Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados

41.197CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentes populares risco

89.220 exploits

Exploit-DB✓ VexDay Proof

CuteNews 1.4.1 - 'show_archives.php' Traversal Arbitrary File Access

CVE-2005-3507—webappsphp02 nov 2005

Directory traversal vulnerability in CuteNews 1.4.1 allows remote attackers to include arbitrary files, execute code, an

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Scorched 3D 39.1 - Multiple Vulnerabilities (PoC)

CVE-2005-3487—doswindows02 nov 2005

Multiple buffer overflows in Scorched 3D 39.1 (bf) and earlier allow remote attackers to execute arbitrary code via vari

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

FlatFrag 0.3 - Buffer Overflow (Denial of Service) (PoC)

CVE-2005-3491—doswindows02 nov 2005

Multiple buffer overflows in the receiver function in loop.c in FlatFrag 0.3 and earlier allow remote attackers to execu

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Scorched 3D 39.1 - Multiple Vulnerabilities (PoC)

CVE-2005-3488—doswindows02 nov 2005

Scorched 3D 39.1 (bf) and earlier allows remote attackers to cause a denial of service (long loop and server hang) via a

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

GO-Global Windows Clients 3.1.0.3270 - Buffer Overflow (PoC)

CVE-2005-3483—doswindows02 nov 2005

Buffer overflow in GO-Global for Windows 3.1.0.3270 and earlier allows remote attackers to execute arbitrary code via a

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Simple PHP Blog 0.4 - 'colors.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2005-3473—webappscgi02 nov 2005

Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog 0.4.5 and earlier allow remote attackers to injec

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Simple PHP Blog 0.4 - 'preview_cgi.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2005-3473—webappscgi02 nov 2005

Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog 0.4.5 and earlier allow remote attackers to injec

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPWebThings 0.4.4 - 'forum.php' Cross-Site Scripting

CVE-2005-3584—webappsphp02 nov 2005

Cross-site scripting (XSS) vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to inject arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Glider collectn kill 1.0.0.0 - Buffer Overflow (PoC)

CVE-2005-3485—doswindows02 nov 2005

Buffer overflow in Glider Collect'n kill 1.0.0.0 allows remote attackers to execute arbitrary code via a gl_playerEnter

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Battle Carry .005 Socket Termination - Denial of Service

CVE-2005-3493—doswindows02 nov 2005

Battle Carry .005 and earlier allows remote attackers to cause a denial of service (inaccessible port) via a large packe

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Asus VideoSecurity Online 3.5 - Web Server Authentication Buffer Overflow

CVE-2005-3489—remotewindows02 nov 2005

Buffer overflow in Asus Video Security 3.5.0.0 and earlier, when using authorization, allows remote attackers to execute

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 6 - Malformed HTML Parsing Denial of Service (1)

CVE-2005-4717—doswindows01 nov 2005

Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1, Windows XP SP2, and Windows Se

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Elite Forum 1.0 - HTML Injection

CVE-2005-3412—webappsphp01 nov 2005

Cross-site scripting (XSS) vulnerability in Elite Forum 1.0.0.0 allows remote attackers to inject arbitrary web script o

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Belchior Foundry vCard Pro 3.1 - 'Addrbook.php' SQL Injection

CVE-2005-4769—webappsphp01 nov 2005

SQL injection vulnerability in addrbook.php in Belchior Foundry vCard PRO 3.1 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

VUBB - 'index.php' Cross-Site Scripting

CVE-2005-3512—webappsphp01 nov 2005

Cross-site scripting (XSS) vulnerability in index.php in VUBB alpha rc1 allows remote attackers to inject arbitrary web

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Comersus Backoffice 4.x/5.0/6.0 - 'comersus_Backoffice_supportError.asp?error' Cross-Site Scripting

CVE-2005-3397—webappsasp31 out 2005

Cross-site scripting (XSS) vulnerability in Comersus BackOffice allows remote attackers to inject arbitrary web script o

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

OaBoard 1.0 - 'forum.php' Multiple SQL Injections

CVE-2005-3394—webappsphp31 out 2005

Multiple SQL injection vulnerabilities in forum.php in oaboard forum 1.0 allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPCafe Tutorial Manager - 'index.php' SQL Injection

CVE-2005-3478—webappsphp31 out 2005

SQL injection vulnerability in index.php in PHPCafe.net Tutorials Manager 1.0 Beta 2 allows remote attackers to execute

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Snitz Forum 2000 - 'post.asp' Cross-Site Scripting

CVE-2005-3411—webappsasp31 out 2005

Cross-site scripting (XSS) vulnerability in post.asp in Snitz Forums 2000 3.4.05 allows remote attackers to inject arbit

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP 4.x/5.0.x - Arbitrary File Upload GLOBAL Variable Overwrite

CVE-2005-3390—remotephp31 out 2005

The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows rem

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP 4.x - PHPInfo Cross-Site Scripting

CVE-2005-3388—webappsphp31 out 2005

Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remot

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Subdreamer 2.2.1 - SQL Injection / Command Execution

CVE-2005-3423—webappsphp31 out 2005

Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 allow remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Invision Gallery 2.0.3 - 'index.php' SQL Injection

CVE-2005-3395—webappsphp31 out 2005

SQL injection vulnerability in Invision Gallery 2.0.3 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

phpMyAdmin 2.7 - 'sql.php' Cross-Site Scripting

CVE-2006-1803—webappsphp31 out 2005

Cross-site scripting (XSS) vulnerability in sql.php in phpMyAdmin 2.7.0-pl1 allows remote attackers to inject arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

phpFaber CMS 1.3.36 - 'Htmlarea.php' Cross-Site Scripting

CVE-2006-5626—webappsphp30 out 2005

Cross-site scripting (XSS) vulnerability in cms_images/js/htmlarea/htmlarea.php in phpFaber Content Management System (C

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MG2 0.5.1 - Authentication Bypass

CVE-2005-3432—webappsphp29 out 2005

MiniGal 2 (MG2) 0.5.1 allows remote attackers to list password protected images via a request to index.php with the list

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ATutor 1.x - 'forum.inc.php' Arbitrary Command Execution

CVE-2005-3405—webappsphp27 out 2005

ATutor 1.4.1 through 1.5.1-pl1 allows remote attackers to execute arbitrary PHP functions via a direct request to forum.

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ASP Fast Forum - 'error.asp' Cross-Site Scripting

CVE-2005-3422—webappsasp27 out 2005

Cross-site scripting (XSS) vulnerability in error.asp in ASP Fast Forum allows remote attackers to inject arbitrary web

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Novell ZENworks Patch Management 6.0.52 - '/computers/default.asp?Direction' SQL Injection

CVE-2005-3315—webappsasp27 out 2005

Multiple SQL injection vulnerabilities in Novell ZENworks Patch Management 6.x before 6.2.2.181 allow remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ATutor 1.x - 'body_header.inc.php?section' Local File Inclusion

CVE-2005-3404—webappsphp27 out 2005

Multiple PHP file inclusion vulnerabilities in ATutor 1.4.1 through 1.5.1-pl1 allow remote attackers to include arbitrar

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.