Discussion Forum Portlet allows remote attackers to obtain the
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PaperThin CommonSpot Content Server 4.5 - Cross-Site Scripting
CVE-2005-4574—webappscfm23 dez 2005
Cross-site scripting (XSS) vulnerability in loader.cfm in PaperThin CommonSpot Content Server 4.5 and earlier allows rem
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP-Fusion 6.00.3 - 'rating' SQL Injection
CVE-2005-4517—webappsphp23 dez 2005
SQL injection vulnerability in PHP-Fusion 6.00.200 through 6.00.300 allows remote attackers to execute arbitrary SQL com
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Beehive Forum 0.6.2 - 'index.php' SQL Injection
CVE-2005-4461—webappsphp22 dez 2005
SQL injection vulnerability in index.php in Beehive Forum 0.6.2 and earlier allows remote attackers to execute arbitrary
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX - KHTMLParser Remote Denial of Service
CVE-2005-4504—dososx22 dez 2005
The khtml::RenderTableSection::ensureRows function in KHTMLParser in Apple Mac OS X 10.4.3 and earlier, as used by Safar
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Tangora Portal CMS 4.0 - 'Action' Cross-Site Scripting
CVE-2005-4497—webappsasp22 dez 2005
Cross-site scripting (XSS) vulnerability in Tangora Portal CMS 4.0 and earlier allows remote attackers to inject arbitra
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
httprint 202.0 - HTTP Response Server Field Arbitrary Script Injection
CVE-2005-4502—remotemultiple22 dez 2005
Cross-site scripting (XSS) vulnerability in httprint v202, and possibly other versions before v301, allows remote attack
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
McAfee VirusScan 8.0 - Path Specification Privilege Escalation
CVE-2005-4505—localwindows22 dez 2005
Unquoted Windows search path vulnerability in McAfee VirusScan Enterprise 8.0i (patch 11) and CMA 3.5 (patch 5) might al
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MusicBox 2.3 - 'type' SQL Injection
CVE-2005-4500—webappsphp22 dez 2005
SQL injection vulnerability in MusicBox 2.3 allows remote attackers to execute arbitrary SQL commands via the (1) show a
23RISCO
abrir ↗
← anteriorpágina 1727 / 2.974próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.