Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados

41.197CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentes populares risco

89.220 exploits

Exploit-DB✓ VexDay Proof

DuWare DuPortalPro 3.4.3 - 'Password.asp' Cross-Site Scripting

CVE-2005-4166—webappsasp06 dez 2005

Cross-site scripting (XSS) vulnerability in password.asp in DUWare DUportal Pro 3.4.3 allows remote attackers to inject

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Multiple Vendor BIOS - Keyboard Buffer Password Persistence (1)

CVE-2005-4176—localwindows06 dez 2005

AWARD Bios Modular 4.50pg does not clear the keyboard buffer after reading the BIOS password during system startup, whic

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

NetAuctionHelp 3.0 - Multiple Cross-Site Scripting Vulnerabilities

CVE-2005-4063—webappsasp06 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in NetAuctionHelp 3.0 and earlier allow remote attackers to inject a

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Edgewall Software Trac 0.7.1/0.8/0.9 Search Module - SQL Injection

CVE-2005-4065—webappsphp05 dez 2005

SQL injection vulnerability in the search module in Edgewall Trac before 0.9.2 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Web4Future Affiliate Manager PRO 4.1 - 'functions.php' SQL Injection

CVE-2005-4037—webappsphp05 dez 2005

SQL injection vulnerability in functions.php in Web4Future Affiliate Manager PRO 4.1 and earlier allows remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Easy Search System 1.1 - 'search.cgi' Cross-Site Scripting

CVE-2005-4032—webappscgi05 dez 2005

Cross-site scripting (XSS) vulnerability in search.cgi in Easy Search System 1.1 and earlier allows remote attackers to

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Web4Future eCommerce Enterprise Edition 2.1 - 'view.php' Multiple SQL Injections

CVE-2005-4035—webappsphp05 dez 2005

Multiple SQL injection vulnerabilities in Web4Future eCommerce Enterprise Edition 2.1 and earlier allow remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Web4Future eDating Professional 5.0 - 'fq.php?cid' SQL Injection

CVE-2005-4034—webappsphp05 dez 2005

Multiple SQL injection vulnerabilities in Web4Future eDating Professional 5 allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Web4Future eCommerce Enterprise Edition 2.1 - 'index.php' Multiple SQL Injections

CVE-2005-4035—webappsphp05 dez 2005

Multiple SQL injection vulnerabilities in Web4Future eCommerce Enterprise Edition 2.1 and earlier allow remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Web4Future Portal Solutions - 'Arhiva.php' Directory Traversal

CVE-2005-4039—webappsphp05 dez 2005

Directory traversal vulnerability in arhiva.php in Web4Future Portal Solutions News Portal allows remote attackers to re

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Blog System 1.2 - 'index.php?cat' SQL Injection

CVE-2005-4049—webappsphp05 dez 2005

Multiple SQL injection vulnerabilities in Blog System 1.2 allow remote attackers to execute arbitrary SQL commands via (

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Hobosworld HobSR - Multiple SQL Injections

CVE-2005-4043—webappsphp05 dez 2005

SQL injection vulnerability in view.php in Hobosworld HobSR 1.0 and earlier allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SAMEDIA LandShop 0.6.3 - 'ls.php' Multiple SQL Injections

CVE-2005-4018—webappsphp05 dez 2005

SQL injection vulnerability in ls.php in Landshop Real Estate Commerce System 0.6.3 and earlier allows remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Web4Future eDating Professional 5.0 - 'articles.php?cat' SQL Injection

CVE-2005-4034—webappsphp05 dez 2005

Multiple SQL injection vulnerabilities in Web4Future eDating Professional 5 allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Relative Real Estate Systems 1.2 - SQL Injection

CVE-2005-4019—webappsphp05 dez 2005

SQL injection vulnerability in index.php in Relative Real Estate Systems 1.02 and earlier allows remote attackers to exe

