Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.813exploits catalogados

35.788CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.549GitHub PoC 14.290VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

24.455 exploits

Exploit-DB✓ VexDay Proof

Comersus Backoffice 4.x/5.0/6.0 - 'comersus_Backoffice_supportError.asp?error' Cross-Site Scripting

CVE-2005-3397—webappsasp31 out 2005

Cross-site scripting (XSS) vulnerability in Comersus BackOffice allows remote attackers to inject arbitrary web script o

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

phpFaber CMS 1.3.36 - 'Htmlarea.php' Cross-Site Scripting

CVE-2006-5626—webappsphp30 out 2005

Cross-site scripting (XSS) vulnerability in cms_images/js/htmlarea/htmlarea.php in phpFaber Content Management System (C

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MG2 0.5.1 - Authentication Bypass

CVE-2005-3432—webappsphp29 out 2005

MiniGal 2 (MG2) 0.5.1 allows remote attackers to list password protected images via a request to index.php with the list

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ATutor 1.x - 'forum.inc.php' Arbitrary Command Execution

CVE-2005-3405—webappsphp27 out 2005

ATutor 1.4.1 through 1.5.1-pl1 allows remote attackers to execute arbitrary PHP functions via a direct request to forum.

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ATutor 1.x - 'print.php?section' Remote File Inclusion

CVE-2005-3404—webappsphp27 out 2005

Multiple PHP file inclusion vulnerabilities in ATutor 1.4.1 through 1.5.1-pl1 allow remote attackers to include arbitrar

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ATutor 1.x - 'body_header.inc.php?section' Local File Inclusion

CVE-2005-3404—webappsphp27 out 2005

Multiple PHP file inclusion vulnerabilities in ATutor 1.4.1 through 1.5.1-pl1 allow remote attackers to include arbitrar

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Hasbani-WindWeb/2.0 - GET Remote Denial of Service

CVE-2005-3475—doshardware27 out 2005

Hasbani Web Server (WindWeb) 2.0 allows remote attackers to cause a denial of service (infinite loop) via HTTP crafted G

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ASP Fast Forum - 'error.asp' Cross-Site Scripting

CVE-2005-3422—webappsasp27 out 2005

Cross-site scripting (XSS) vulnerability in error.asp in ASP Fast Forum allows remote attackers to inject arbitrary web

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Novell ZENworks Patch Management 6.0.52 - '/reports/default.asp' Multiple SQL Injections

CVE-2005-3315—webappsasp27 out 2005

Multiple SQL injection vulnerabilities in Novell ZENworks Patch Management 6.x before 6.2.2.181 allow remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Novell ZENworks Patch Management 6.0.52 - '/computers/default.asp?Direction' SQL Injection

CVE-2005-3315—webappsasp27 out 2005

Multiple SQL injection vulnerabilities in Novell ZENworks Patch Management 6.x before 6.2.2.181 allow remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP-Nuke Search Enhanced Module 1.1/2.0 - HTML Injection

CVE-2005-3368—webappsphp26 out 2005

Cross-site scripting (XSS) vulnerability in the Search_Enhanced module in PHP-Nuke 7.9 allows remote attackers to inject

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Flyspray 0.9 - Multiple Cross-Site Scripting Vulnerabilities

CVE-2005-3334—webappsphp26 out 2005

Cross-site scripting (XSS) vulnerability in index.php in Flyspray 0.9.7 through 0.9.8 (devel) allows remote attackers to

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Linux Kernel 2.4.x/2.6.x - 'Bluez' BlueTooth Signed Buffer Index Privilege Escalation (2)

CVE-2005-0750—locallinux26 out 2005

The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

TClanPortal 1.1.3 - 'id' SQL Injection

CVE-2005-4656—webappsphp26 out 2005

SQL injection vulnerability in index.php in TClanPortal 1.1.3 and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

saPHP Lesson - 'add.php?forumid' SQL Injection

CVE-2005-3363—webappsphp26 out 2005

SQL injection vulnerability in Saphp Lesson, possibly saphp Lesson1.1 and saphpLesson2.0, allows remote attackers to exe

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MyBulletinBoard (MyBB) 1.0 - 'usercp.php' SQL Injection

CVE-2005-3326—webappsphp26 out 2005

SQL injection vulnerability in usercp.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Linux Kernel 2.4.x/2.6.x - 'Bluez' BlueTooth Signed Buffer Index Privilege Escalation (2)

CVE-2005-1294—locallinux26 out 2005

The affix_sock_register in the Affix Bluetooth Protocol Stack for Linux might allow local users to gain privileges via a

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Belchior Foundry VCard 2.9 - Remote File Inclusion

CVE-2005-3332—webappsphp26 out 2005

PHP remote file include vulnerability in admin/define.inc.php in Belchior Foundry vCard 2.9 allows remote attackers to e

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

IPBProArcade 2.5.2 - 'GameID' SQL Injection

CVE-2005-4702—webappsphp26 out 2005

SQL injection vulnerability in the favorites module in index.php in IPBProArcade 2.5.2 allows remote attackers to inject

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Snoopy 0.9x/1.0/1.2 - Arbitrary Command Execution

CVE-2005-3330—remotewindows26 out 2005

The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Ampache, and (4)

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

GCards 1.43 - 'news.php' SQL Injection

CVE-2005-3408—webappsphp26 out 2005

SQL injection vulnerability in news.php in gCards version 1.43 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

RSA ACE Agent 5.x - Image Cross-Site Scripting

CVE-2005-3329—webappscgi26 out 2005

Cross-site scripting (XSS) vulnerability in RSA Authentication Agent for Web 5.3 and earlier allows remote attackers to

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Woltlab 1.1/2.x - 'Info-DB Info_db.php' Multiple SQL Injections

CVE-2005-3369—webappsphp26 out 2005

Multiple SQL injection vulnerabilities in the Info-DB module (info_db.php) in Woltlab Burning Board 2.7 and earlier allo

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Snort 2.4.2 - Back Orifice Parsing Remote Buffer Overflow

CVE-2005-3252—remotelinux25 out 2005

Stack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort before 2.4.3 allows remote attackers to exec

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Basic Analysis and Security Engine (BASE) 1.2 - 'Base_qry_main.php' SQL Injection

CVE-2005-3325—webappsphp25 out 2005

Multiple SQL injection vulnerabilities in (1) acid_qry_main.php in Analysis Console for Intrusion Databases (ACID) 0.9.6

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Nuked-klaN 1.7 Sections Module - 'artid' SQL Injection

CVE-2005-3305—webappsphp24 out 2005

Multiple SQL injection vulnerabilities in Nuked Klan 1.7 allow remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Nuked-klaN 1.7 Links Module - 'link_id' SQL Injection

CVE-2005-3305—webappsphp24 out 2005

Multiple SQL injection vulnerabilities in Nuked Klan 1.7 allow remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Nuked-klaN 1.7 Forum Module - Multiple SQL Injections

CVE-2005-3305—webappsphp24 out 2005

Multiple SQL injection vulnerabilities in Nuked Klan 1.7 allow remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SiteTurn Domain Manager Pro - Admin Panel Cross-Site Scripting

CVE-2005-3320—webappsphp24 out 2005

Cross-site scripting (XSS) vulnerability in SiteTurn Domain Manager Pro allows remote attackers to inject arbitrary web

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Nuked-klaN 1.7 Download Module - 'dl_id' SQL Injection

CVE-2005-3305—webappsphp24 out 2005

Multiple SQL injection vulnerabilities in Nuked Klan 1.7 allow remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.