Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados

41.197CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentes populares risco

89.220 exploits

Exploit-DB✓ VexDay Proof

Commercial Interactive Media SCOOP! 2.3 - 'articleZone.asp?Invalid' Cross-Site Scripting

CVE-2005-4490—webappsasp21 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in SCOOP! 2.3 and earlier allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Scoop 1.1 RC1 Search Module - Multiple Cross-Site Scriptings

CVE-2005-4489—webappsphp21 dez 2005

Cross-site scripting (XSS) vulnerability in Scoop 1.1 RC1 and earlier allows remote attackers to inject arbitrary web sc

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

OpenEdit 4.0 - Results.HTML Cross-Site Scripting

CVE-2005-4476—webappsjsp21 dez 2005

Cross-site scripting (XSS) vulnerability in store/search/results.html in OpenEdit 4.0 and earlier allows remote attacker

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ComputerOil Redakto CMS 3.2 - Multiple Cross-Site Scripting Vulnerabilities

CVE-2005-4488—webappscgi21 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in index.tpl in Redakto WCMS 3.2 and earlier allow remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Commercial Interactive Media SCOOP! 2.3 - 'articleSearch.asp' Cross-Site Scripting

CVE-2005-4490—webappsasp21 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in SCOOP! 2.3 and earlier allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Commercial Interactive Media SCOOP! 2.3 - 'account_login.asp' Multiple Cross-Site Scripting Vulnerabilities

CVE-2005-4490—webappsasp21 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in SCOOP! 2.3 and earlier allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Commercial Interactive Media SCOOP! 2.3 - 'category.asp' Multiple Cross-Site Scripting Vulnerabilities

CVE-2005-4490—webappsasp21 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in SCOOP! 2.3 and earlier allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Quick Square Development Honeycomb Archive 3.0 - 'CategoryResults.cfm' Multiple SQL Injections

CVE-2005-4419—webappscfm20 dez 2005

Multiple SQL injection vulnerabilities in CategoryResults.cfm in Honeycomb Archive and Honeycomb Archive Enterprise 3.0

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPGedView 3.3.7 - Remote Code Execution

CVE-2005-4468—webappsphp20 dez 2005

PHP remote file include vulnerability in help_text_vars.php in PHPGedView 3.3.7 and earlier allows remote attackers to e

23RISCO

abrir ↗

Metasploit500

Qualcomm WorldMail 3.0 IMAPD LIST Buffer Overflow

CVE-2005-4267—20 dez 2005

Stack-based buffer overflow in Qualcomm WorldMail 3.0 allows remote attackers to execute arbitrary code via a long IMAP

50RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Eudora Qualcomm WorldMail 3.0 - 'IMAPd' Remote Overflow

CVE-2006-0637—remotewindows20 dez 2005

Buffer overflow in cram.dll in QUALCOMM Eudora WorldMail 3.0 allows remote attackers to execute arbitrary code via an IM

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

LiveJournal - Cleanhtml.pl HTML Injection

CVE-2005-4454—webappscgi20 dez 2005

Validate-before-filter vulnerability in cleanhtml.pl 1.129 in LiveJournal CVS before Dec 7 2005, when the cleancss optio

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Golden FTP Server 1.92 - 'APPE' Remote Overflow (Metasploit)

CVE-2005-4553—remotewindows20 dez 2005

Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long APPE command. NO

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPGedView 3.3.7 - Remote Code Execution

CVE-2005-4467—webappsphp20 dez 2005

Directory traversal vulnerability in help_text_vars.php in PHPGedView 3.3.7 and earlier allows remote attackers to read

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Extensis Portfolio Netpublish Server 7.0 - Server.NP Directory Traversal

CVE-2005-4510—webappscgi20 dez 2005

Directory traversal vulnerability in server.np in NetPublish Server 7 allows remote attackers to read arbitrary files vi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Plogger Beta 2 - Remote File Inclusion

CVE-2005-4573—webappsphp20 dez 2005

PHP remote file include vulnerability in plog-admin-functions.php in Plogger Beta 2 allows remote attackers to execute a

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

AbleDesign D-Man 3.0 - 'Title' Cross-Site Scripting

CVE-2005-4435—webappsphp20 dez 2005

Cross-site scripting (XSS) vulnerability in index.php AbleDesign D-Man 3.x allows remote attackers to inject arbitrary w

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Enterprise Connector 1.0.2 - 'main.php' SQL Injection

CVE-2005-4563—webappsphp20 dez 2005

SQL injection vulnerability in main.php in Enterprise Heart Enterprise Connector 1.0.2 allows remote attackers to execut

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Eudora Qualcomm WorldMail 3.0 - 'IMAPd' Remote Overflow

CVE-2005-4267—remotewindows20 dez 2005

Stack-based buffer overflow in Qualcomm WorldMail 3.0 allows remote attackers to execute arbitrary code via a long IMAP

50RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Marwel 2.7 - 'index.php' SQL Injection

CVE-2005-4403—webappsphp19 dez 2005

SQL injection vulnerability in index.php in Marwel 2.7 and earlier allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Libertas Enterprise CMS 3.0 - 'index.php' Cross-Site Scripting

CVE-2005-4399—webappsphp19 dez 2005

Cross-site scripting (XSS) vulnerability in search/index.php in Libertas Enterprise CMS 3.0 and earlier allows remote at

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Miraserver 1.0 RC4 - 'newsitem.php?id' SQL Injection

CVE-2005-4408—webappsphp19 dez 2005

Multiple SQL injection vulnerabilities in Miraserver 1.0 RC4 and earlier allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft IIS - HTTP Request Denial of Service (1)

CVE-2005-4360—doswindows19 dez 2005

The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attacke

45RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Hot Banana Web Content Management Suite 5.3 - Cross-Site Scripting

CVE-2005-4364—webappscfm19 dez 2005

Cross-site scripting (XSS) vulnerability in index.cfm in Hot Banana Web Content Management Suite 5.3 allows remote attac

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Caravel CMS 3.0 Beta 1 - Multiple Cross-Site Scripting Vulnerabilities

CVE-2005-4381—webappsphp19 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in Caravel CMS 3.0 Beta 1 and earlier allow remote attackers to inje

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Miraserver 1.0 RC4 - 'index.php?page' SQL Injection

CVE-2005-4408—webappsphp19 dez 2005

Multiple SQL injection vulnerabilities in Miraserver 1.0 RC4 and earlier allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

allinta CMS 2.3.2 - 'search.asp?searchQuery' Cross-Site Scripting

CVE-2005-4374—webappsasp19 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in Allinta 2.3.2 and earlier allow remote attackers to inject arbitr

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

FLIP 0.9.0.1029 - 'forum.php?frame' Cross-Site Scripting

CVE-2005-4365—webappsphp19 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in FLIP 0.9.0.1029 allow remote attackers to inject arbitrary web sc

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

FLIP 0.9.0.1029 - 'text.php?name' Cross-Site Scripting

CVE-2005-4365—webappsphp19 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in FLIP 0.9.0.1029 allow remote attackers to inject arbitrary web sc

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Komodo CMS 2.1 - Multiple Input Validation Vulnerabilities

CVE-2005-4363—webappsphp19 dez 2005

Cross-site scripting (XSS) vulnerability in the search engine in Komodo CMS 2.1 allows remote attackers to inject arbitr

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.