Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
DUware DUamazon Pro 3.0/3.1 - 'detail.asp?iSub' SQL Injection
CVE-2005-2046—webappsasp22 jun 2005
Multiple SQL injection vulnerabilities in DUware DUamazon Pro 3.0 and 3.1 allow remote attackers to execute arbitrary SQ
23RISCO
abrir ↗
Metasploit500
Veritas Backup Exec Windows Remote Agent Overflow
CVE-2005-0773—22 jun 2005
Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.3
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
DUware DUamazon Pro 3.0/3.1 - 'productEdit.asp?iCat' SQL Injection
CVE-2005-2046—webappsphp22 jun 2005
Multiple SQL injection vulnerabilities in DUware DUamazon Pro 3.0 and 3.1 allow remote attackers to execute arbitrary SQ
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
DUware DUamazon Pro 3.0/3.1 - 'review.asp?iPro' SQL Injection
CVE-2005-2046—webappsasp22 jun 2005
Multiple SQL injection vulnerabilities in DUware DUamazon Pro 3.0 and 3.1 allow remote attackers to execute arbitrary SQ
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
DUware DUamazon Pro 3.0/3.1 - 'catDelete.asp?iCat' SQL Injection
CVE-2005-2046—webappsasp22 jun 2005
Multiple SQL injection vulnerabilities in DUware DUamazon Pro 3.0 and 3.1 allow remote attackers to execute arbitrary SQ
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
DUware DUamazon Pro 3.0/3.1 - 'type.asp?iType' SQL Injection
CVE-2005-2046—webappsphp22 jun 2005
Multiple SQL injection vulnerabilities in DUware DUamazon Pro 3.0 and 3.1 allow remote attackers to execute arbitrary SQ
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Simple Machines Forum (SMF) 1.0.4 - 'modify' SQL Injection
CVE-2005-4891—webappsphp21 jun 2005
Simple Machine Forum (SMF) versions 1.0.4 and earlier have an SQL injection vulnerability that allows remote attackers t
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MercuryBoard 1.1.4 - SQL Injection
CVE-2005-2028—webappsphp21 jun 2005
SQL injection vulnerability in index.php for MercuryBoard 1.1.4 and earlier allows remote attackers to execute arbitrary
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
UApplication Ublog Reload 1.0.5 - 'Trackback.asp' Cross-Site Scripting
CVE-2005-2010—webappsasp20 jun 2005
Cross-site scripting (XSS) vulnerability in trackback.asp in Ublog Reload 1.0.5 allows remote attackers to inject arbitr
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PeerCast 0.1211 - Remote Format String
CVE-2005-1806—remotelinux20 jun 2005
Format string vulnerability in PeerCast 0.1211 and earlier allows remote attackers to execute arbitrary code via format
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
RaXnet Cacti 0.5/0.6/0.8 - 'Config_Settings.php' Remote File Inclusion
CVE-2005-1526—webappsphp20 jun 2005
PHP remote file inclusion vulnerability in config_settings.php in Cacti before 0.8.6e allows remote attackers to execute
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
I-Gallery - Folder Argument Directory Traversal
CVE-2005-2033—webappsasp20 jun 2005
Directory traversal vulnerability in folderview.asp for Blue-Collar Productions i-Gallery 3.3 allows remote attackers to
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PAFaq - Question Cross-Site Scripting
CVE-2005-2011—webappsphp20 jun 2005
Multiple cross-site scripting (XSS) vulnerabilities in paFAQ 1.0 Beta 4 allow remote attackers to inject arbitrary web s
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Ublog Reload 1.0.5 - 'blog_comment.asp?y' SQL Injection
CVE-2005-2009—webappsasp20 jun 2005
Multiple SQL injection vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to execute arbitrary SQL commands vi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Ublog Reload 1.0.5 - 'index.asp' Multiple SQL Injections
CVE-2005-2009—webappsasp20 jun 2005
Multiple SQL injection vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to execute arbitrary SQL commands vi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
RaXnet Cacti 0.5/0.6/0.8 - 'Top_Graph_Header.php' Remote File Inclusion
CVE-2005-1524—webappsphp20 jun 2005
PHP file inclusion vulnerability in top_graph_header.php in Cacti 0.8.6d and possibly earlier versions allows remote att
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PAFaq - Administrator 'Username' SQL Injection
CVE-2005-2012—webappsphp20 jun 2005
Multiple SQL injection vulnerabilities in login in paFAQ 1.0 Beta 4 allow remote attackers to execute arbitrary SQL comm
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Claroline E-Learning 1.6 - Remote Hash SQL Injection (2)
CVE-2005-1375—webappsphp19 jun 2005
Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow re
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
JBoss 3.x/4.0.2 - HTTP Request Remote Information Disclosure
CVE-2005-2006—remotemultiple17 jun 2005
JBOSS 3.2.2 through 3.2.7 and 4.0.2 allows remote attackers to obtain sensitive information via a GET request (1) with a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
osCommerce 2.1/2.2 - Multiple HTTP Response Splitting Vulnerabilities
CVE-2005-1951—webappsphp17 jun 2005
Multiple HTTP Response Splitting vulnerabilities in osCommerce 2.2 Milestone 2 and earlier allow remote attackers to spo
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Claroline E-Learning 1.6 - Remote Hash SQL Injection (1)
CVE-2005-1375—webappsphp17 jun 2005
Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow re
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Cool Cafe Chat 1.2.1 - 'login.asp' SQL Injection
CVE-2005-2035—webappsasp16 jun 2005
SQL injection vulnerability in login.asp for Cool Cafe (Cool Café) Chat 1.2.1 allows remote attackers to execute arbitra
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Ultimate PHP Board 1.8/1.9 - Weak Password Encryption
CVE-2005-2030—webappsphp16 jun 2005
Ultimate PHP Board (UPB) 1.9.6 GOLD uses weak encryption for passwords in the users.dat file, which allows attackers to
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ATutor 1.4.3 - 'search.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-2044—webappsphp16 jun 2005
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitr
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ATutor 1.4.3 - 'content.php?cid' Cross-Site Scripting
CVE-2005-2044—webappsphp16 jun 2005
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitr
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ATutor 1.4.3 - 'send_message.php?l' Cross-Site Scripting
CVE-2005-2044—webappsphp16 jun 2005
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitr
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ATutor 1.4.3 - 'subscribe_forum.php?us' Cross-Site Scripting
CVE-2005-2044—webappsphp16 jun 2005
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitr
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ATutor 1.4.3 - 'contact.php?subject' Cross-Site Scripting
CVE-2005-2044—webappsphp16 jun 2005
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitr
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ATutor 1.4.3 - 'browse.php?show_course' Cross-Site Scripting
CVE-2005-2044—webappsphp16 jun 2005
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitr
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ATutor 1.4.3 - 'tile.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-2044—webappsphp16 jun 2005
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitr
23RISCO
abrir ↗
← anteriorpágina 1760 / 2.974próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.