Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.772exploits catalogados

35.760CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8.710Nuclei 4.319Metasploit 3.476✓ só verificadosrecentes populares risco

24.455 exploits

Exploit-DB✓ VexDay Proof

Survey System 1.1 - 'survey.php' SQL Injection

CVE-2005-3944—webappsphp29 nov 2005

SQL injection vulnerability in survey.php in ilyav Survey System 1.1 and earlier allows remote attackers to execute arbi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Entergal MX 2.0 - Multiple SQL Injections

CVE-2005-3958—webappsphp29 nov 2005

SQL injection vulnerability in index.php in Entergal MX 2.0 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

FAQ System 1.1 - 'viewFAQ.php' Multiple SQL Injections

CVE-2005-3943—webappsphp29 nov 2005

Multiple SQL injection vulnerabilities in ilyav FAQ System 1.1 and earlier allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DMANews 0.9 - Multiple SQL Injections

CVE-2005-3956—webappsphp29 nov 2005

Multiple SQL injection vulnerabilities in index.php in DMANews 0.904 and 0.910 allow remote attackers to execute arbitra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Orca Ringmaker 2.3 - 'Ringmaker.php' SQL Injection

CVE-2005-3940—webappsphp29 nov 2005

SQL injection vulnerability in ringmaker.php in Orca Ringmaker 2.3c and earlier allows remote attackers to execute arbit

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Orca Blog 1.3 - 'blog.php' SQL Injection

CVE-2005-3941—webappsphp29 nov 2005

SQL injection vulnerability in blog.php in Orca Blog 1.3b and earlier allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

FAQ System 1.1 - 'index.php?category_id' SQL Injection

CVE-2005-3943—webappsphp29 nov 2005

Multiple SQL injection vulnerabilities in ilyav FAQ System 1.1 and earlier allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Post Affiliate Pro 2.0.4 - 'index.php' SQL Injection

CVE-2005-3909—webappsphp29 nov 2005

SQL injection vulnerability in merchants/index.php in Post Affiliate Pro 2.0.4 and earlier allows remote attackers to ex

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows Metafile - 'gdi32.dll' Denial of Service (MS05-053)

CVE-2005-2124—doswindows29 nov 2005

Unspecified vulnerability in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Xaraya 1.0.0 RC4 - 'create()' Denial of Service

CVE-2005-3929—dosphp29 nov 2005

Directory traversal vulnerability in the create function in xarMLSXML2PHPBackend.php in Xaraya 1.0 allows remote attacke

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BosDates 4.0 - Multiple SQL Injections

CVE-2005-3911—webappsphp29 nov 2005

Multiple SQL injection vulnerabilities in calendar.php in BosDates 4.0 and earlier allow remote attackers to execute arb

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ASP-Rider 1.6 - 'default.asp' SQL Injection

CVE-2005-3931—webappsphp29 nov 2005

SQL injection vulnerability in default.asp in ASP-Rider 1.6 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

K-Search 1.0 - SQL Injection

CVE-2005-3868—webappsphp28 nov 2005

Multiple SQL injection vulnerabilities in K-Search 1.0 and earlier allow remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BerliOS SourceWell 1.1.3 - SQL Injection

CVE-2005-3864—webappsphp28 nov 2005

SQL injection vulnerability in index.php in SourceWell 1.1.2 and earlier allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Softbiz Resource Repository Script - 'refer_friend.php?sbres_id' SQL Injection

CVE-2005-3879—webappsphp28 nov 2005

Multiple SQL injection vulnerabilities in Softbiz Resource Repository Script 1.1 and earlier allow remote attackers to e

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Softbiz Resource Repository Script - 'details_res.php?sbres_id' SQL Injection

CVE-2005-3879—webappsphp28 nov 2005

Multiple SQL injection vulnerabilities in Softbiz Resource Repository Script 1.1 and earlier allow remote attackers to e

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ADC2000 NG Pro 1.2 - SQL Injection

CVE-2000-0751—webappsphp28 nov 2005

mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allow

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

phpWordPress 3.0 - Multiple SQL Injections

CVE-2005-3844—webappsphp28 nov 2005

SQL injection vulnerability in phpWordPress PHP News and Article Manager 3.0 allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP Doc System 1.5.1 - Local File Inclusion

CVE-2005-3878—webappsphp28 nov 2005

Directory traversal vulnerability in index.php in PHP Doc System 1.5.1 and earlier allows remote attackers to access or

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Babe Logger 2.0 - 'comments.php?id' SQL Injection

CVE-2005-3920—webappsphp28 nov 2005

SQL injection vulnerability in Babe Logger 2 allows remote attackers to execute arbitrary SQL commands via the (1) gal p

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Babe Logger 2.0 - 'index.php?gal' SQL Injection

CVE-2005-3920—webappsphp28 nov 2005

SQL injection vulnerability in Babe Logger 2 allows remote attackers to execute arbitrary SQL commands via the (1) gal p

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Randshop - Multiple SQL Injections

CVE-2005-3924—webappsphp28 nov 2005

SQL injection vulnerability in themes/kategorie/index.php in Randshop allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

EdmoBBS 0.9 - SQL Injection

CVE-2005-3870—webappsphp28 nov 2005

Multiple SQL injection vulnerabilities in edmobbs9r.php in edmoBBS 0.9 and earlier allow remote attackers to execute arb

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Top Music Module 3.0 - SQL Injection

CVE-2005-4781—webappsphp28 nov 2005

Multiple SQL injection vulnerabilities in SergiDs Top Music module 3.0 PR3 and earlier for PHP-Nuke allow remote attacke

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Netzbrett 1.5.1 - 'P_Entry' SQL Injection

CVE-2005-3874—webappsphp28 nov 2005

SQL injection vulnerability in netzbr.php in Netzbrett 1.5.1 and earlier allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Helpdesk Issue Manager 0.x - 'issue.php?id' SQL Injection

CVE-2005-3925—webappsphp28 nov 2005

Multiple SQL injection vulnerabilities in Central Manchester CLC Helpdesk Issue Manager 0.9 and earlier allow remote att

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Simple Document Management System 2.0 - 'messages.php?mid' SQL Injection

CVE-2005-3877—webappsphp28 nov 2005

Multiple SQL injection vulnerabilities in Simple Document Management System (SDMS) 2.0-CVS and earlier allow remote atta

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

UGroup 2.6.2 - 'forum.php?FORUM_ID' SQL Injection

CVE-2005-3872—webappsphp28 nov 2005

Multiple SQL injection vulnerabilities in Ugroup 2.6.2 and earlier allow remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

AllWeb Search 3.0 - SQL Injection

CVE-2005-3865—webappsphp28 nov 2005

SQL injection vulnerability in index.php in AllWeb search 3.0 and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Enterprise Heart Enterprise Connector 1.0.2 - 'messages.php?messageid' SQL Injection

CVE-2005-3875—webappsphp28 nov 2005

Multiple SQL injection vulnerabilities in Enterprise Connector 1.0.2 and earlier allow remote attackers to execute arbit

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.