Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.772exploits catalogados

35.760CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8.710Nuclei 4.319Metasploit 3.476✓ só verificadosrecentes populares risco

24.455 exploits

Exploit-DB✓ VexDay Proof

PortalApp 3.3/4.0 - 'login.asp' Cross-Site Scripting

CVE-2005-4482—webappsasp21 dez 2005

Cross-site scripting (XSS) vulnerability in login.asp in PortalApp 3.3 and earlier allows remote attackers to inject arb

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

OpenEdit 4.0 - Results.HTML Cross-Site Scripting

CVE-2005-4476—webappsjsp21 dez 2005

Cross-site scripting (XSS) vulnerability in store/search/results.html in OpenEdit 4.0 and earlier allows remote attacker

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ProjectApp 3.3 - 'pmprojects.asp?projectid' Cross-Site Scripting

CVE-2005-4485—webappsasp21 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in ProjectApp 3.3 and earlier allow remote attackers to inject arbit

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Commercial Interactive Media SCOOP! 2.3 - 'prePurchaserRegistration.asp?Invalid' Cross-Site Scripting

CVE-2005-4490—webappsasp21 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in SCOOP! 2.3 and earlier allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Sitekit CMS 6.6 - 'Default.aspx' Multiple Cross-Site Scripting Vulnerabilities

CVE-2005-4491—webappsasp21 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in Sitekit CMS 6.6 and earlier allow remote attackers to inject arbi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ComputerOil Redakto CMS 3.2 - Multiple Cross-Site Scripting Vulnerabilities

CVE-2005-4488—webappscgi21 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in index.tpl in Redakto WCMS 3.2 and earlier allow remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ProjectApp 3.3 - 'default.asp?skin_number' Cross-Site Scripting

CVE-2005-4485—webappsasp21 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in ProjectApp 3.3 and earlier allow remote attackers to inject arbit

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ProjectApp 3.3 - 'cat.asp?keywords' Cross-Site Scripting

CVE-2005-4485—webappsasp21 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in ProjectApp 3.3 and earlier allow remote attackers to inject arbit

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPSlash 0.8.1 - 'article.php' SQL Injection

CVE-2005-4479—webappsphp21 dez 2005

SQL injection vulnerability in article.php in phpSlash 0.8.1 and earlier allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Scoop 1.1 RC1 - Missing Story Error Cross-Site Scripting

CVE-2005-4489—webappsphp21 dez 2005

Cross-site scripting (XSS) vulnerability in Scoop 1.1 RC1 and earlier allows remote attackers to inject arbitrary web sc

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Papoo 2.1.2 - 'print.php' Multiple SQL Injections

CVE-2005-4478—webappsphp21 dez 2005

Multiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier allow remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Commercial Interactive Media SCOOP! 2.3 - 'category.asp' Multiple Cross-Site Scripting Vulnerabilities

CVE-2005-4490—webappsasp21 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in SCOOP! 2.3 and earlier allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ProjectApp 3.3 - 'search_employees.asp?keywords' Cross-Site Scripting

CVE-2005-4485—webappsasp21 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in ProjectApp 3.3 and earlier allow remote attackers to inject arbit

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Scoop 1.1 RC1 Search Module - Multiple Cross-Site Scriptings

CVE-2005-4489—webappsphp21 dez 2005

Cross-site scripting (XSS) vulnerability in Scoop 1.1 RC1 and earlier allows remote attackers to inject arbitrary web sc

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Commercial Interactive Media SCOOP! 2.3 - 'articleZone.asp?Invalid' Cross-Site Scripting

CVE-2005-4490—webappsasp21 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in SCOOP! 2.3 and earlier allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

IntranetApp 3.3 - 'content.asp' Multiple Cross-Site Scripting Vulnerabilities

CVE-2005-4484—webappsasp21 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in IntranetApp 3.3 and earlier allow remote attackers to inject arbi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Papoo 2.1.2 - 'index.php?menuid' SQL Injection

CVE-2005-4478—webappsphp21 dez 2005

Multiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier allow remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ProjectApp 3.3 - 'links.asp?keywords' Cross-Site Scripting

CVE-2005-4485—webappscgi21 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in ProjectApp 3.3 and earlier allow remote attackers to inject arbit

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Papoo 2.1.2 - 'Guestbook.php?menuid' SQL Injection

CVE-2005-4478—webappsphp21 dez 2005

Multiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier allow remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Commercial Interactive Media SCOOP! 2.3 - 'lostPassword.asp' Multiple Cross-Site Scripting Vulnerabilities

CVE-2005-4490—webappsasp21 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in SCOOP! 2.3 and earlier allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Tolva 0.1 - 'Usermods.php' Remote File Inclusion

CVE-2005-4462—webappsphp21 dez 2005

PHP remote file include vulnerability in usermods.php in Tolva PHP website system 0.1.0 allows remote attackers to execu

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Eudora Qualcomm WorldMail 3.0 - 'IMAPd' Remote Overflow

CVE-2006-0637—remotewindows20 dez 2005

Buffer overflow in cram.dll in QUALCOMM Eudora WorldMail 3.0 allows remote attackers to execute arbitrary code via an IM

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPGedView 3.3.7 - Remote Code Execution

CVE-2005-4467—webappsphp20 dez 2005

Directory traversal vulnerability in help_text_vars.php in PHPGedView 3.3.7 and earlier allows remote attackers to read

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Enterprise Connector 1.0.2 - 'main.php' SQL Injection

CVE-2005-4563—webappsphp20 dez 2005

SQL injection vulnerability in main.php in Enterprise Heart Enterprise Connector 1.0.2 allows remote attackers to execut

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Quick Square Development Honeycomb Archive 3.0 - 'CategoryResults.cfm' Multiple SQL Injections

CVE-2005-4419—webappscfm20 dez 2005

Multiple SQL injection vulnerabilities in CategoryResults.cfm in Honeycomb Archive and Honeycomb Archive Enterprise 3.0

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Extensis Portfolio Netpublish Server 7.0 - Server.NP Directory Traversal

CVE-2005-4510—webappscgi20 dez 2005

Directory traversal vulnerability in server.np in NetPublish Server 7 allows remote attackers to read arbitrary files vi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPGedView 3.3.7 - Remote Code Execution

CVE-2005-4468—webappsphp20 dez 2005

PHP remote file include vulnerability in help_text_vars.php in PHPGedView 3.3.7 and earlier allows remote attackers to e

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

AbleDesign D-Man 3.0 - 'Title' Cross-Site Scripting

CVE-2005-4435—webappsphp20 dez 2005

Cross-site scripting (XSS) vulnerability in index.php AbleDesign D-Man 3.x allows remote attackers to inject arbitrary w

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Golden FTP Server 1.92 - 'APPE' Remote Overflow (Metasploit)

CVE-2005-4553—remotewindows20 dez 2005

Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long APPE command. NO

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

LiveJournal - Cleanhtml.pl HTML Injection

CVE-2005-4454—webappscgi20 dez 2005

Validate-before-filter vulnerability in cleanhtml.pl 1.129 in LiveJournal CVS before Dec 7 2005, when the cleancss optio

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.