Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.813exploits catalogados

35.788CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.549GitHub PoC 14.290VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

24.455 exploits

Exploit-DB✓ VexDay Proof

vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/language.php?goto' Cross-Site Scripting

CVE-2005-3020—webappsphp19 set 2005

Multiple cross-site scripting (XSS) vulnerabilities in vBulletin before 3.0.9 allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/user.php' Multiple SQL Injections

CVE-2005-3019—webappsphp19 set 2005

Multiple SQL injection vulnerabilities in vBulletin before 3.0.9 allow remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/index.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2005-3020—webappsphp19 set 2005

Multiple cross-site scripting (XSS) vulnerabilities in vBulletin before 3.0.9 allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MCCS (Multi-Computer Control Systems) Command - Denial of Service

CVE-2005-3002—doswindows19 set 2005

Multi-Computer Control System (MCCS) 1.0 allows remote attackers to cause a denial of service via a malformed UDP packet

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CuteNews 1.4.0 - Shell Injection / Remote Command Execution

CVE-2005-3010—webappsphp17 set 2005

Direct static code injection vulnerability in the flood protection feature in inc/shows.inc.php in CuteNews 1.4.0 and ea

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Apple Safari 1.x/2.0.1 - Data URI Memory Corruption

CVE-2005-3018—dososx17 set 2005

Apple Safari allows remote attackers to cause a denial of service (application crash) via a crafted data:// URL.

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Fastream NETFile Web Server 7.1.2 - 'HEAD' Denial of Service

CVE-2004-2534—doswindows16 set 2005

Fastream NETFile Server 7.1.2 does not properly handle keep-alive connection timeouts and does not close the connection

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DeluxeBB 1.0 - 'misc.php' SQL Injection

CVE-2005-2989—webappsphp15 set 2005

Multiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DeluxeBB 1.0 - 'forums.php' SQL Injection

CVE-2005-2989—webappsphp15 set 2005

Multiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DeluxeBB 1.0 - 'pm.php' SQL Injection

CVE-2005-2989—webappsphp15 set 2005

Multiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

phpWebSite 0.10.0 - 'module' SQL Injection

CVE-2008-0092—webappsphp15 set 2005

Cross-site scripting (XSS) vulnerability in index.php in the search module in Appalachian State University phpWebSite 1.

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

phpWebSite 0.10.0 - 'module' SQL Injection

CVE-2005-4792—webappsphp15 set 2005

SQL injection vulnerability in index.php in Appalachian State University phpWebSite 0.10.1 and earlier allows remote att

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DeluxeBB 1.0 - 'newpost.php' SQL Injection

CVE-2005-2989—webappsphp15 set 2005

Multiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

AEwebworks aeDating 3.2/4.0 - 'search_result.php' SQL Injection

CVE-2005-2985—webappsphp15 set 2005

SQL injection vulnerability in search_result.php in AEwebworks aeDating Script 4.0 and earlier allows remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DeluxeBB 1.0 - 'topic.php' SQL Injection

CVE-2005-2989—webappsphp15 set 2005

Multiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Wireless Tools 26 (IWConfig) - Local Privilege Escalation

CVE-2003-0947—locallinux14 set 2005

Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OUT environm

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MIVA Merchant 5 - Merchant.MVC Cross-Site Scripting

CVE-2005-2953—webappscgi14 set 2005

Cross-site scripting (XSS) vulnerability in merchant.mvc in MIVA Merchant 5 allows remote attackers to inject arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Noah's Classifieds 1.2/1.3 - 'index.php' SQL Injection

CVE-2005-2979—webappsphp14 set 2005

SQL injection vulnerability in index.php in phpoutsourcing Noah's classifieds allows remote attackers to execute arbitra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Noah's Classifieds 1.3 - 'index.php' Cross-Site Scripting

CVE-2005-2980—webappsphp14 set 2005

Cross-site scripting (XSS) vulnerability in index.php in phpoutsourcing Noah's classifieds 1.3 allows remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Wireless Tools 26 (IWConfig) - Local Privilege Escalation

CVE-2003-0948—locallinux14 set 2005

Buffer overflow in iwconfig allows local users to execute arbitrary code via a long HOME environment variable.

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ATutor 1.5.1 - Chat Logs Remote Information Disclosure

CVE-2005-2956—webappsphp14 set 2005

ATutor 1.5.1, and possibly earlier versions, stores temporary chat logs under the web document root with insufficient ac

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ATutor 1.5.1 - 'password_reminder.php' SQL Injection

CVE-2005-2954—webappsphp14 set 2005

SQL injection vulnerability in password_reminder.php in ATutor before 1.5.1 pl1 allows remote attackers to execute arbit

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

TWiki TWikiUsers - Arbitrary Command Execution

CVE-2005-2877—webappsphp14 set 2005

The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary co

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Linksys WRT54G < 4.20.7 / WRT54GS < 1.05.2 - 'apply.cgi' Remote Buffer Overflow (Metasploit)

CVE-2005-2799—remotecgi13 set 2005

Buffer overflow in apply.cgi in Linksys WRT54G 3.01.03, 3.03.6, and possibly other versions before 4.20.7, allows remote

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Subscribe Me Pro 2.44 - S.pl Directory Traversal

CVE-2005-2952—webappsphp13 set 2005

Directory traversal vulnerability in s.pl in Subscribe Me Pro 2.044.09P and earlier allows remote attackers to read arbi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

AzDGDatingLite 2.1.3 - Remote Code Execution

CVE-2005-2951—webappsphp13 set 2005

Directory traversal vulnerability in security.inc.php in AzDGDatingLite 2.1.3, and possibly earlier versions, allows rem

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Land Down Under 800/801 - 'auth.php?m' SQL Injection

CVE-2005-4821—webappsphp13 set 2005

Multiple SQL injection vulnerabilities in Land Down Under (LDU) v801 and earlier allow remote attackers to execute arbit

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Land Down Under 800/801 - 'plug.php?e' SQL Injection

CVE-2005-4821—webappsphp13 set 2005

Multiple SQL injection vulnerabilities in Land Down Under (LDU) v801 and earlier allow remote attackers to execute arbit

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Alt-N WebAdmin 2.0.4 - USER Buffer Overflow (Metasploit)

CVE-2003-0471—remotewindows11 set 2005

Buffer overflow in WebAdmin.exe for WebAdmin allows remote attackers to execute arbitrary code via an HTTP request to We

50RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PhpTagCool 1.0.3 - SQL Injection

CVE-2005-4724—webappsphp11 set 2005

SQL injection vulnerability in post.php in PhpTagCool 1.0.3 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.