Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados

41.197CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentes populares risco

89.220 exploits

Exploit-DB✓ VexDay Proof

ASPBB 0.4 - 'topic.asp?TID' SQL Injection

CVE-2005-4259—webappsasp14 dez 2005

Multiple SQL injection vulnerabilities in ASPBB 0.4 allow remote attackers to execute arbitrary SQL commands via the (1)

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

QuickPayPro 3.1 - 'design.php?delete' SQL Injection

CVE-2005-4243—webappsphp14 dez 2005

Multiple SQL injection vulnerabilities in QuickPayPro 3.1 allow remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

QuickPayPro 3.1 - 'customer.tickets.view.php' Multiple SQL Injections

CVE-2005-4243—webappsphp14 dez 2005

Multiple SQL injection vulnerabilities in QuickPayPro 3.1 allow remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

QuickPayPro 3.1 - 'popups.edit.php?popupid' SQL Injection

CVE-2005-4243—webappsphp14 dez 2005

Multiple SQL injection vulnerabilities in QuickPayPro 3.1 allow remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP Web Scripts Ad Manager Pro 2.0 - 'Advertiser_statistic.php' SQL Injection

CVE-2005-4233—webappsphp14 dez 2005

SQL injection vulnerability in advertiser_statistic.php in Ad Manager Pro 2.0 and earlier allows remote attackers to exe

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Limbo CMS 1.0.4.2 - 'option' Traversal Arbitrary File Access

CVE-2005-4319—webappsphp14 dez 2005

Directory traversal vulnerability in index2.php in Limbo CMS 1.0.4.2 and earlier allows remote attackers to include arbi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Westell Versalink 327W - LanD Packet Denial of Service

CVE-2005-4276—doshardware14 dez 2005

Westell Versalink 327W allows remote attackers to cause a denial of service (device crash) via an IP packet with the sam

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

QuickPayPro 3.1 - 'subscribers.tracking.edit.php?subtrackingid' SQL Injection

CVE-2005-4243—webappsphp14 dez 2005

Multiple SQL injection vulnerabilities in QuickPayPro 3.1 allow remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Limbo CMS 1.0.4.2 - 'index.php?_SERVER[REMOTE_ADDR]' Cross-Site Scripting

CVE-2005-4317—webappsphp14 dez 2005

Limbo CMS 1.0.4.2 and earlier, with register_globals off, does not protect the $_SERVER variable from external modificat

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

QuickPayPro 3.1 - 'tracking.details.php?trackingid' SQL Injection

CVE-2005-4243—webappsphp14 dez 2005

Multiple SQL injection vulnerabilities in QuickPayPro 3.1 allow remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

News Module for Envolution - 'modules.php' Multiple SQL Injections

CVE-2005-4263—webappsphp14 dez 2005

SQL injection vulnerability in the News module in Envolution allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Macromedia Flash Media Server 2 - Remote Denial of Service

CVE-2005-4216—doswindows14 dez 2005

The Administration Service (FMSAdmin.exe) in Macromedia Flash Media Server 2.0 r1145 allows remote attackers to cause a

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DreamLevels Dream Poll 3.0 - 'View_Results.php' SQL Injection

CVE-2005-4254—webappsphp14 dez 2005

SQL injection vulnerability in view_Results.php in DreamLevels DreamPoll 3.0 final allows remote attackers to execute ar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ASPBB 0.4 - 'forum.asp?FORUM_ID' SQL Injection

CVE-2005-4259—webappsasp14 dez 2005

Multiple SQL injection vulnerabilities in ASPBB 0.4 allow remote attackers to execute arbitrary SQL commands via the (1)

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP-Nuke 7.x - Content Filtering Bypass

CVE-2005-4260—webappsphp14 dez 2005

Interpretation conflict in includes/mainfile.php in PHP-Nuke 7.9 and later allows remote attackers to perform cross-site

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Netref 3.0 - 'index.php' SQL Injection

CVE-2005-4198—webappsphp14 dez 2005

SQL injection vulnerability in index.php in Netref 3.0 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ASP-DEV XM Forum - 'forum.asp' Cross-Site Scripting

CVE-2005-4256—webappsasp14 dez 2005

Cross-site scripting (XSS) vulnerability in forum.asp in ASP-DEV XM Forum RC3 allows remote attackers to inject arbitrar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

WikkaWiki 1.1.6 - 'TextSearch.php' Cross-Site Scripting

CVE-2005-4255—webappsphp14 dez 2005

Cross-site scripting (XSS) vulnerability in TextSearch in WikkaWiki 1.1.6.0 allows remote attackers to inject arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Jamit Job Board 2.4.1 - 'index.php' SQL Injection

CVE-2005-4232—webappsphp14 dez 2005

SQL injection vulnerability in index.php in Jamit Job Board 2.4.1 and earlier allows remote attackers to execute arbitra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

EncapsGallery 1.0 - 'gallery.php' SQL Injection

CVE-2005-4234—webappsphp13 dez 2005

SQL injection vulnerability in gallery.php in EncapsGallery 1.0.0 and earlier allows remote attackers to execute arbitra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPWebGallery 1.3.4/1.5.1 - 'category.php' SQL Injection

CVE-2005-4228—webappsphp13 dez 2005

Multiple SQL injection vulnerabilities in PhpWebGallery 1.5.1 and earlier allow remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

McGallery 1.0/1.1/2.2 - 'show.php' Multiple SQL Injections

CVE-2005-4251—webappsphp13 dez 2005

Multiple SQL injection vulnerabilities in mcGallery PRO 2.2 and earlier allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

VCD-db 0.9x - 'search.php?by' SQL Injection

CVE-2005-4240—webappsphp13 dez 2005

SQL injection vulnerability in search.php in VCD-db 0.98 and earlier allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPCOIN 1.2.2 - '/includes/db.php?$_CCFG[_PKG_PATH_DBSE]' Traversal Arbitrary File Access

CVE-2005-4212—webappsphp13 dez 2005

Directory traversal vulnerability in coin_includes/db.php in phpCOIN 1.2.2 allows remote attackers to read arbitrary loc

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Plogger Beta 2 - 'index.php?id' SQL Injection

CVE-2005-4246—webappsphp13 dez 2005

SQL injection vulnerability in Plogger Beta 2 and earlier allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Snipe Gallery 3.1.4 - 'search.php?keyword' Cross-Site Scripting

CVE-2005-4245—webappsphp13 dez 2005

Cross-site scripting (XSS) vulnerability in search.php in Snipe Gallery 3.1.4 and earlier allows remote attackers to inj

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

VCD-db 0.9x Search Module - 'batch' Cross-Site Scripting

CVE-2005-4241—webappsphp13 dez 2005

Cross-site scripting (XSS) vulnerability in the category page in VCD-db 0.98 and earlier allows remote attackers to inje

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Mantis Bug Tracker 0.x/1.0 - 'View_filters_page.php' Cross-Site Scripting

CVE-2005-4238—webappsphp13 dez 2005

Cross-site scripting (XSS) vulnerability in view_filters_page.php in Mantis 1.0.0rc3 and earlier allows remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Linux Kernel 2.6.x - INVALIDATE_INODE_PAGES2 Local Integer Overflow

CVE-2005-3808—doslinux13 dez 2005

Integer overflow in the invalidate_inode_pages2_range function in mm/truncate.c in Linux kernel 2.6.11 to 2.6.14 allows

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Snipe Gallery 3.1.4 - 'view.php?gallery_id' SQL Injection

CVE-2005-4244—webappsphp13 dez 2005

SQL injection vulnerability in Snipe Gallery 3.1.4 and earlier allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.