Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
Qualiteam X-Cart 4.0.8 - 'register.php?mode' SQL Injection
CVE-2005-1822—webappsphp30 mai 2005
Multiple SQL injection vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to execute arbitrary SQL command
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
phpStat 1.5 - 'setup.php' Authentication Bypass (PHP) (1)
CVE-2005-1787—webappsphp30 mai 2005
setup.php in phpStat 1.5 allows remote attackers to bypass authentication and gain administrator privileges by setting t
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Qualiteam X-Cart 4.0.8 - 'product.php' Multiple SQL Injections
CVE-2005-1822—webappsphp30 mai 2005
Multiple SQL injection vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to execute arbitrary SQL command
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Qualiteam X-Cart 4.0.8 - 'help.php?section' Cross-Site Scripting
CVE-2005-1823—webappsphp30 mai 2005
Multiple cross-site scripting (XSS) vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to inject arbitrary
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Qualiteam X-Cart 4.0.8 - 'orders.php?mode' Cross-Site Scripting
CVE-2005-1823—webappsphp30 mai 2005
Multiple cross-site scripting (XSS) vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to inject arbitrary
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Qualiteam X-Cart 4.0.8 - 'search.php?mode' Cross-Site Scripting
CVE-2005-1823—webappsphp30 mai 2005
Multiple cross-site scripting (XSS) vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to inject arbitrary
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Qualiteam X-Cart 4.0.8 - 'home.php' Multiple SQL Injections
CVE-2005-1822—webappsphp30 mai 2005
Multiple SQL injection vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to execute arbitrary SQL command
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Qualiteam X-Cart 4.0.8 - 'error_message.php?id' SQL Injection
CVE-2005-1822—webappsphp30 mai 2005
Multiple SQL injection vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to execute arbitrary SQL command
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Qualiteam X-Cart 4.0.8 - 'help.php?section' SQL Injection
CVE-2005-1822—webappsphp30 mai 2005
Multiple SQL injection vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to execute arbitrary SQL command
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Qualiteam X-Cart 4.0.8 - 'giftcert.php' Multiple SQL Injections
CVE-2005-1822—webappsphp30 mai 2005
Multiple SQL injection vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to execute arbitrary SQL command
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Qualiteam X-Cart 4.0.8 - 'giftcert.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-1823—webappsphp30 mai 2005
Multiple cross-site scripting (XSS) vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to inject arbitrary
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Qualiteam X-Cart 4.0.8 - 'orders.php?mode' SQL Injection
CVE-2005-1822—webappsphp30 mai 2005
Multiple SQL injection vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to execute arbitrary SQL command
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Qualiteam X-Cart 4.0.8 - 'error_message.php?id' Cross-Site Scripting
CVE-2005-1823—webappsphp30 mai 2005
Multiple cross-site scripting (XSS) vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to inject arbitrary
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Gedit 2.x - Filename Format String
CVE-2005-1686—locallinux30 mai 2005
Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service (application crash) via a b
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NPDS 4.8 < 5.0 - 'admin.php?language' Cross-Site Scripting
CVE-2005-1803—webappsphp28 mai 2005
Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to in
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Hosting Controller 6.1 - 'resellerresources.asp?jresourceid' SQL Injection
CVE-2005-1788—webappsasp28 mai 2005
SQL injection vulnerability in resellerresources.asp in Hosting Controller 6.1 Hotfix 2.0 allows remote attackers to exe
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NPDS 4.8 < 5.0 - 'faq.php?categories' Cross-Site Scripting
CVE-2005-1803—webappsphp28 mai 2005
Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to in
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NPDS 4.8 < 5.0 - 'reviews.php?title' Cross-Site Scripting
CVE-2005-1803—webappsphp28 mai 2005
Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to in
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NPDS 4.8 < 5.0 - 'sdv_infos.php?sitename' Cross-Site Scripting
CVE-2005-1803—webappsphp28 mai 2005
Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to in
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NPDS 4.8 < 5.0 - 'links.php?Query' SQL Injection
CVE-2005-1804—webappsphp28 mai 2005
Multiple SQL injection vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to execute arbitra
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NPDS 4.8 < 5.0 - 'reply.php?image_subject' Cross-Site Scripting
CVE-2005-1803—webappsphp28 mai 2005
Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to in
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
OS4E - 'login.asp' SQL Injection
CVE-2005-1805—webappsasp28 mai 2005
SQL injection vulnerability in login.asp in an unknown product by Online Solutions for Educators (OS4E) allows remote at
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NPDS 4.8 < 5.0 - 'powerpack_f.php?language' Cross-Site Scripting
CVE-2005-1803—webappsphp28 mai 2005
Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to in
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Hosting Controller 6.1 - 'plandetails.asp' Information Disclosure
CVE-2005-1788—webappsasp28 mai 2005
SQL injection vulnerability in resellerresources.asp in Hosting Controller 6.1 Hotfix 2.0 allows remote attackers to exe
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NPDS 4.8 < 5.0 Glossaire Module - 'terme' SQL Injection
CVE-2005-1804—webappsphp28 mai 2005
Multiple SQL injection vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to execute arbitra
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Invision Power Board 1.x - Unauthorized Access
CVE-2005-1817—webappsphp28 mai 2005
Invision Power Board (IPB) 1.0 through 1.3 allows remote attackers to edit arbitrary forum posts via a direct request to
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHPMailer 1.7 - 'Data()' Remote Denial of Service
CVE-2005-1807—dosphp28 mai 2005
The Data function in class.smtp.php in PHPMailer 1.7.2 and earlier allows remote attackers to cause a denial of service
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Invision Power Board 2.0.3 - 'login.php' SQL Injection (Tutorial)
CVE-2005-1598—webappsphp27 mai 2005
SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Jaws Glossary 0.4/0.5 - Cross-Site Scripting
CVE-2005-1800—webappsphp27 mai 2005
Cross-site scripting (XSS) vulnerability in Jaws Glossary gadget 0.4 to 0.5.1 allows remote attackers to inject arbitrar
23RISCO
abrir ↗
Metasploit200
Hummingbird Connectivity 10 SP5 LPD Buffer Overflow
CVE-2005-1815—27 mai 2005
Multiple buffer overflows in Hummingbird Connectivity inetD 10.0.0.1 and 9.0.0.4 allows attackers to cause a denial of s
50RISCO
abrir ↗
← anteriorpágina 1763 / 2.974próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.