Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
Enterprise Heart Enterprise Connector 1.0.2 - 'send.php?messageid' SQL Injection
CVE-2005-3875—webappsphp28 nov 2005
Multiple SQL injection vulnerabilities in Enterprise Connector 1.0.2 and earlier allow remote attackers to execute arbit
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Softbiz Resource Repository Script - 'details_res.php?sbres_id' SQL Injection
CVE-2005-3879—webappsphp28 nov 2005
Multiple SQL injection vulnerabilities in Softbiz Resource Repository Script 1.1 and earlier allow remote attackers to e
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Softbiz Resource Repository Script - 'report_link.php?sbres_id' SQL Injection
CVE-2005-3879—webappsphp28 nov 2005
Multiple SQL injection vulnerabilities in Softbiz Resource Repository Script 1.1 and earlier allow remote attackers to e
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
phpWordPress 3.0 - Multiple SQL Injections
CVE-2005-3844—webappsphp28 nov 2005
SQL injection vulnerability in phpWordPress PHP News and Article Manager 3.0 allows remote attackers to execute arbitrar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ShockBoard 3.0/4.0 - 'Offset' SQL Injection
CVE-2005-3873—webappsphp28 nov 2005
SQL injection vulnerability in topic.php in ShockBoard 3.0 and 4.0 allows remote attackers to execute arbitrary SQL comm
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
GuppY 4.5 - 'editorTypetool.php?meskin' Traversal Arbitrary File Access
CVE-2005-3927—webappsphp28 nov 2005
Multiple directory traversal vulnerabilities in GuppY 4.5.9 and earlier allow remote attackers to read and include arbit
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Helpdesk Issue Manager 0.x - 'find.php' Multiple SQL Injections
CVE-2005-3925—webappsphp28 nov 2005
Multiple SQL injection vulnerabilities in Central Manchester CLC Helpdesk Issue Manager 0.9 and earlier allow remote att
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - MSDTC Service Remote Memory Modification (PoC) (MS05-051)
CVE-2005-2119—doswindows27 nov 2005
The MIDL_user_allocate function in the Microsoft Distributed Transaction Coordinator (MSDTC) proxy (MSDTCPRX.DLL) alloca
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Athena PHP Website Administration 0.1 - Remote File Inclusion
CVE-2005-3860—webappsphp26 nov 2005
PHP remote file inclusion vulnerability in athena.php in Oliver May Athena PHP Website Administration 0.1a allows remote
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHPGreetz 0.99 - Remote File Inclusion
CVE-2005-3861—webappsphp26 nov 2005
PHP remote file inclusion vulnerability in content.php in phpGreetz 0.99 and earlier allows remote attackers to execute
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PBLang Bulletin Board System 4.65 - Multiple HTML Injection Vulnerabilities
CVE-2005-3919—webappsphp26 nov 2005
Cross-site scripting (XSS) vulnerability in PBLang 4.65 allows remote attackers to inject arbitrary web script or HTML v
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Q-News 2.0 - Remote File Inclusion
CVE-2005-3859—webappsphp26 nov 2005
PHP remote file inclusion vulnerability in q-news.php in Q-News 2.0 allows remote attackers to execute arbitrary PHP cod
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
efiction 1.0/1.1/2.0 - 'titles.php' SQL Injection
CVE-2005-4168—webappsphp25 nov 2005
Multiple SQL injection vulnerabilities in eFiction 1.0, 1.1, and 2.0 allow remote attackers to execute arbitrary SQL com
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
AgileBill 1.4.92 - Product_Cat SQL Injection
CVE-2005-3827—webappsphp25 nov 2005
SQL injection vulnerability in product_cat in AgileBill 1.4.92 and earlier allows remote attackers to execute arbitrary
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IsolSoft Support Center 2.2 - Multiple SQL Injections
CVE-2005-3838—webappsphp25 nov 2005
Multiple SQL injection vulnerabilities in search.php in IsolSoft Support Center 2.2 and earlier allow remote attackers t
