Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.866exploits catalogados
35.812CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.458Referência 22.573GitHub PoC 14.316VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentespopularesrisco
24.455 exploits
Exploit-DB✓ VexDay Proof
JGS-Portal 3.0.1/3.0.2 - 'jgs_portal_beitraggraf.php?year' SQL Injection
CVE-2005-1633—webappsphp16 mai 2005
Multiple SQL injection vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to execute arbitrar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
JGS-Portal 3.0.1/3.0.2 - 'jgs_portal_sponsor.php?id' SQL Injection
CVE-2005-1633—webappsphp16 mai 2005
Multiple SQL injection vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to execute arbitrar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
JGS-Portal 3.0.1/3.0.2 - 'jgs_portal.php?anzahl_beitraege' SQL Injection
CVE-2005-1633—webappsphp16 mai 2005
Multiple SQL injection vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to execute arbitrar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NPDS 4.8/5.0 - 'pollcomments.php?thold' SQL Injection
CVE-2005-1637—webappsphp16 mai 2005
Multiple SQL injection vulnerabilities in NPDS 4.8 and 5.0 allow remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Skull-Splitter Guestbook 1.0/2.0/2.2 - Multiple HTML Injection Vulnerabilities
CVE-2005-1620—webappsphp14 mai 2005
Cross-site scripting (XSS) vulnerability in Skull-Splitter Guestbook 1.0, 2.0 and 2.2 allows remote attackers to inject
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PhotoPost - Arbitrary Data Hash
CVE-2005-1629—webappsphp13 mai 2005
SQL injection vulnerability in member.php for Photopost PHP Pro allows remote attackers to execute arbitrary SQL command
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Ultimate PHP Board 1.8/1.9 - 'viewforum.php' Cross-Site Scripting
CVE-2005-1614—webappsphp13 mai 2005
Cross-site scripting (XSS) vulnerability in viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 allows remote at
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Yahoo! Messenger 5.x/6.0 - URL Handler Remote Denial of Service
CVE-2005-1618—doswindows13 mai 2005
The YMSGR URL handler in Yahoo! Messenger 5.x through 6.0 allows remote attackers to cause a denial of service (disconne
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHPHeaven PHPMyChat 0.14.5 - 'Style.CSS.php3' Cross-Site Scripting
CVE-2005-1619—webappsphp13 mai 2005
Multiple cross-site scripting (XSS) vulnerabilities in (1) start_page.css.php3 (aka start-page.css.php3) or (2) style.cs
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHPHeaven PHPMyChat 0.14.5 - 'Start-Page.CSS.php3' Cross-Site Scripting
CVE-2005-1619—webappsphp13 mai 2005
Multiple cross-site scripting (XSS) vulnerabilities in (1) start_page.css.php3 (aka start-page.css.php3) or (2) style.cs
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
OpenBB 1.0.8 - 'Read.php' SQL Injection
CVE-2005-1612—webappsphp13 mai 2005
SQL injection vulnerability in read.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to execute arbitra
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Ultimate PHP Board 1.8/1.9 - 'viewforum.php' SQL Injection
CVE-2005-1615—webappsphp13 mai 2005
viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 may allow remote attackers to read sensitive data via the po
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
OpenBB 1.0.8 - 'member.php' Cross-Site Scripting
CVE-2005-1613—webappsphp13 mai 2005
Cross-site scripting (XSS) vulnerability in member.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Maxwebportal 1.3x - 'post.asp' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-1561—webappsasp11 mai 2005
Multiple cross-site scripting (XSS) vulnerabilities in post.asp in MaxWebPortal 1.3.5 and earlier allow remote attackers
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apache 1.3.x - HTDigest Realm Command Line Argument Buffer Overflow (2)
CVE-2005-1344—remoteunix11 mai 2005
Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument. N
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Open Solution Quick.Cart 0.3 - 'index.php' Cross-Site Scripting
CVE-2005-1587—webappsphp11 mai 2005
Cross-site scripting (XSS) vulnerability in index.php for Quick.cart 0.3.0 allows remote attackers to inject arbitrary w
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 2.2.x/2.3.x/2.4.x/2.5.x/2.6.x - ELF Core Dump Local Buffer Overflow (PoC)
CVE-2005-1263—doslinux11 mai 2005
The elf_core_dump function in binfmt_elf.c for Linux kernel 2.x.x to 2.2.27-rc2, 2.4.x to 2.4.31-pre1, and 2.6.x to 2.6.
