Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.836exploits catalogados

35.811CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.572GitHub PoC 14.290VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

24.455 exploits

Exploit-DB✓ VexDay Proof

NPDS 4.8 < 5.0 - 'sdv_infos.php?sitename' Cross-Site Scripting

CVE-2005-1803—webappsphp28 mai 2005

Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to in

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

NPDS 4.8 < 5.0 - 'reply.php?image_subject' Cross-Site Scripting

CVE-2005-1803—webappsphp28 mai 2005

Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to in

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

NPDS 4.8 < 5.0 - 'powerpack_f.php?language' Cross-Site Scripting

CVE-2005-1803—webappsphp28 mai 2005

Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to in

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

NPDS 4.8 < 5.0 - 'faq.php?categories' Cross-Site Scripting

CVE-2005-1803—webappsphp28 mai 2005

Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to in

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Hosting Controller 6.1 - 'plandetails.asp' Information Disclosure

CVE-2005-1788—webappsasp28 mai 2005

SQL injection vulnerability in resellerresources.asp in Hosting Controller 6.1 Hotfix 2.0 allows remote attackers to exe

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Invision Power Board 1.x - Unauthorized Access

CVE-2005-1817—webappsphp28 mai 2005

Invision Power Board (IPB) 1.0 through 1.3 allows remote attackers to edit arbitrary forum posts via a direct request to

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

NPDS 4.8 < 5.0 - 'admin.php?language' Cross-Site Scripting

CVE-2005-1803—webappsphp28 mai 2005

Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to in

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

NPDS 4.8 < 5.0 - 'links.php?Query' SQL Injection

CVE-2005-1804—webappsphp28 mai 2005

Multiple SQL injection vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to execute arbitra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

NPDS 4.8 < 5.0 Glossaire Module - 'terme' SQL Injection

CVE-2005-1804—webappsphp28 mai 2005

Multiple SQL injection vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to execute arbitra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

OS4E - 'login.asp' SQL Injection

CVE-2005-1805—webappsasp28 mai 2005

SQL injection vulnerability in login.asp in an unknown product by Online Solutions for Educators (OS4E) allows remote at

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Invision Power Board 2.0.3 - 'login.php' SQL Injection (Tutorial)

CVE-2005-1598—webappsphp27 mai 2005

SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Hosting Controller 0.6.1 - User Registration (3)

CVE-2005-1784—webappsasp27 mai 2005

Hosting Controller 6.1 HotFix 2.0 and earlier allows remote attackers to steal passwords and gain privileges via a modif

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Jaws Glossary 0.4/0.5 - Cross-Site Scripting

CVE-2005-1800—webappsphp27 mai 2005

Cross-site scripting (XSS) vulnerability in Jaws Glossary gadget 0.4 to 0.5.1 allows remote attackers to inject arbitrar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Linux Kernel 2.6.x - Cryptoloop Information Disclosure

CVE-2004-2135—locallinux26 mai 2005

cryptoloop on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or greater, has certain "IV c

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Maxwebportal 1.36 - 'Password.asp' Change Password (1) (HTML)

CVE-2005-1779—webappsasp26 mai 2005

SQL injection vulnerability in password.asp in MaxWebPortal 1.35, 1.36, 2.0, and 20050418 Next allows remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Nokia 9500 - vCard Viewer Remote Denial of Service

CVE-2005-1801—doshardware26 mai 2005

The vCard viewer in Nokia 9500 allows attackers to cause a denial of service (crash) via a vCard with a long Name field,

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Gentoo Webapp-Config 1.10 - Insecure File Creation

CVE-2005-1707—locallinux26 mai 2005

The fn_show_postinst function in Gentoo webapp-config before 1.10-r14 allows local users to overwrite arbitrary files vi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BookReview 1.0 - 'suggest_category.htm?node' Cross-Site Scripting

CVE-2005-1782—webappsphp26 mai 2005

Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary we

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BookReview 1.0 - 'add_booklist.htm?node' Cross-Site Scripting

CVE-2005-1782—webappsphp26 mai 2005

Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary we

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Maxwebportal 1.36 - 'Password.asp' Change Password (3)

CVE-2005-1779—webappsasp26 mai 2005

SQL injection vulnerability in password.asp in MaxWebPortal 1.35, 1.36, 2.0, and 20050418 Next allows remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Maxwebportal 1.36 - 'Password.asp' Change Password (2)

CVE-2005-1779—webappsasp26 mai 2005

SQL injection vulnerability in password.asp in MaxWebPortal 1.35, 1.36, 2.0, and 20050418 Next allows remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BookReview 1.0 - 'suggest_review.htm?node' Cross-Site Scripting

CVE-2005-1782—webappsphp26 mai 2005

Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary we

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BookReview 1.0 - 'contact.htm?user' Cross-Site Scripting

CVE-2005-1782—webappsphp26 mai 2005

Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary we

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BookReview 1.0 - 'add_url.htm?node' Cross-Site Scripting

CVE-2005-1782—webappsphp26 mai 2005

Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary we

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BookReview 1.0 - 'add_review.htm' Multiple Cross-Site Scripting Vulnerabilities

CVE-2005-1782—webappsphp26 mai 2005

Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary we

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BookReview 1.0 - 'add_contents.htm' Multiple Cross-Site Scripting Vulnerabilities

CVE-2005-1782—webappsphp26 mai 2005

Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary we

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BookReview 1.0 - 'add_classification.htm?isbn' Cross-Site Scripting

CVE-2005-1782—webappsphp26 mai 2005

Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary we

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BookReview 1.0 - 'search.htm?submit string' Cross-Site Scripting

CVE-2005-1782—webappsphp26 mai 2005

Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary we

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Exim 4.41 - 'dns_build_reverse' Local Read Emails

CVE-2005-0021—locallinux25 mai 2005

Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Berlios GPSD 1.91-1 < 2.7-2 - Format String

CVE-2004-1388—remotelinux25 mai 2005

Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7

50RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.