Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
phpMyAdmin 2.x - 'server_databases.php' Cross-Site Scripting
CVE-2005-3301—webappsphp20 mai 2005
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4-pl3 allow remote attackers to inject arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
cPanel 9.1 - 'User' Cross-Site Scripting
CVE-2005-2021—webappsphp20 mai 2005
Cross-site scripting (XSS) vulnerability in cPanel 9.1 and earlier allows remote attackers to inject arbitrary web scrip
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WebAPP 0.9.9.2.1 - Remote Command Execution (2)
CVE-2005-1628—webappscgi20 mai 2005
apage.cgi in WebAPP 0.9.9.2.1, and possibly earlier versions, allows remote attackers to execute arbitrary commands via
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Picasm 1.10/1.12 - Error Generation Remote Buffer Overflow
CVE-2005-1679—remotefreebsd20 mai 2005
Stack-based buffer overflow in the error directive in picasm 1.12b and earlier allows attackers to execute arbitrary cod
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP Advanced Transfer Manager 1.21 - Arbitrary File Inclusion
CVE-2005-1681—webappsphp19 mai 2005
PHP remote file inclusion vulnerability in common.php in phpATM 1.21, and possibly earlier versions, allows remote attac
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
D-Link DSL Router - Remote Authentication Bypass
CVE-2005-1827—remotehardware19 mai 2005
D-Link DSL-504T allows remote attackers to bypass authentication and gain privileges, such as upgrade firmware, restart
28RISCO
abrir ↗
Metasploit400
Novell ZENworks 6.5 Desktop/Server Management Overflow
CVE-2005-1543—19 mai 2005
Multiple stack-based and heap-based buffer overflows in Remote Management authentication (zenrem32.exe) on Novell ZENwor
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
BakBone NetVault 6.x/7.x - Remote Heap Buffer Overflow (1)
CVE-2005-1547—remotewindows17 mai 2005
Heap-based buffer overflow in the demo version of Bakbone Netvault, and possibly other versions, allows remote attackers
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
War Times - Remote Game Server Denial of Service
CVE-2005-1718—doswindows17 mai 2005
Buffer overflow in LS Games War Times 1.03 and earlier allows remote attackers to cause a denial of service (server cras
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.12-rc4 - 'ioctl_by_bdev' Local Denial of Service
CVE-2005-1589—doslinux17 mai 2005
The pkt_ioctl function in the pktcdvd block device ioctl handler (pktcdvd.c) in Linux kernel 2.6.12-rc4 and earlier call
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
BakBone NetVault 6.x/7.x - Remote Heap Buffer Overflow (1)
CVE-2005-1009—remotewindows17 mai 2005
Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow (1) remote attackers to execute arbitrary code via a mod
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Gaim 1.2.1 - URL Handling Remote Stack Overflow
CVE-2005-1261—doslinux17 mai 2005
Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execute arbitrar
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
JGS-Portal 3.0.1/3.0.2 - 'jgs_portal_statistik.php?year' SQL Injection
CVE-2005-1633—webappsphp16 mai 2005
Multiple SQL injection vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to execute arbitrar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NPDS 4.8/5.0 - 'pollcomments.php?thold' SQL Injection
CVE-2005-1637—webappsphp16 mai 2005
Multiple SQL injection vulnerabilities in NPDS 4.8 and 5.0 allow remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
JGS-Portal 3.0.1/3.0.2 - 'jgs_portal_themengraf.php?year' SQL Injection
CVE-2005-1633—webappsphp16 mai 2005
Multiple SQL injection vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to execute arbitrar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
JGS-Portal 3.0.1/3.0.2 - 'jgs_portal_beitraggraf.php?year' SQL Injection
CVE-2005-1633—webappsphp16 mai 2005
Multiple SQL injection vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to execute arbitrar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Mozilla Suite And Firefox - DOM Property Overrides Code Execution
CVE-2005-1532—remotemultiple16 mai 2005
Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objec
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
JGS-Portal 3.0.1/3.0.2 - 'jgs_portal_viewsgraf.php?tag' SQL Injection
CVE-2005-1633—webappsphp16 mai 2005
Multiple SQL injection vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to execute arbitrar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
JGS-Portal 3.0.1/3.0.2 - 'jgs_portal_mitgraf.php?year' SQL Injection
CVE-2005-1633—webappsphp16 mai 2005
Multiple SQL injection vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to execute arbitrar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PServ 3.2 - Source Code Disclosure
CVE-2005-1366—webappscgi16 mai 2005
Pico Server (pServ) 3.2 and earlier allows remote attackers to obtain the source code for CGI scripts via "dirname/../cg
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
JGS-Portal 3.0.1/3.0.2 - 'jgs_portal.php?anzahl_beitraege' SQL Injection
CVE-2005-1633—webappsphp16 mai 2005
Multiple SQL injection vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to execute arbitrar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NPDS 4.8/5.0 - 'comments.php?thold' SQL Injection
CVE-2005-1637—webappsphp16 mai 2005
Multiple SQL injection vulnerabilities in NPDS 4.8 and 5.0 allow remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
JGS-Portal 3.0.1/3.0.2 - 'jgs_portal_sponsor.php?id' SQL Injection
CVE-2005-1633—webappsphp16 mai 2005
Multiple SQL injection vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to execute arbitrar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
pserv 3.2 - Directory Traversal
CVE-2005-1365—remotelinux16 mai 2005
Pico Server (pServ) 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multiple leadin
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Skull-Splitter Guestbook 1.0/2.0/2.2 - Multiple HTML Injection Vulnerabilities
CVE-2005-1620—webappsphp14 mai 2005
Cross-site scripting (XSS) vulnerability in Skull-Splitter Guestbook 1.0, 2.0 and 2.2 allows remote attackers to inject
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHPHeaven PHPMyChat 0.14.5 - 'Style.CSS.php3' Cross-Site Scripting
CVE-2005-1619—webappsphp13 mai 2005
Multiple cross-site scripting (XSS) vulnerabilities in (1) start_page.css.php3 (aka start-page.css.php3) or (2) style.cs
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Yahoo! Messenger 5.x/6.0 - URL Handler Remote Denial of Service
CVE-2005-1618—doswindows13 mai 2005
The YMSGR URL handler in Yahoo! Messenger 5.x through 6.0 allows remote attackers to cause a denial of service (disconne
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
OpenBB 1.0.8 - 'member.php' Cross-Site Scripting
CVE-2005-1613—webappsphp13 mai 2005
Cross-site scripting (XSS) vulnerability in member.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
OpenBB 1.0.8 - 'Read.php' SQL Injection
CVE-2005-1612—webappsphp13 mai 2005
SQL injection vulnerability in read.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to execute arbitra
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PhotoPost - Arbitrary Data Hash
CVE-2005-1629—webappsphp13 mai 2005
SQL injection vulnerability in member.php for Photopost PHP Pro allows remote attackers to execute arbitrary SQL command
23RISCO
abrir ↗
← anteriorpágina 1765 / 2.974próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.