Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.772exploits catalogados

35.760CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8.710Nuclei 4.319Metasploit 3.476✓ só verificadosrecentes populares risco

24.455 exploits

Exploit-DB✓ VexDay Proof

MyBB 1.0.2 - Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-0470—webappsphp26 dez 2005

Cross-site scripting (XSS) vulnerability in search.php in MyBulletinBoard (MyBB) 1.02 allows remote attackers to inject

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

LogicBill 1.0 - Multiple SQL Injections

CVE-2005-4430—webappsphp25 dez 2005

SQL injection vulnerability in LogicBill 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

EZ Invoice Inc. EZI 2.0 - 'Invoices.php' SQL Injection

CVE-2005-3845—webappsphp25 dez 2005

SQL injection vulnerability in invoices.php in EZ Invoice Inc 2.0 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CS-Cart - Multiple SQL Injections

CVE-2005-4429—webappsphp25 dez 2005

SQL injection vulnerability in CS-Cart 1.3.0 allows remote attackers to execute arbitrary SQL commands via the (1) sort_

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Dev Web Management System 1.5 - 'cat' SQL Injection

CVE-2005-4554—webappsphp24 dez 2005

Multiple SQL injection vulnerabilities in DEV web management system 1.5 and earlier allow remote attackers to execute ar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

oracle Application server discussion forum portlet - Multiple Vulnerabilities

CVE-2005-4550—webappsjsp23 dez 2005

The PORTAL schema in Oracle Application Server (OracleAS) Discussion Forum Portlet allows remote attackers to obtain the

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP-Fusion 6.00.3 - 'rating' SQL Injection

CVE-2005-4517—webappsphp23 dez 2005

SQL injection vulnerability in PHP-Fusion 6.00.200 through 6.00.300 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PaperThin CommonSpot Content Server 4.5 - Cross-Site Scripting

CVE-2005-4574—webappscfm23 dez 2005

Cross-site scripting (XSS) vulnerability in loader.cfm in PaperThin CommonSpot Content Server 4.5 and earlier allows rem

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MusicBox 2.3 - 'type' SQL Injection

CVE-2005-4500—webappsphp22 dez 2005

SQL injection vulnerability in MusicBox 2.3 allows remote attackers to execute arbitrary SQL commands via the (1) show a

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

httprint 202.0 - HTTP Response Server Field Arbitrary Script Injection

CVE-2005-4502—remotemultiple22 dez 2005

Cross-site scripting (XSS) vulnerability in httprint v202, and possibly other versions before v301, allows remote attack

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

McAfee VirusScan 8.0 - Path Specification Privilege Escalation

CVE-2005-4505—localwindows22 dez 2005

Unquoted Windows search path vulnerability in McAfee VirusScan Enterprise 8.0i (patch 11) and CMA 3.5 (patch 5) might al

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Apple Mac OSX - KHTMLParser Remote Denial of Service

CVE-2005-4504—dososx22 dez 2005

The khtml::RenderTableSection::ensureRows function in KHTMLParser in Apple Mac OS X 10.4.3 and earlier, as used by Safar

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Tangora Portal CMS 4.0 - 'Action' Cross-Site Scripting

CVE-2005-4497—webappsasp22 dez 2005

Cross-site scripting (XSS) vulnerability in Tangora Portal CMS 4.0 and earlier allows remote attackers to inject arbitra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

httprint 202.0 - HTTP Response Server Field Overflow Denial of Service

CVE-2005-4503—dosmultiple22 dez 2005

httprint v202, and possibly other versions before v301, allows remote attackers to cause a denial of service (crash) via

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Beehive Forum 0.6.2 - 'index.php' SQL Injection

CVE-2005-4461—webappsphp22 dez 2005

SQL injection vulnerability in index.php in Beehive Forum 0.6.2 and earlier allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ProjectApp 3.3 - 'forums.asp?keywords' Cross-Site Scripting

CVE-2005-4485—webappsasp21 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in ProjectApp 3.3 and earlier allow remote attackers to inject arbit

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Papoo 2.1.2 - 'index.php?menuid' SQL Injection

CVE-2005-4478—webappsphp21 dez 2005

Multiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier allow remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Quantum Art QP7.Enterprise - 'news.asp?p_news_id' SQL Injection

CVE-2005-4486—webappsasp21 dez 2005

SQL injection vulnerability in Quantum Art QP7.Enterprise (formerly Q-Publishing) allows remote attackers to execute arb

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

IntranetApp 3.3 - 'login.asp?ret_page' Cross-Site Scripting

CVE-2005-4484—webappsasp21 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in IntranetApp 3.3 and earlier allow remote attackers to inject arbi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Papoo 2.1.2 - 'print.php' Multiple SQL Injections

CVE-2005-4478—webappsphp21 dez 2005

Multiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier allow remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ProjectApp 3.3 - 'login.asp?ret_page' Cross-Site Scripting

CVE-2005-4485—webappsasp21 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in ProjectApp 3.3 and earlier allow remote attackers to inject arbit

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Sitekit CMS 6.6 - 'Request-call-back.html?ClickFrom' Cross-Site Scripting

CVE-2005-4491—webappsasp21 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in Sitekit CMS 6.6 and earlier allow remote attackers to inject arbi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Quantum Art QP7.Enterprise - 'news_and_events_new.asp?p_news_id' SQL Injection

CVE-2005-4486—webappsasp21 dez 2005

SQL injection vulnerability in Quantum Art QP7.Enterprise (formerly Q-Publishing) allows remote attackers to execute arb

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PortalApp 3.3/4.0 - 'login.asp' Cross-Site Scripting

CVE-2005-4482—webappsasp21 dez 2005

Cross-site scripting (XSS) vulnerability in login.asp in PortalApp 3.3 and earlier allows remote attackers to inject arb

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Tolva 0.1 - 'Usermods.php' Remote File Inclusion

CVE-2005-4462—webappsphp21 dez 2005

PHP remote file include vulnerability in usermods.php in Tolva PHP website system 0.1.0 allows remote attackers to execu

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Scoop 1.1 RC1 - Missing Story Error Cross-Site Scripting

CVE-2005-4489—webappsphp21 dez 2005

Cross-site scripting (XSS) vulnerability in Scoop 1.1 RC1 and earlier allows remote attackers to inject arbitrary web sc

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Papoo 2.1.2 - 'Guestbook.php?menuid' SQL Injection

CVE-2005-4478—webappsphp21 dez 2005

Multiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier allow remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SiteEnable 3.3 - 'login.asp' Cross-Site Scripting

CVE-2005-4483—webappsasp21 dez 2005

Cross-site scripting (XSS) vulnerability in login.asp in SiteEnable 3.3 and earlier allows remote attackers to inject ar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ComputerOil Redakto CMS 3.2 - Multiple Cross-Site Scripting Vulnerabilities

CVE-2005-4488—webappscgi21 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in index.tpl in Redakto WCMS 3.2 and earlier allow remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ProjectApp 3.3 - 'links.asp?keywords' Cross-Site Scripting

CVE-2005-4485—webappscgi21 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in ProjectApp 3.3 and earlier allow remote attackers to inject arbit

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.