Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
Binary Board System 0.2.5 - 'reply.pl' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-4333—webappscgi16 dez 2005
Multiple cross-site scripting (XSS) vulnerabilities in Binary Board System (BBS) 0.2.5 and earlier allow remote attacker
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ScareCrow 2.13 - 'forum.cgi?forum' Cross-Site Scripting
CVE-2005-4307—webappscgi16 dez 2005
Cross-site scripting (XSS) vulnerability in ScareCrow 2.13 and earlier allows remote attackers to inject arbitrary web s
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
EZDatabase 2.1.2 - 'index.php?db_id' SQL Injection
CVE-2005-4303—webappsphp16 dez 2005
SQL injection vulnerability in index.php for ezDatabase 2.1.2 and earlier allows remote attackers to execute arbitrary S
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP Arena PAFileDB Extreme Edition - SQL Injection
CVE-2005-4329—webappsphp16 dez 2005
SQL injection vulnerability in pafiledb.php in PHP Arena paFileDB Extreme Edition RC 5 and earlier allows remote attacke
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Binary Board System 0.2.5 - 'stats.pl' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-4333—webappscgi16 dez 2005
Multiple cross-site scripting (XSS) vulnerabilities in Binary Board System (BBS) 0.2.5 and earlier allow remote attacker
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WebCal 3.0 4 - 'webcal.cgi' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-4327—webappscgi16 dez 2005
Multiple cross-site scripting (XSS) vulnerabilities in Michael Arndt WebCal 1.11-3.04 allow remote attackers to inject a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ScareCrow 2.13 - 'post.cgi?forum' Cross-Site Scripting
CVE-2005-4307—webappscgi16 dez 2005
Cross-site scripting (XSS) vulnerability in ScareCrow 2.13 and earlier allows remote attackers to inject arbitrary web s
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Watchfire AppScan QA 5.0.x - Remote Code Execution
CVE-2005-4270—remotewindows15 dez 2005
Buffer overflow in Watchfire AppScan QA 5.0.609 and 5.0.134 allows remote web servers to execute arbitrary code via an H
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Sitenet BBS 2.0 - 'search.cgi?cid' Cross-Site Scripting
CVE-2005-4306—webappscgi15 dez 2005
Multiple cross-site scripting (XSS) vulnerabilities in SiteNet BBS 2.0 and earlier allow remote attackers to inject arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Sitenet BBS 2.0 - 'netboardr.cgi' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-4306—webappscgi15 dez 2005
Multiple cross-site scripting (XSS) vulnerabilities in SiteNet BBS 2.0 and earlier allow remote attackers to inject arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Dick Copits PDEstore 1.8 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-4285—webappscgi15 dez 2005
Cross-site scripting (XSS) vulnerability in pdestore.cgi in Dick Copits PDEstore 1.8 and earlier allows remote attackers
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ZixForum 1.12 - 'forum.asp' Multiple SQL Injections
CVE-2005-4334—webappsasp15 dez 2005
SQL injection vulnerability in ZixForum 1.12 allows remote attackers to execute arbitrary SQL commands via the H_ID para
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Kryptronic ClickCartPro 5.1/5.2 - 'CP-APP.cgi' Cross-Site Scripting
CVE-2005-4293—webappscgi15 dez 2005
Cross-site scripting (XSS) vulnerability in cp-app.cgi in ClickCartPro (CCP) 5.1 and earlier allows remote attackers to
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MarmaraWeb E-Commerce - Remote File Inclusion
CVE-2005-4287—webappsphp15 dez 2005
PHP remote file include vulnerability in MarmaraWeb E-commerce allows remote attackers to execute arbitrary code via the
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
TML 0.5 - 'index.php?form' Cross-Site Scripting
CVE-2005-4415—webappsphp15 dez 2005
Cross-site scripting (XSS) vulnerability in index.php in TML CMS 0.5 allows remote attackers to inject arbitrary web scr