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WowBB 1.6 - 'View_User.php' SQL Injection
CVE-2004-2181—webappsphp10 mai 2005
Multiple SQL injection vulnerabilities in WowBB Forum 1.61 allow remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
GeoVision Digital Surveillance System 6.0 4/6.1 - Unauthorized '.JPEG' Image Access
CVE-2005-1552—remotewindows10 mai 2005
GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0, when set to create JPEG images, does not properly protect
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NukeET 3.0/3.1 - Base64 Codigo Variable Cross-Site Scripting
CVE-2005-1610—webappsphp10 mai 2005
Cross-site scripting (XSS) vulnerability in security.php for Tru-Zone NukeET 3.0 and 3.1 allows remote attackers to inje
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
AOL Instant Messenger 4.x/5.x - Smiley Icon Location Remote Denial of Service
CVE-2005-1655—doswindows09 mai 2005
AOL Instant Messenger 5.5.x and earlier allows remote attackers to cause a denial of service (client crash) via an inval
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Positive Software H-Sphere Winbox 2.4 - Sensitive Logfile Content Disclosure
CVE-2005-1606—localwindows09 mai 2005
H-Sphere Winbox 2.4.2 and 2.4.3 RC1 stores sensitive information such as username and password in plaintext in world-rea
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Easy Message Board - Remote Command Execution
CVE-2005-1550—webappscgi09 mai 2005
easymsgb.pl in Easy Message Board allows remote attackers to execute arbitrary commands via shell metacharacters in the
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Advanced Guestbook 2.3.1/2.4 - 'index.php?Entry' SQL Injection
CVE-2005-1548—webappsphp09 mai 2005
SQL injection vulnerability in index.php in Advanced Guestbook 2.3.1 allows remote attackers to execute arbitrary SQL co
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
CodeThatShoppingCart 1.3.1 - 'catalog.php?id' SQL Injection
CVE-2005-1594—webappsphp09 mai 2005
SQL injection vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1 allows remote attackers to execute arbitrary
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
CodeThatShoppingCart 1.3.1 - 'catalog.php?id' Cross-Site Scripting
CVE-2005-1593—webappsphp09 mai 2005
Cross-site scripting (XSS) vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1 allows remote attackers to injec
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
phpBB 2.0.x - 'BBCode.php' URL Tag
CVE-2005-1193—webappsjsp09 mai 2005
The bbencode_second_pass and make_clickable functions in bbcode.php for phpBB before 2.0.15, as used in viewtopic.php, p
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Orenosv HTTP/FTP Server 0.8.1 - 'CGISSI.exe' Remote Buffer Overflow (PoC)
CVE-2005-1666—doswindows09 mai 2005
Multiple buffer overflows in Orenosv HTTP/FTP Server 0.8.1 allow remote authenticated users to cause a denial of service
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Remote File Manager 1.0 - Denial of Service
CVE-2005-1603—doswindows08 mai 2005
NiteEnterprises Remote File Manager 1.0 allows remote attackers to cause a denial of service (crash) via a crafted strin
23RISCO
abrir ↗
Exploit-DB
Sun Solaris AnswerBook2 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-0549—webappssolaris07 mai 2005
Cross-site scripting (XSS) vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers
23RISCO
abrir ↗
← anteriorpágina 667 / 816próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.