Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados

41.197CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentes populares risco

89.220 exploits

Exploit-DB✓ VexDay Proof

EveryAuction 1.53 - Auction.pl Cross-Site Scripting

CVE-2005-4229—webappscgi13 dez 2005

Cross-site scripting (XSS) vulnerability in auction.pl in EveryAuction 1.53 and earlier allows remote attackers to injec

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Snipe Gallery 3.1.4 - 'search.php?keyword' Cross-Site Scripting

CVE-2005-4245—webappsphp13 dez 2005

Cross-site scripting (XSS) vulnerability in search.php in Snipe Gallery 3.1.4 and earlier allows remote attackers to inj

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Plogger Beta 2 - 'index.php?id' SQL Injection

CVE-2005-4246—webappsphp13 dez 2005

SQL injection vulnerability in Plogger Beta 2 and earlier allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPCOIN 1.2.2 - '/includes/db.php?$_CCFG[_PKG_PATH_DBSE]' Traversal Arbitrary File Access

CVE-2005-4212—webappsphp13 dez 2005

Directory traversal vulnerability in coin_includes/db.php in phpCOIN 1.2.2 allows remote attackers to read arbitrary loc

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

EncapsGallery 1.0 - 'gallery.php' SQL Injection

CVE-2005-4234—webappsphp13 dez 2005

SQL injection vulnerability in gallery.php in EncapsGallery 1.0.0 and earlier allows remote attackers to execute arbitra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Mantis Bug Tracker 0.x/1.0 - 'View_filters_page.php' Cross-Site Scripting

CVE-2005-4238—webappsphp13 dez 2005

Cross-site scripting (XSS) vulnerability in view_filters_page.php in Mantis 1.0.0rc3 and earlier allows remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP JackKnife 2.21 - Cross-Site Scripting

CVE-2005-4239—webappsphp13 dez 2005

Cross-site scripting (XSS) vulnerability in Search/DisplayResults.php in PHP JackKnife 2.21 and earlier allows remote at

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Snipe Gallery 3.1.4 - 'image.php?image_id' SQL Injection

CVE-2005-4244—webappsphp13 dez 2005

SQL injection vulnerability in Snipe Gallery 3.1.4 and earlier allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

McGallery 1.0/1.1/2.2 - 'index.php?album' SQL Injection

CVE-2005-4251—webappsphp13 dez 2005

Multiple SQL injection vulnerabilities in mcGallery PRO 2.2 and earlier allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BTGrup Admin WebController - SQL Injection

CVE-2005-4207—webappsphp12 dez 2005

SQL injection vulnerability in BTGrup Admin WebController Script allows remote attackers to execute SQL commands via the

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Scout Portal Toolkit 1.3.1 - 'SPT-AdvancedSearch.php' Cross-Site Scripting

CVE-2005-4196—webappsphp12 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and earlier allow remote attacke

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

LocazoList Classifieds 1.0 - 'SearchDB.asp' Input Validation

CVE-2005-4205—webappsasp12 dez 2005

Cross-site scripting (XSS) vulnerability in searchdb.asp in LocazoList 1.03c and earlier allows remote attackers to inje

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Scout Portal Toolkit 1.3.1 - 'SPT-UserLogin.php' SQL Injection

CVE-2005-4195—webappsphp12 dez 2005

Multiple SQL injection vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and earlier allow remote attackers to execute

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Arab Portal 2.0 - 'Link.php' SQL Injection

CVE-2005-4221—webappsphp12 dez 2005

SQL injection vulnerability in link.php in Arab Portal System 2 Beta 2 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Scout Portal Toolkit 1.3.1 - 'SPT-QuickSearch.php' Cross-Site Scripting

CVE-2005-4196—webappsphp12 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and earlier allow remote attacke

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

LogiSphere 0.9.9 j - 'Search?NS-query-pat' Traversal Arbitrary File Access

CVE-2005-4202—remotewindows12 dez 2005

Multiple directory traversal vulnerabilities in LogiSphere 0.9.9j allow remote attackers to access arbitrary files via (

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Alt-N MDaemon WorldClient 8.1.3 - Denial of Service

CVE-2005-4209—doswindows12 dez 2005

WorldClient webmail in Alt-N MDaemon 8.1.3 allows remote attackers to prevent arbitrary users from accessing their inbox

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

LogiSphere 0.9.9 j - 'viewsource.jsp?source' Traversal Arbitrary File Access

CVE-2005-4202—remotewindows12 dez 2005

Multiple directory traversal vulnerabilities in LogiSphere 0.9.9j allow remote attackers to access arbitrary files via (

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Magic Book Professional 2.0 - 'Book.cfm' Cross-Site Scripting

CVE-2005-4177—webappscfm12 dez 2005

Cross-site scripting (XSS) vulnerability in book.cfm in Magic Book Personal and Professional 2.0 allows remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

phpCOIN 1.2.2 - 'phpcoinsessid' SQL Injection / Remote Code Execution

CVE-2005-4213—webappsphp12 dez 2005

SQL injection vulnerability in mod.php in phpCOIN 1.2.2 allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Sights 'N Sounds Streaming Media Server 2.0.3 - 'SWS.exe' Buffer Overflow

CVE-2005-4194—doswindows12 dez 2005

Buffer overflow in MediaServerList.exe in Sights 'n Sounds Streaming Media Server 2.0.3.a allows remote attackers to cau

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BlackBoard Academic Suite 6.2.3.23 - Frameset.jsp Cross-Domain Frameset Loading

CVE-2005-4206MEDIUMwebappsjsp12 dez 2005

Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allow

33RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Scout Portal Toolkit 1.3.1 - 'SPT-BrowseResources.php' Cross-Site Scripting

CVE-2005-4196—webappsphp12 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and earlier allow remote attacke

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

LogiSphere 0.9.9 j - URI Multiple Method Traversal Arbitrary File Access

CVE-2005-4202—remotewindows12 dez 2005

Multiple directory traversal vulnerabilities in LogiSphere 0.9.9j allow remote attackers to access arbitrary files via (

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Flatnuke 2.5.6 - Privilege Escalation / Remote Command Execution

CVE-2005-4449—webappsphp10 dez 2005

verify.php in FlatNuke 2.5.6 allows remote authenticated administrators to modify arbitrary PHP files by setting the fil

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Flatnuke 2.5.6 - Privilege Escalation / Remote Command Execution

CVE-2005-4208—webappsphp10 dez 2005

Directory traversal vulnerability in Flatnuke 2.5.6 allows remote attackers to access arbitrary files via a .. (dot dot)

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Lyris ListManager - Read Message Attachment SQL Injection (Metasploit)

CVE-2005-4143—remotewindows09 dez 2005

SQL injection vulnerability in Lyris ListManager 5.0 through 8.9a allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Oracle 9.2.0.1 - Universal XDB HTTP Pass Overflow (Metasploit)

CVE-2003-0727—remotewindows08 dez 2005

Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release 2 allow local users to

50RISCO

abrir ↗

Metasploit600

Lyris ListManager MSDE Weak sa Password

CVE-2005-4145—08 dez 2005

The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with

50RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Nortel SSL VPN 4.2.1.6 - Web Interface Input Validation

CVE-2005-4197—webappscgi08 dez 2005

tunnelform.yaws in Nortel SSL VPN 4.2.1.6 allows remote attackers to execute arbitrary commands via a link in the a para

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.