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
AltantForum 4.0.2 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-4298—webappscgi15 dez 2005
Cross-site scripting (XSS) vulnerability in atl.cgi in AtlantForum 4.02 and earlier allows remote attackers to inject ar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Soft4e ECW-Cart 2.0.3 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-4290—webappscgi15 dez 2005
Cross-site scripting (XSS) vulnerability in index.cgi in ECW-Cart 2.03 and earlier allows remote attackers to inject arb
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MarmaraWeb E-Commerce - 'index.php?page' Cross-Site Scripting
CVE-2005-4288—webappsphp15 dez 2005
Cross-site scripting (XSS) vulnerability in index.php in MarmaraWeb E-commerce allows remote attackers to inject arbitra
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
TML 0.5 - 'index.php?id' SQL Injection
CVE-2005-4416—webappsphp15 dez 2005
SQL injection vulnerability in index.php in TML CMS 0.5 allows remote attackers to execute arbitrary SQL commands via th
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Atlant Pro 8.0.9 - Cross-Site Scripting
CVE-2005-4299—webappscgi15 dez 2005
Cross-site scripting (XSS) vulnerability in atl.cgi in Atlant Pro 4.02 and earlier allows remote attackers to inject arb
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PPCal Shopping Cart 3.3 - Cross-Site Scripting
CVE-2005-4314—webappscgi15 dez 2005
Cross-site scripting (XSS) vulnerability in ppcal.cgi in PPCal Shopping Cart 3.3.0 and earlier allows remote attackers t
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
DCForum 1-6 DCBoard Script - 'Page' Cross-Site Scripting
CVE-2005-4311—webappsphp15 dez 2005
Cross-site scripting (XSS) vulnerability in DCForum 6.25 and earlier, and possibly DCForum+ 1.x, allows remote attackers
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
eDatCat 3.0 - EDCstore.pl Cross-Site Scripting
CVE-2005-4289—webappscgi15 dez 2005
Cross-site scripting (XSS) vulnerability in EDCstore.pl in eDatCat 0.3 allows remote attackers to inject arbitrary web s
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ECTOOLS Onlineshop 1.0 - Cross-Site Scripting
CVE-2005-4291—webappscgi15 dez 2005
Cross-site scripting (XSS) vulnerability in cart.cgi in ECTOOLS Onlineshop 1.0 and earlier allows remote attackers to in
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Scientific Atlanta DPX2100 Cable Modem - LanD Packet Denial of Service
CVE-2005-4275—doshardware14 dez 2005
Scientific Atlanta DPX2100 Cable Modem allows remote attackers to cause a denial of service (device crash) via an IP pac
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
QuickPayPro 3.1 - 'design.php?delete' SQL Injection
CVE-2005-4243—webappsphp14 dez 2005
Multiple SQL injection vulnerabilities in QuickPayPro 3.1 allow remote attackers to execute arbitrary SQL commands via t
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
QuickPayPro 3.1 - 'popups.edit.php?popupid' SQL Injection
CVE-2005-4243—webappsphp14 dez 2005
Multiple SQL injection vulnerabilities in QuickPayPro 3.1 allow remote attackers to execute arbitrary SQL commands via t
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP Web Scripts Ad Manager Pro 2.0 - 'Advertiser_statistic.php' SQL Injection
CVE-2005-4233—webappsphp14 dez 2005
SQL injection vulnerability in advertiser_statistic.php in Ad Manager Pro 2.0 and earlier allows remote attackers to exe
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ASPBB 0.4 - 'topic.asp?TID' SQL Injection
CVE-2005-4259—webappsasp14 dez 2005
Multiple SQL injection vulnerabilities in ASPBB 0.4 allow remote attackers to execute arbitrary SQL commands via the (1)
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
News Module for Envolution - 'modules.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-4262—webappsphp14 dez 2005
Cross-site scripting (XSS) vulnerability in the News module in Envolution allows remote attackers to inject arbitrary we
23RISCO
abrir ↗
← anteriorpágina 1731 / 2.974próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.