Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.866exploits catalogados

35.812CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.573GitHub PoC 14.316VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

24.455 exploits

Exploit-DB✓ VexDay Proof

Microsoft Windows XP - 'TSShutdn.exe' Remote Denial of Service

CVE-2005-0904—doswindows23 mar 2005

Remote Desktop in Windows XP SP1 does not verify the "Force shutdown from a remote system" setting, which allows remote

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPSysInfo 2.0/2.3 - 'system_footer.php' Cross-Site Scripting

CVE-2005-0870—webappsphp23 mar 2005

Multiple cross-site scripting (XSS) vulnerabilities in phpSysInfo 2.3, when register_globals is enabled, allow remote at

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DigitalHive 2.0 - 'membres.php?mt' Cross-Site Scripting

CVE-2005-0883—webappsphp23 mar 2005

Multiple cross-site scripting (XSS) vulnerabilities in base.php for DigitalHive 2.0 allow remote attackers to inject arb

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Vortex Portal 2.0 - 'index.php?act' Remote File Inclusion

CVE-2005-0879—webappsphp23 mar 2005

PHP remote file include vulnerability in (1) content.php and (2) index.php for Vortex Portal allows remote attackers to

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPSysInfo 2.0/2.3 - 'sensor_program' Cross-Site Scripting

CVE-2005-0870—webappsphp23 mar 2005

Multiple cross-site scripting (XSS) vulnerabilities in phpSysInfo 2.3, when register_globals is enabled, allow remote at

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Interspire ArticleLive 2005 - NewComment Cross-Site Scripting

CVE-2005-0881—webappsphp23 mar 2005

Cross-site scripting (XSS) vulnerability in articles.newcomment for Interspire ArticleLive 2005 allows remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Invision Power Board 1.x/2.0 - HTML Injection

CVE-2005-0886—webappsphp23 mar 2005

Cross-site scripting (XSS) vulnerability in Invision Power Board 2.0.2 and earlier allows remote attackers to inject arb

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Vortex Portal 2.0 - 'content.php?act' Remote File Inclusion

CVE-2005-0879—webappsphp23 mar 2005

PHP remote file include vulnerability in (1) content.php and (2) index.php for Vortex Portal allows remote attackers to

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DigitalHive 2.0 - 'msg.php' Cross-Site Scripting

CVE-2005-0883—webappsphp23 mar 2005

Multiple cross-site scripting (XSS) vulnerabilities in base.php for DigitalHive 2.0 allow remote attackers to inject arb

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Phorum 3.x/5.0.x - HTTP Response Splitting

CVE-2005-0843—webappsphp22 mar 2005

CRLF injection vulnerability in search.php in Phorum 5.0.14a allows remote attackers to perform HTTP Response Splitting

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Apple Mac OSX 10.3.8 - 'CF_CHARSET_PATH' Local Buffer Overflow / Local Privilege Escalation

CVE-2005-0716—localosx22 mar 2005

Stack-based buffer overflow in the Core Foundation Library in Mac OS X 10.3.5 and 10.3.6, and possibly earlier versions,

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Kayako ESupport 2.3 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2005-0842—webappsphp22 mar 2005

Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.3 allows remote attackers to inject arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows XP - Local Denial of Service

CVE-2005-0852—doswindows22 mar 2005

Microsoft Windows XP SP1 allows local users to cause a denial of service (system crash) via an empty datagram to a raw I

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Linux Kernel 2.4.x/2.6.x - 'uselib()' Local Privilege Escalation (3)

CVE-2004-1235—locallinux22 mar 2005

Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.4

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

phpMyFamily 1.4.0 - Authentication Bypass

CVE-2005-0841—webappsphp21 mar 2005

SQL injection vulnerability in (1) people.php, (2) track.php, (3) edit.php, (4) document.php, (5) census.php, (6) passth

