Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados

41.197CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentes populares risco

89.220 exploits

Exploit-DB✓ VexDay Proof

Pearl Forums 2.0 - 'index.php' Multiple SQL Injections

CVE-2005-4647—webappsphp15 nov 2005

Multiple SQL injection vulnerabilities in PEARLINGER Pearl Forums 2.4 allow remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPWCMS 1.2.5 -DEV - 'login.php?form_lang' Traversal Arbitrary File Access

CVE-2005-3789—webappsphp15 nov 2005

Multiple directory traversal vulnerabilities in phpwcms 1.2.5 allow remote attackers to read arbitrary files via a .. (d

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Walla TeleSite 3.0 - 'ts.exe?sug' Cross-Site Scripting

CVE-2005-3577—webappscgi15 nov 2005

Cross-site scripting vulnerability (XSS) in ts.exe (aka ts.cgi) in Walla TeleSite 3.0 and earlier allows remote attacker

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Wizz Forum 1.20 - 'TopicID' SQL Injection

CVE-2005-3682—webappsphp14 nov 2005

Multiple SQL injection vulnerabilities in Wizz Forum 1.20 allow remote attackers to execute arbitrary SQL commands via (

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Unclassified NewsBoard 1.5.3 Patch 3 - Blind SQL Injection

CVE-2005-3686—webappsphp14 nov 2005

SQL injection vulnerability in search.inc.php in Unclassified NewsBoard before 1.5.3 Patch 4 allows remote attackers to

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Arki-DB 1.0 - 'catid' SQL Injection

CVE-2005-3696—webappsphp14 nov 2005

SQL injection vulnerability in Arki-DB 1.0 and 2.0 allows remote attackers to execute arbitrary SQL commands via the cat

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Help Center Live 1.0/1.2/2.0 - 'module.php' Local File Inclusion

CVE-2005-3639—webappsphp14 nov 2005

PHP file inclusion vulnerability in the osTicket module in Help Center Live before 2.0.3 allows remote attackers to acce

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Cyphor 0.19 - 'show.php?id' SQL Injection

CVE-2005-3575—webappsphp14 nov 2005

SQL injection vulnerability in show.php in Cyphor 0.19 and earlier allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Wizz Forum - 'forumreply.php?TopicID' SQL Injection

CVE-2005-3682—webappsphp14 nov 2005

Multiple SQL injection vulnerabilities in Wizz Forum 1.20 allow remote attackers to execute arbitrary SQL commands via (

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Wizz Forum - 'ForumAuthDetails.php?AuthID' SQL Injection

CVE-2005-3682—webappsphp14 nov 2005

Multiple SQL injection vulnerabilities in Wizz Forum 1.20 allow remote attackers to execute arbitrary SQL commands via (

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Codegrrl - 'Protection.php' Code Execution

CVE-2005-3571—webappsphp14 nov 2005

PHP file inclusion vulnerability in protection.php in CodeGrrl (a) PHPCalendar 1.0, (b) PHPClique 1.0, (c) PHPCurrently

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Veritas Storage Foundation 4.0 - VCSI18N_LANG Local Overflow

CVE-2005-3566—locallinux12 nov 2005

Buffer overflow in various ha commands of VERITAS Cluster Server for UNIX before 4.0MP2 allows local users to execute ar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPWebThings 1.4 - 'download.php?File' SQL Injection

CVE-2005-3676—webappsphp12 nov 2005

SQL injection vulnerability in download.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ActiveCampaign 1-2-All Broadcast Email 4.0 - Admin Control Panel 'Username' SQL Injection

CVE-2005-3679—webappsphp12 nov 2005

SQL injection vulnerability in admin/index.php in ActiveCampaign 1-2-All Broadcast Email allows remote attackers to exec

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

XOOPS (wfdownloads) 2.05 Module - Multiple Vulnerabilities

CVE-2005-3681—webappsphp12 nov 2005

SQL injection vulnerability in viewcat.php in XOOPS WF-Downloads module 2.05 allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Sudo Perl 1.6.x - Environment Variable Handling Security Bypass

CVE-2005-4158—locallinux11 nov 2005

Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT e

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Snort 2.4.2 - Back Orifice Pre-Preprocessor Remote (3)

CVE-2005-3252—remotewindows11 nov 2005

Stack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort before 2.4.3 allows remote attackers to exec

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Snort 2.4.2 - Back Orifice Pre-Preprocessor Remote (4)

CVE-2005-3252—remotelinux11 nov 2005

Stack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort before 2.4.3 allows remote attackers to exec

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

RealNetworks RealOne Player/RealPlayer - '.RM' Local Stack Buffer Overflow

CVE-2005-2629—localwindows10 nov 2005

Integer overflow in RealNetworks RealPlayer 8, 10, and 10.5, RealOne Player 1 and 2, and Helix Player 10.0.0 allows remo

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Moodle 1.6dev - SQL Injection / Command Execution

CVE-2005-3649—webappsphp10 nov 2005

jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter.

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Linux Kernel 2.6.x - Sysctl Unregistration Local Denial of Service

CVE-2005-2709—doslinux09 nov 2005

The sysctl functionality (sysctl.c) in Linux kernel before 2.6.14.1 allows local users to cause a denial of service (ker

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SAP Web Application Server 6.x/7.0 - 'frameset.htm?sap-syscmd' Cross-Site Scripting

CVE-2005-3635—webappsphp09 nov 2005

Multiple cross-site scripting (XSS) vulnerabilities in SAP Web Application Server (WAS) 6.10 through 7.00 allow remote a

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SAP Web Application Server 6.x/7.0 - Error Page Cross-Site Scripting

CVE-2005-3636—webappsphp09 nov 2005

Cross-site scripting (XSS) vulnerability in SAP Web Application Server (WAS) 6.10 allows remote attackers to inject arbi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SAP Web Application Server 6.x/7.0 - Open Redirection

CVE-2005-3634—webappsphp09 nov 2005

frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log use

43RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SAP Web Application Server 6.x/7.0 - Input Validation

CVE-2006-1039—remotemultiple09 nov 2005

SAP Web Application Server (WebAS) Kernel before 7.0 allows remote attackers to inject arbitrary bytes into the HTTP res

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Operator Shell (OSH) 1.7-14 - Local Privilege Escalation

CVE-2005-3346—locallinux09 nov 2005

Buffer overflow in the environment variable substitution code in main.c in OSH 1.7-14 allows local users to inject arbit

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Linux chfn (SuSE 9.3/10) - Local Privilege Escalation

CVE-2005-3503—locallinux08 nov 2005

chfn in pwdutils 3.0.4 and earlier on SuSE Linux, and possibly other operating systems, does not properly check argument

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPList Mailing List Manager 2.x - '/admin/admin.php?id' SQL Injection

CVE-2005-3555—webappsphp07 nov 2005

Multiple SQL injection vulnerabilities in PHPlist 2.10.1 and earlier allow authenticated remote attackers with administr

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ToendaCMS 0.6.1 - 'admin.php' Directory Traversal

CVE-2005-3550—webappsphp07 nov 2005

Directory traversal vulnerability in admin.php in toendaCMS before 0.6.2 allows remote attackers to access arbitrary fil

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

F-Secure Internet GateKeeper for Linux < 2.15.484 / Gateway < 2.16 - Local Privilege Escalation

CVE-2005-3546—locallinux07 nov 2005

suid.cgi scripts in F-Secure (1) Internet Gatekeeper for Linux before 2.15.484 and (2) Anti-Virus Linux Gateway before 2

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.