Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.772exploits catalogados

35.760CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8.710Nuclei 4.319Metasploit 3.476✓ só verificadosrecentes populares risco

24.455 exploits

Exploit-DB✓ VexDay Proof

FLIP 0.9.0.1029 - 'text.php?name' Cross-Site Scripting

CVE-2005-4365—webappsphp19 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in FLIP 0.9.0.1029 allow remote attackers to inject arbitrary web sc

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Lighthouse CMS 1.1 - Search Cross-Site Scripting

CVE-2005-4780LOWwebappsphp19 dez 2005

Cross-site scripting (XSS) vulnerability in Fidra Lighthouse CMS 1.1.0 and earlier allows remote attackers to inject arb

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MailEnable Enterprise Edition 1.1 - 'EXAMINE' Remote Buffer Overflow

CVE-2005-4456—remotewindows19 dez 2005

Multiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 before patch ME-10009 allow remote attacker

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Hot Banana Web Content Management Suite 5.3 - Cross-Site Scripting

CVE-2005-4364—webappscfm19 dez 2005

Cross-site scripting (XSS) vulnerability in index.cfm in Hot Banana Web Content Management Suite 5.3 allows remote attac

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft IIS - HTTP Request Denial of Service (2)

CVE-2005-4360—doswindows19 dez 2005

The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attacke

45RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Info-ZIP UnZip 5.x - File Name Buffer Overflow

CVE-2005-4667—remotelinux19 dez 2005

Buffer overflow in UnZip 5.50 and earlier allows user-assisted attackers to execute arbitrary code via a long filename c

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

IHTML Merchant Mall - SQL Injection

CVE-2005-4330—webappsphp16 dez 2005

SQL injection vulnerability in browse.ihtml in iHTML Merchant Mall allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

WebCal 3.0 4 - 'webcal.cgi' Multiple Cross-Site Scripting Vulnerabilities

CVE-2005-4327—webappscgi16 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in Michael Arndt WebCal 1.11-3.04 allow remote attackers to inject a

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

IHTML Merchant 2.0 - SQL Injection

CVE-2005-4331—webappsphp16 dez 2005

SQL injection vulnerability in merchant.ihtml in iHTML Merchant Version 2 Pro allows remote attackers to execute arbitra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Binary Board System 0.2.5 - 'toc.pl?board' Cross-Site Scripting

CVE-2005-4333—webappscgi16 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in Binary Board System (BBS) 0.2.5 and earlier allow remote attacker

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

WebGlimpse 2.x - Cross-Site Scripting

CVE-2005-4328—webappscgi16 dez 2005

Cross-site scripting (XSS) vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to i

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP Arena PAFileDB Extreme Edition - SQL Injection

CVE-2005-4329—webappsphp16 dez 2005

SQL injection vulnerability in pafiledb.php in PHP Arena paFileDB Extreme Edition RC 5 and earlier allows remote attacke

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ScareCrow 2.13 - 'profile.cgi?user' Cross-Site Scripting

CVE-2005-4307—webappscgi16 dez 2005

Cross-site scripting (XSS) vulnerability in ScareCrow 2.13 and earlier allows remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

EZDatabase 2.1.2 - 'index.php?db_id' SQL Injection

CVE-2005-4303—webappsphp16 dez 2005

SQL injection vulnerability in index.php for ezDatabase 2.1.2 and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

EZDatabase 2.1.2 - 'index.php?p' Local File Inclusion

CVE-2005-4302—webappsphp16 dez 2005

Directory traversal vulnerability in index.php in ezDatabase 2.1.2 and earlier allows remote attackers to include arbitr

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ScareCrow 2.13 - 'forum.cgi?forum' Cross-Site Scripting

CVE-2005-4307—webappscgi16 dez 2005

Cross-site scripting (XSS) vulnerability in ScareCrow 2.13 and earlier allows remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Binary Board System 0.2.5 - 'reply.pl' Multiple Cross-Site Scripting Vulnerabilities

CVE-2005-4333—webappscgi16 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in Binary Board System (BBS) 0.2.5 and earlier allow remote attacker

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Binary Board System 0.2.5 - 'stats.pl' Multiple Cross-Site Scripting Vulnerabilities

CVE-2005-4333—webappscgi16 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in Binary Board System (BBS) 0.2.5 and earlier allow remote attacker

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ScareCrow 2.13 - 'post.cgi?forum' Cross-Site Scripting

CVE-2005-4307—webappscgi16 dez 2005

Cross-site scripting (XSS) vulnerability in ScareCrow 2.13 and earlier allows remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

AltantForum 4.0.2 - Multiple Cross-Site Scripting Vulnerabilities

CVE-2005-4298—webappscgi15 dez 2005

Cross-site scripting (XSS) vulnerability in atl.cgi in AtlantForum 4.02 and earlier allows remote attackers to inject ar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Sitenet BBS 2.0 - 'netboardr.cgi' Multiple Cross-Site Scripting Vulnerabilities

CVE-2005-4306—webappscgi15 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in SiteNet BBS 2.0 and earlier allow remote attackers to inject arbi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Sitenet BBS 2.0 - 'search.cgi?cid' Cross-Site Scripting

CVE-2005-4306—webappscgi15 dez 2005

Multiple cross-site scripting (XSS) vulnerabilities in SiteNet BBS 2.0 and earlier allow remote attackers to inject arbi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MarmaraWeb E-Commerce - 'index.php?page' Cross-Site Scripting

CVE-2005-4288—webappsphp15 dez 2005

Cross-site scripting (XSS) vulnerability in index.php in MarmaraWeb E-commerce allows remote attackers to inject arbitra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DCForum 1-6 DCBoard Script - 'Page' Cross-Site Scripting

CVE-2005-4311—webappsphp15 dez 2005

Cross-site scripting (XSS) vulnerability in DCForum 6.25 and earlier, and possibly DCForum+ 1.x, allows remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Watchfire AppScan QA 5.0.x - Remote Code Execution

CVE-2005-4270—remotewindows15 dez 2005

Buffer overflow in Watchfire AppScan QA 5.0.609 and 5.0.134 allows remote web servers to execute arbitrary code via an H

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Soft4e ECW-Cart 2.0.3 - Multiple Cross-Site Scripting Vulnerabilities

CVE-2005-4290—webappscgi15 dez 2005

Cross-site scripting (XSS) vulnerability in index.cgi in ECW-Cart 2.03 and earlier allows remote attackers to inject arb

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Atlant Pro 8.0.9 - Cross-Site Scripting

CVE-2005-4299—webappscgi15 dez 2005

Cross-site scripting (XSS) vulnerability in atl.cgi in Atlant Pro 4.02 and earlier allows remote attackers to inject arb

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ZixForum 1.12 - 'forum.asp' Multiple SQL Injections

CVE-2005-4334—webappsasp15 dez 2005

SQL injection vulnerability in ZixForum 1.12 allows remote attackers to execute arbitrary SQL commands via the H_ID para

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

TML 0.5 - 'index.php?id' SQL Injection

CVE-2005-4416—webappsphp15 dez 2005

SQL injection vulnerability in index.php in TML CMS 0.5 allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MarmaraWeb E-Commerce - Remote File Inclusion

CVE-2005-4287—webappsphp15 dez 2005

PHP remote file include vulnerability in MarmaraWeb E-commerce allows remote attackers to execute arbitrary code via the

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.