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

TRG News 3.0 Script - Remote File Inclusion

CVE-2005-0860—webappsphp21 mar 2005

PHP remote file inclusion vulnerability in TRG News Script 3.0 allows remote attackers to execute arbitrary PHP code via

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BetaParticle blog 2.0/3.0 - 'upload.asp' Arbitrary File Upload

CVE-2005-0854—webappsasp21 mar 2005

betaparticle blog (bp blog), posisbly before version 4, allows remote attackers to bypass authentication and (1) upload

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Apple Mac OSX 10.3.x - Multiple Vulnerabilities

CVE-2005-0713—localosx21 mar 2005

The Bluetooth Setup Assistant for Mac OS X before 10.3.8 can be launched without a keyboard or Bluetooth device, which a

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BetaParticle blog 2.0/3.0 - dbBlogMX.mdb Direct Request Database Disclosure

CVE-2005-0853—webappsasp21 mar 2005

betaparticle blog (bp blog) stores the database under the web root, which allows remote attackers to obtain sensitive in

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CzarNews 1.13/1.14 - 'headlines.php' Remote File Inclusion

CVE-2005-0859—webappsphp21 mar 2005

PHP remote file inclusion vulnerability in CzarNews 1.13b allows remote attackers to execute arbitrary PHP code via the

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

phpBB 2.0.12 - Change User Rights Authentication Bypass

CVE-2005-0614—webappsphp21 mar 2005

sessions.php in phpBB 2.0.12 and earlier allows remote attackers to gain administrator privileges via the autologinid va

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BetaParticle blog 2.0/3.0 - 'myFiles.asp' File Manipulation

CVE-2005-0854—webappsasp21 mar 2005

betaparticle blog (bp blog), posisbly before version 4, allows remote attackers to bypass authentication and (1) upload

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

FUN labs Game Engine - Multiple Remote Denial of Service Vulnerabilities

CVE-2005-0848—doswindows20 mar 2005

Multiple games developed by FUN labs, including 4X4 Off-road Adventure III, Big Game Hunter, Dangerous Hunts, Deer Hunt,

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CoolForum 0.5/0.7/0.8 - 'register.php?login' SQL Injection

CVE-2005-0858—webappsphp19 mar 2005

Multiple SQL injection vulnerabilities in CoolForum 0.8 and earlier allow remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CoolForum 0.5/0.7/0.8 - 'avatar.php?img' Cross-Site Scripting

CVE-2005-0857—webappsphp19 mar 2005

Cross-site scripting (XSS) vulnerability in avatar.php for CoolForum 0.8 and earlier allows remote attackers to inject a

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP-Fusion 4/5 - 'Setuser.php' HTML Injection

CVE-2005-0829—webappsphp19 mar 2005

Cross-site scripting (XSS) vulnerability in setuser.php of the Digitanium addon to PHP-Fusion 5.01 allows remote attacke

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPOpenChat 3.0.1 - Multiple HTML Injection Vulnerabilities

CVE-2005-0863—webappsphp18 mar 2005

Cross-site scripting (XSS) vulnerability in PHPOpenChat v3.x allows remote attackers to inject arbitrary web script or H

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Icecast 2.x - XSL Parser Multiple Vulnerabilities

CVE-2005-0838—remotemultiple18 mar 2005

Multiple buffer overflows in the XSL parser for IceCast 2.20 may allow attackers to cause a denial of service and possib

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

RunCMS 1.1 - Database Configuration Information Disclosure

CVE-2005-0828—webappsphp18 mar 2005

highlight.php in (1) RUNCMS 1.1A, (2) CIAMOS 0.9.2 RC1, (3) e-Xoops 1.05 Rev3, and possibly other products based on e-Xo

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Subdreamer 1.0 - SQL Injection

CVE-2005-0805—webappsphp18 mar 2005

SQL injection vulnerability in index.php in Subdreamer Light, when magic_quotes_gpc is enabled, allows remote attackers

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.