Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados

41.197CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentes populares risco

89.220 exploits

Exploit-DB✓ VexDay Proof

Mozilla Firefox 0.x/1.x - Large History File Buffer Overflow

CVE-2005-4134—dosmultiple08 dez 2005

Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of ser

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SugarSuite Open Source 4.0beta - Remote Code Execution (2)

CVE-2005-4087—webappsphp08 dez 2005

PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Magic Forum Personal - 'view_thread.cfm' Multiple SQL Injections

CVE-2005-4071—webappscfm08 dez 2005

Multiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5 and earlier allow remote attackers to execute

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Magic List Pro - 'view_archive.cfm?ListID' SQL Injection

CVE-2005-4073—webappscfm08 dez 2005

SQL injection vulnerability in view_archive.cfm in CFMagic Magic List Pro 2.5 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Excel 95/97/2000/2002/2003/2004 - Malformed Range Memory Corruption

CVE-2005-4131—doswindows08 dez 2005

Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allo

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Nortel SSL VPN 4.2.1.6 - Web Interface Input Validation

CVE-2005-4197—webappscgi08 dez 2005

tunnelform.yaws in Nortel SSL VPN 4.2.1.6 allows remote attackers to execute arbitrary commands via a link in the a para

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Magic Forum Personal - 'view_forum.cfm?ForumID' SQL Injection

CVE-2005-4071—webappscfm08 dez 2005

Multiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5 and earlier allow remote attackers to execute

23RISCO

abrir ↗

Metasploit600

Lyris ListManager MSDE Weak sa Password

CVE-2005-4145—08 dez 2005

The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with

50RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Oracle 9.2.0.1 - Universal XDB HTTP Pass Overflow (Metasploit)

CVE-2003-0727—remotewindows08 dez 2005

Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release 2 allow local users to

50RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CF_Nuke 4.6 - 'index.cfm' Cross-Site Scripting

CVE-2005-4075—webappscfm08 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in index.cfm in CF_Nuke 4.6 and earlier allow remote attackers to in

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Website Baker 2.6.0 - Authentication Bypass / Remote Code Execution

CVE-2005-4140—webappsphp08 dez 2005

SQL injection vulnerability in admin/login/index.php in Website Baker 2.6.0 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SugarSuite Open Source 4.0beta - Remote Code Execution (1)

CVE-2005-4087—webappsphp07 dez 2005

PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SugarSuite Open Source 4.0beta - Remote Code Execution (1)

CVE-2005-4086—webappsphp07 dez 2005

Directory traversal vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (Suga

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Thwboard Beta 2.8 - 'misc.php?userid' SQL Injection

CVE-2005-4139—webappsphp07 dez 2005

Multiple SQL injection vulnerabilities in ThWboard before 3 Beta 2.84 allow remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Check Point VPN-1 SecureClient 4.0 < 4.1 - Policy Bypass

CVE-2005-4093—doshardware07 dez 2005

Check Point VPN-1 SecureClient NG with Application Intelligence R56, NG FP1, 4.0, and 4.1 allows remote attackers to byp

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DRZES Hms 3.2 - 'login.php' Cross-Site Scripting

CVE-2005-4136—webappsphp07 dez 2005

Cross-site scripting (XSS) vulnerability in login.php in DRZES HMS 3.2 allows remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Appfluent Database IDS < 2.1.0.103 - Environment Variable Local Overflow

CVE-2005-4076—localsolaris07 dez 2005

Buffer overflow in Appfluent Technology Database IDS 2.0 allows local users to execute arbitrary code via a long APPFLUE

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Thwboard Beta 2.8 - 'v_profile.php?user' SQL Injection

CVE-2005-4139—webappsphp07 dez 2005

Multiple SQL injection vulnerabilities in ThWboard before 3 Beta 2.84 allow remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SimpleBBS 1.1 - Remote Command Execution

CVE-2005-4135—webappsphp07 dez 2005

Direct static code injection vulnerability in includes/newtopic.php in SimpleBBS 1.1 and earlier allows remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Thwboard Beta 2.8 - 'calendar.php?year' SQL Injection

CVE-2005-4139—webappsphp07 dez 2005

Multiple SQL injection vulnerabilities in ThWboard before 3 Beta 2.84 allow remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ASPMForum - 'forum.asp?baslik' SQL Injection

CVE-2005-4141—webappsasp07 dez 2005

Multiple SQL injection vulnerabilities in ASPMForum allow remote attackers to execute arbitrary SQL commands via the (1)

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ASPMForum - 'kullanicilistesi.asp?harf' SQL Injection

CVE-2005-4141—webappsasp07 dez 2005

Multiple SQL injection vulnerabilities in ASPMForum allow remote attackers to execute arbitrary SQL commands via the (1)

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

NetAuctionHelp 3.0 - Multiple Cross-Site Scripting Vulnerabilities

CVE-2005-4063—webappsasp06 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in NetAuctionHelp 3.0 and earlier allow remote attackers to inject a

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DuWare DuPortalPro 3.4.3 - 'Password.asp' Cross-Site Scripting

CVE-2005-4166—webappsasp06 dez 2005

Cross-site scripting (XSS) vulnerability in password.asp in DUWare DUportal Pro 3.4.3 allows remote attackers to inject

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

A-FAQ 1.0 - 'faqDspItem.asp?faqid' SQL Injection

CVE-2005-4064—webappsasp06 dez 2005

Multiple SQL injection vulnerabilities in A-FAQ 1.0 allow remote attackers to execute arbitrary SQL commands via the (1)

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Cars Portal 1.1 - 'index.php' Multiple SQL Injections

CVE-2005-4055—webappsphp06 dez 2005

SQL injection vulnerability in index.php in Cars Portal 1.1 and earlier allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

A-FAQ 1.0 - 'faqDsp.asp?catcode' SQL Injection

CVE-2005-4064—webappsasp06 dez 2005

Multiple SQL injection vulnerabilities in A-FAQ 1.0 allow remote attackers to execute arbitrary SQL commands via the (1)

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Horde IMP 2.2.x/3.2.x/4.0.x - Email Attachments HTML Injection

CVE-2005-4080—remotelinux06 dez 2005

Horde IMP 4.0.4 and earlier does not sanitize strings containing UTF16 null characters, which allows remote attackers to

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Multiple Vendor BIOS - Keyboard Buffer Password Persistence (1)

CVE-2005-4176—localwindows06 dez 2005

AWARD Bios Modular 4.50pg does not clear the keyboard buffer after reading the BIOS password during system startup, whic

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Multiple Vendor BIOS - Keyboard Buffer Password Persistence (2)

CVE-2005-4176—localunix06 dez 2005

AWARD Bios Modular 4.50pg does not clear the keyboard buffer after reading the BIOS password during system startup, whic

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.