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
eFiction 2.0 - Fake '.GIF' Arbitrary File Upload
CVE-2005-4171—webappsphp25 nov 2005
The "Upload new image" command in the "Manage Images" eFiction 1.1, when members are allowed to upload images, allows re
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
efiction 1.0/1.1/2.0 - 'titles.php' Cross-Site Scripting
CVE-2005-4167—webappsphp25 nov 2005
Cross-site scripting (XSS) vulnerability in eFiction 1.0 and 1.1 allows remote attackers to inject arbitrary web script
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
efiction 1.0/1.1/2.0 - 'uid' SQL Injection
CVE-2005-4170—webappsphp25 nov 2005
SQL injection vulnerability in eFiction 1.1 allows remote attackers to execute arbitrary SQL commands via the uid parame
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
efiction 1.0/1.1/2.0 - 'sid' SQL Injection
CVE-2005-4169—webappsphp25 nov 2005
Multiple SQL injection vulnerabilities in eFiction 1.0 allow remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
SoftBiz Web Hosting Directory Script 1.1 - 'search_result.php?cid' SQL Injection
CVE-2005-3817—webappsphp24 nov 2005
Multiple SQL injection vulnerabilities in Softbiz Web Host Directory Script 1.1 and earlier allow remote attackers to ex
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
vTiger CRM 4.2 - SQL Injection
CVE-2005-3819—webappsphp24 nov 2005
Multiple SQL injection vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to inject arbitrary SQL comm
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
SoftBiz Web Hosting Directory Script 1.1 - 'browsecats.php?cid' SQL Injection
CVE-2005-3817—webappsphp24 nov 2005
Multiple SQL injection vulnerabilities in Softbiz Web Host Directory Script 1.1 and earlier allow remote attackers to ex
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
SoftBiz Web Hosting Directory Script 1.1 - 'review.php?sbres_id' SQL Injection
CVE-2005-3817—webappsphp24 nov 2005
Multiple SQL injection vulnerabilities in Softbiz Web Host Directory Script 1.1 and earlier allow remote attackers to ex
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
vTiger CRM 4.2 Leads Module - 'record' Cross-Site Scripting
CVE-2005-3818—webappsphp24 nov 2005
Multiple cross-site scripting (XSS) vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to inject arbit
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
SoftBiz Web Hosting Directory Script 1.1 - 'email.php?h_id' SQL Injection
CVE-2005-3817—webappsphp24 nov 2005
Multiple SQL injection vulnerabilities in Softbiz Web Host Directory Script 1.1 and earlier allow remote attackers to ex
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Orca Forum 4.3 - 'forum.php' SQL Injection
CVE-2005-3815—webappsphp24 nov 2005
SQL injection vulnerability in forum.php in Orca Forum 4.3b and earlier allows remote attackers to execute arbitrary SQL
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
freeFTPd 1.0.10 - 'PORT' Denial of Service
CVE-2005-3812—doswindows24 nov 2005
freeFTPd 1.0.10 allows remote authenticated users to cause a denial of service (null dereference and crash) via a PORT c
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Comdev Vote Caster 3.1 - 'index.php' SQL Injection
CVE-2005-3825—webappsphp24 nov 2005
SQL injection vulnerability in index.php in Comdev Vote Caster 3.1 and earlier allows remote attackers to execute arbitr
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
OvBB 0.x - 'profile.php?userid' SQL Injection
CVE-2005-3918—webappsphp24 nov 2005
Multiple SQL injection vulnerabilities in OvBB 0.08a allow remote attackers to execute arbitrary SQL commands via the (1
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
OvBB 0.x - 'thread.php?threadid' SQL Injection
CVE-2005-3918—webappsphp24 nov 2005
Multiple SQL injection vulnerabilities in OvBB 0.08a allow remote attackers to execute arbitrary SQL commands via the (1
23RISCO
abrir ↗
← anteriorpágina 1739 / 2.974próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.