Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados

41.197CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentes populares risco

89.220 exploits

Exploit-DB✓ VexDay Proof

NetClassifieds Standard 1.9/Professional 1.5/Premium 1.0 - 'gallery.php?CatID' SQL Injection

CVE-2005-3978—webappsphp02 dez 2005

Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional Edition 1.5.1, Standard Edi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

WinEggDropShell 1.7 - Multiple Remote Stack Overflows (PoC)

CVE-2005-3992—doswindows02 dez 2005

Multiple buffer overflows in WinEggDropShell remote access trojan (RAT) 1.7 allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Java Search Engine 0.9.34 - search.jsp Cross-Site Scripting

CVE-2005-3966—webappsjsp02 dez 2005

Cross-site scripting (XSS) vulnerability in search.jsp in Java Search Engine (JSE) 0.9.34 allows remote attackers to inj

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Zen Cart 1.2.6d - 'password_forgotten.php' SQL Injection

CVE-2005-3996—webappsphp02 dez 2005

SQL injection vulnerability in admin/password_forgotten.php in Zen Cart 1.2.6d and earlier allows remote attackers to ex

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

NetClassifieds Standard 1.9/Professional 1.5/Premium 1.0 - 'ViewItem.php?ItemNum' SQL Injection

CVE-2005-3978—webappsphp02 dez 2005

Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional Edition 1.5.1, Standard Edi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows XP/2000/2003 - CreateRemoteThread Local Denial of Service

CVE-2005-3981—doswindows01 dez 2005

NOTE: this issue has been disputed by third parties. Microsoft Windows XP, 2000, and 2003 allows local users to kill a

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPMyChat 0.14.6 - 'style.css.php?medium' Cross-Site Scripting

CVE-2005-3991—webappsphp01 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in phpMyChat 0.14.6 allow remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DotClear 1.2.1/1.2.2 - 'Session.php' SQL Injection

CVE-2005-3963—webappsphp01 dez 2005

SQL injection vulnerability in session.php in DotClear before 1.2.3 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Edgewall Software Trac 0.9 Ticket Query Module - SQL Injection

CVE-2005-3980—webappsphp01 dez 2005

SQL injection vulnerability in the ticket query module in Edgewall Trac 0.9 and possibly earlier allows remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows - DTC Remote (MS05-051) (2)

CVE-2005-1979—remotewindows01 dez 2005

Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC servic

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows - DTC Remote (MS05-051) (2)

CVE-2005-2119—remotewindows01 dez 2005

The MIDL_user_allocate function in the Microsoft Distributed Transaction Coordinator (MSDTC) proxy (MSDTCPRX.DLL) alloca

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows - DTC Remote (MS05-051) (2)

CVE-2005-1978—remotewindows01 dez 2005

COM+ in Microsoft Windows does not properly "create and use memory structures," which allows local users or remote attac

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

WebCalendar 1.0.1 - 'Layers_Toggle.php' HTTP Response Splitting

CVE-2005-3982—webappsphp01 dez 2005

CRLF injection vulnerability in layers_toggle.php in WebCalendar 1.0.1 might allow remote attackers to modify HTTP heade

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPMyChat 0.14.6 - 'start_page.css.php?medium' Cross-Site Scripting

CVE-2005-3991—webappsphp01 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in phpMyChat 0.14.6 allow remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows - DTC Remote (MS05-051) (2)

CVE-2005-1980—remotewindows01 dez 2005

Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC servic

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Lore 1.5.4/1.5.6 - 'article.php' SQL Injection

CVE-2005-3988—webappsphp01 dez 2005

SQL injection vulnerability in article.php in Pineapple Technologies Lore 1.5.4 allows remote attackers to execute arbit

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Extreme Corporate 6.0 - 'Extremesearch.php' Cross-Site Scripting

CVE-2005-3972—webappsphp01 dez 2005

Cross-site scripting (XSS) vulnerability in extremesearch.php in Extreme Search Corporate Edition 6.0 and earlier allows

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPMyChat 0.14.6 - 'users_popupL.php?From' Cross-Site Scripting

CVE-2005-3991—webappsphp01 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in phpMyChat 0.14.6 allow remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SoftBiz FAQ 1.1 - 'faq_qanda.php?id' SQL Injection

CVE-2005-3938—webappsphp30 nov 2005

SQL injection vulnerability in Softbiz FAQ Script 1.1 and earler allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SoftBiz FAQ 1.1 - 'print_article.php?id' SQL Injection

CVE-2005-3938—webappsphp30 nov 2005

SQL injection vulnerability in Softbiz FAQ Script 1.1 and earler allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

WSN Knowledge Base 1.2 - 'comments.php?id' SQL Injection

CVE-2005-3939—webappsphp30 nov 2005

Multiple SQL injection vulnerabilities in WSN Knowledge Base 1.2.0 and earler allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

WSN Knowledge Base 1.2 - 'memberlist.php?id' SQL Injection

CVE-2005-3939—webappsphp30 nov 2005

Multiple SQL injection vulnerabilities in WSN Knowledge Base 1.2.0 and earler allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows Metafile - 'mtNoObjects' Denial of Service (MS05-053)

CVE-2005-2124—doswindows30 nov 2005

Unspecified vulnerability in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SoftBiz FAQ 1.1 - 'add_comment.php?id' SQL Injection

CVE-2005-3938—webappsphp30 nov 2005

SQL injection vulnerability in Softbiz FAQ Script 1.1 and earler allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

O-Kiraku Nikki 1.3 - 'Nikki.php' SQL Injection

CVE-2005-3932—webappsphp30 nov 2005

SQL injection vulnerability in okiraku.php in O-Kiraku Nikki 1.3 and earlier allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

QNX RTOS 6.3.0 (x86) - 'phgrafx' Local Buffer Overflow

CVE-2005-3928—localqnx30 nov 2005

Buffer overflow in phgrafx in QNX 6.2.1 and 6.3.0 allows local users to execute arbitrary code via a long command line a

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPX 3.5.x - 'Admin 'login.php' SQL Injection

CVE-2005-3968—webappsphp30 nov 2005

SQL injection vulnerability in auth.inc.php in PHPX 3.5.9 and earlier allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows Metafile - 'mtNoObjects' Denial of Service (MS05-053)

CVE-2005-0803—doswindows30 nov 2005

The GetEnhMetaFilePaletteEntries API in GDI32.DLL in Windows 2000 allows remote attackers to cause a denial of service (

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Instant Photo Gallery 1.0 - 'portfolio.php?cat_id' SQL Injection

CVE-2005-3986—webappsphp30 nov 2005

Multiple SQL injection vulnerabilities in Instant Photo Gallery 1 and earlier allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

WSN Knowledge Base 1.2 - 'index.php' Multiple SQL Injections

CVE-2005-3939—webappsphp30 nov 2005

Multiple SQL injection vulnerabilities in WSN Knowledge Base 1.2.0 and earler allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.