Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.772exploits catalogados

35.760CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8.710Nuclei 4.319Metasploit 3.476✓ só verificadosrecentes populares risco

24.455 exploits

Exploit-DB✓ VexDay Proof

Extensis Portfolio Netpublish Server 7.0 - Server.NP Directory Traversal

CVE-2005-4510—webappscgi20 dez 2005

Directory traversal vulnerability in server.np in NetPublish Server 7 allows remote attackers to read arbitrary files vi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Plogger Beta 2 - Remote File Inclusion

CVE-2005-4573—webappsphp20 dez 2005

PHP remote file include vulnerability in plog-admin-functions.php in Plogger Beta 2 allows remote attackers to execute a

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Acidcat CMS 2.1.13 - 'ID' SQL Injection

CVE-2005-4370—webappsasp19 dez 2005

SQL injection vulnerability in main_content.asp in Acidcat 2.1.13 and earlier allows remote attackers to execute arbitra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Magnolia Search Module 2.1 - Cross-Site Scripting

CVE-2005-4361—webappsphp19 dez 2005

Cross-site scripting (XSS) vulnerability in search.html in Magnolia Content Management Suite 2.1 allows remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP-Fusion 6.0 - 'members.php' Cross-Site Scripting

CVE-2005-4516—webappsphp19 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in PHP-Fusion 6.00.200 through 6.00.300 allow remote attackers to in

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PlaySms 0.8 - 'index.php' Cross-Site Scripting

CVE-2005-4432—webappsphp19 dez 2005

Cross-site scripting (XSS) vulnerability in index.php in PlaySMS 0.8 allows remote attackers to inject arbitrary web scr

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

FLIP 0.9.0.1029 - 'text.php?name' Cross-Site Scripting

CVE-2005-4365—webappsphp19 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in FLIP 0.9.0.1029 allow remote attackers to inject arbitrary web sc

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Hot Banana Web Content Management Suite 5.3 - Cross-Site Scripting

CVE-2005-4364—webappscfm19 dez 2005

Cross-site scripting (XSS) vulnerability in index.cfm in Hot Banana Web Content Management Suite 5.3 allows remote attac

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

allinta CMS 2.3.2 - 'search.asp?searchQuery' Cross-Site Scripting

CVE-2005-4374—webappsasp19 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in Allinta 2.3.2 and earlier allow remote attackers to inject arbitr

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Info-ZIP UnZip 5.x - File Name Buffer Overflow

CVE-2005-4667—remotelinux19 dez 2005

Buffer overflow in UnZip 5.50 and earlier allows user-assisted attackers to execute arbitrary code via a long filename c

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Miraserver 1.0 RC4 - 'index.php?page' SQL Injection

CVE-2005-4408—webappsphp19 dez 2005

Multiple SQL injection vulnerabilities in Miraserver 1.0 RC4 and earlier allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

allinta CMS 2.3.2 - 'faq.asp?s' Cross-Site Scripting

CVE-2005-4374—webappsasp19 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in Allinta 2.3.2 and earlier allow remote attackers to inject arbitr

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Bitweaver 1.1.1 - 'view_post.php?post_id' Cross-Site Scripting

CVE-2005-4380—webappsphp19 dez 2005

Multiple SQL injection vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Miraserver 1.0 RC4 - 'article.php?cat' SQL Injection

CVE-2005-4408—webappsphp19 dez 2005

Multiple SQL injection vulnerabilities in Miraserver 1.0 RC4 and earlier allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

FLIP 0.9.0.1029 - 'forum.php?frame' Cross-Site Scripting

CVE-2005-4365—webappsphp19 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in FLIP 0.9.0.1029 allow remote attackers to inject arbitrary web sc

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Lighthouse CMS 1.1 - Search Cross-Site Scripting

CVE-2005-4780LOWwebappsphp19 dez 2005

Cross-site scripting (XSS) vulnerability in Fidra Lighthouse CMS 1.1.0 and earlier allows remote attackers to inject arb

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Libertas Enterprise CMS 3.0 - 'index.php' Cross-Site Scripting

CVE-2005-4399—webappsphp19 dez 2005

Cross-site scripting (XSS) vulnerability in search/index.php in Libertas Enterprise CMS 3.0 and earlier allows remote at

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Bitweaver 1.1.1 - 'my.php?sort_mode' Cross-Site Scripting

CVE-2005-4380—webappsphp19 dez 2005

Multiple SQL injection vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MailEnable Enterprise Edition 1.1 - 'EXAMINE' Remote Buffer Overflow

CVE-2005-4402—remotewindows19 dez 2005

Buffer overflow in MailEnable Professional 1.71 and earlier, and Enterprise 1.1 and earlier, allows remote authenticated

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MailEnable Enterprise Edition 1.1 - 'EXAMINE' Remote Buffer Overflow

CVE-2005-4456—remotewindows19 dez 2005

Multiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 before patch ME-10009 allow remote attacker

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Komodo CMS 2.1 - Multiple Input Validation Vulnerabilities

CVE-2005-4363—webappsphp19 dez 2005

Cross-site scripting (XSS) vulnerability in the search engine in Komodo CMS 2.1 allows remote attackers to inject arbitr

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Bitweaver 1.1.1 Beta - 'list_galleries.php?sort_mode' Cross-Site Scripting

CVE-2005-4380—webappsphp19 dez 2005

Multiple SQL injection vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Caravel CMS 3.0 Beta 1 - Multiple Cross-Site Scripting Vulnerabilities

CVE-2005-4381—webappsphp19 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in Caravel CMS 3.0 Beta 1 and earlier allow remote attackers to inje

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Bitweaver 1.1.1 - 'message_box.php?sort_mode' Cross-Site Scripting

CVE-2005-4380—webappsphp19 dez 2005

Multiple SQL injection vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Baseline CMS 1.95 - Multiple Input Validation Vulnerabilities

CVE-2005-4378—webappsasp19 dez 2005

SQL injection vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Box UK Amaxus CMS 3.0 - Cross-Site Scripting

CVE-2005-4375—webappsphp19 dez 2005

Cross-site scripting (XSS) vulnerability in Amaxus 3 and earlier allows remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Direct News 4.9 - 'index.php' SQL Injection

CVE-2005-4527—webappsphp19 dez 2005

Multiple SQL injection vulnerabilities in Direct News 4.9 allow remote attackers to execute arbitrary SQL commands via (

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Bitweaver 1.1.1 - 'view.php?blog_id' Cross-Site Scripting

CVE-2005-4380—webappsphp19 dez 2005

Multiple SQL injection vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft IIS - HTTP Request Denial of Service (2)

CVE-2005-4360—doswindows19 dez 2005

The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attacke

45RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Cofax 2.0 - search.htm Cross-Site Scripting

CVE-2005-4385—webappsphp19 dez 2005

Cross-site scripting (XSS) vulnerability in search.htm in Cofax 2.0 RC3 and earlier allows remote attackers to inject ar

38RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.