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Web4Future eDating Professional 5.0 - 'gift.php?cid' SQL Injection

CVE-2005-4034—webappsphp05 dez 2005

Multiple SQL injection vulnerabilities in Web4Future eDating Professional 5 allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Web4Future eCommerce Enterprise Edition 2.1 - 'viewbrands.php?bid' SQL Injection

CVE-2005-4035—webappsphp05 dez 2005

Multiple SQL injection vulnerabilities in Web4Future eCommerce Enterprise Edition 2.1 and earlier allow remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

1-Script 1-Search 1.8 - '1search.CGI' Cross-Site Scripting

CVE-2005-4091—webappscgi05 dez 2005

Cross-site scripting (XSS) vulnerability in 1search.cgi in 1-Script 1-Search 1.8 allows remote attackers to inject arbit

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Web4Future eDating Professional 5.0 - 'index.php' Multiple SQL Injections

CVE-2005-4034—webappsphp05 dez 2005

Multiple SQL injection vulnerabilities in Web4Future eDating Professional 5 allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

WIDCOMM Bluetooth Software < 3.0 - Remote Buffer Overflow

CVE-2005-4417—remotewindows04 dez 2005

The default configuration of Widcomm Bluetooth for Windows (BTW) 4.0.1.1500 and earlier, as installed on Belkin Bluetoot

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DoceboLms 2.0.4 - 'connector.php' Arbitrary File Upload

CVE-2005-4095—webappsphp04 dez 2005

Directory traversal vulnerability in connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPYellowTM 5.33 - 'search_result.php?haystack' SQL Injection

CVE-2005-4001—webappsphp03 dez 2005

Multiple SQL injection vulnerabilities in phpYellowTM Pro Edition and Lite Edition 5.33 allow remote attackers to execut

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Solupress News 1.0 - 'search.asp' Cross-Site Scripting

CVE-2005-3998—webappsasp03 dez 2005

Cross-site scripting (XSS) vulnerability in search.asp in Solupress News 1.0 and earlier allows remote attackers to inje

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SiteBeater News 4.0 - 'Archive.asp' Cross-Site Scripting

CVE-2005-4000—webappsasp03 dez 2005

Cross-site scripting (XSS) vulnerability in archive.asp in SiteBeater News System 4.00 and earlier allows remote attacke

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP-Fusion 6.0.109 - 'messages.php' SQL Injection

CVE-2005-4005—webappsphp03 dez 2005

SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to obtain path information an

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

sobexsrv 1.0.0_pre3 Bluetooth - 'syslog()' Remote Format String

CVE-2005-3995—remotelinux03 dez 2005

Format string vulnerability in the dosyslog function in the OBEX server (obexsrv.c) for Sobexsrv before 1.0.0-pre4, when

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ASPS Shopping Cart Lite 2.1/Professional 2.9 d - 'adv_search.asp?srch_product_name' Cross-Site Scripting

CVE-2005-4003—webappsasp03 dez 2005

Multiple SQL injection vulnerabilities in Absolute Shopping Package Solutions (ASPS) Shopping Cart Professional 2.9d and

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPYellowTM 5.33 - 'print_me.php?ckey' SQL Injection

CVE-2005-4001—webappsphp03 dez 2005

Multiple SQL injection vulnerabilities in phpYellowTM Pro Edition and Lite Edition 5.33 allow remote attackers to execut

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ASPS Shopping Cart Lite 2.1/Professional 2.9 d - 'bsearch.asp?b_search' Cross-Site Scripting

CVE-2005-4003—webappsasp03 dez 2005

Multiple SQL injection vulnerabilities in Absolute Shopping Package Solutions (ASPS) Shopping Cart Professional 2.9d and

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Alisveristr E-Commerce Login - Multiple SQL Injections

CVE-2005-4081—webappsphp03 dez 2005

Multiple SQL injection vulnerabilities in Alisveristr E-commerce allow remote attackers to bypass authentication and pos

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.