Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.886exploits catalogados

32.153CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.978GitHub PoC 13.282VulnCheck XDB 8.176Nuclei 4.202Metasploit 3.462✓ só verificadosrecentes populares risco

3.462 exploits

Metasploit200

Mercury/32 PH Server Module Buffer Overflow

CVE-2005-4411—19 dez 2005

Buffer overflow in Mercury Mail Transport System 4.01b allows remote attackers to execute arbitrary code via a long requ

50RISCO

abrir ↗

Metasploit600

Lyris ListManager MSDE Weak sa Password

CVE-2005-4145—08 dez 2005

The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with

50RISCO

abrir ↗

Metasploit300

MS05-054 Microsoft Internet Explorer JavaScript OnLoad Handler Remote Code Execution

CVE-2005-1790—21 nov 2005

Microsoft Internet Explorer 6 SP2 6.0.2900.2180 and 6.0.2800.1106, and earlier versions, allows remote attackers to caus

60RISCO

abrir ↗

Metasploit200

Novell NetMail IMAP STATUS Buffer Overflow

CVE-2005-3314—18 nov 2005

Stack-based buffer overflow in the IMAP daemon in Novell Netmail 3.5.2 allows remote attackers to execute arbitrary code

50RISCO

abrir ↗

Metasploit200

freeFTPd 1.0 Username Overflow

CVE-2005-3683—16 nov 2005

Stack-based buffer overflow in freeFTPd before 1.0.9 with Logging enabled, allows remote attackers to cause a denial of

60RISCO

abrir ↗

Metasploit300

FileZilla FTP Server Admin Interface Denial of Service

CVE-2005-3589—07 nov 2005

Buffer overflow in FileZilla Server Terminal 0.9.4d may allow remote attackers to cause a denial of service (terminal cr

50RISCO

abrir ↗

Metasploit400

Microsoft IIS ISAPI RSA WebAgent Redirect Overflow

CVE-2005-4734—21 out 2005

Stack-based buffer overflow in IISWebAgentIF.dll in RSA Authentication Agent for Web (aka SecurID Web Agent) 5.2 and 5.3

50RISCO

abrir ↗

Metasploit400

Snort Back Orifice Pre-Preprocessor Buffer Overflow

CVE-2005-3252—18 out 2005

Stack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort before 2.4.3 allows remote attackers to exec

60RISCO

abrir ↗

Metasploit200

CA iTechnology iGateway Debug Mode Buffer Overflow

CVE-2005-3190—06 out 2005

Buffer overflow in Computer Associates (CA) iGateway 3.0 and 4.0 before 4.0.050623, when running in debug mode, allows r

50RISCO

abrir ↗

Metasploit500

MailEnable IMAPD W3C Logging Buffer Overflow

CVE-2005-3155—03 out 2005

Buffer overflow in the W3C logging for MailEnable Enterprise 1.1 and Professional 1.6 allows remote attackers to execute

50RISCO

abrir ↗

Metasploit600

TWiki History Function Arbitrary Command Execution

CVE-2005-2877—14 set 2005

The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary co

60RISCO

abrir ↗

Metasploit500

Linksys WRT54 Access Point apply.cgi Buffer Overflow

CVE-2005-2799—13 set 2005

Buffer overflow in apply.cgi in Linksys WRT54G 3.01.03, 3.03.6, and possibly other versions before 4.20.7, allows remote

60RISCO

abrir ↗

Metasploit600

Barracuda IMG.PL Remote Command Execution

CVE-2005-2847—01 set 2005

img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary comman

50RISCO

abrir ↗

Metasploit600

HP Openview connectedNodes.ovpl Remote Command Execution

CVE-2005-2773CRITICALsob ataque25 ago 2005

HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metach

100RISCO

abrir ↗

Metasploit600

Simple PHP Blog Remote Command Execution

CVE-2005-2733—25 ago 2005

upload_img_cgi.php in Simple PHP Blog (SPHPBlog) does not properly restrict file extensions of uploaded files, which cou

50RISCO

abrir ↗

Metasploit500

CA CAM log_security() Stack Buffer Overflow (Win32)

CVE-2005-2668—22 ago 2005

Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1

60RISCO

abrir ↗

Metasploit600

Google Appliance ProxyStyleSheet Command Execution

CVE-2005-3757—16 ago 2005

The Saxon XSLT parser in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to

50RISCO

abrir ↗

Metasploit500

eDirectory 8.7.3 iMonitor Remote Stack Buffer Overflow

CVE-2005-2551—11 ago 2005

Buffer overflow in dhost.exe in iMonitor for Novell eDirectory 8.7.3 on Windows allows attackers to cause a denial of se

50RISCO

abrir ↗

Metasploit400

MS05-039 Microsoft Plug and Play Service Overflow

CVE-2005-1983—09 ago 2005

Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1

60RISCO

abrir ↗

Metasploit600

WordPress cache_lastpostdate Arbitrary Code Execution

CVE-2005-2612—09 ago 2005

Direct code injection vulnerability in WordPress 1.5.1.3 and earlier allows remote attackers to execute arbitrary PHP co

50RISCO

abrir ↗

Metasploit200

CA BrightStor Agent for Microsoft SQL Overflow

CVE-2005-1272—02 ago 2005

Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Ser

50RISCO

abrir ↗

Metasploit200

Sybase EAServer 5.2 Remote Stack Buffer Overflow

CVE-2005-2297—25 jul 2005

Stack-based buffer overflow in TreeAction.do in Sybase EAServer 4.2.5 through 5.2 allows remote authenticated users to e

60RISCO

abrir ↗

Metasploit500

SlimFTPd LIST Concatenation Overflow

CVE-2005-2373—21 jul 2005

Buffer overflow in SlimFTPd 3.15 and 3.16 allows remote authenticated users to execute arbitrary code via a long directo

50RISCO

abrir ↗

Metasploit300

Mozilla Suite/Firefox compareTo() Code Execution

CVE-2005-2265—13 jul 2005

Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of serv

50RISCO

abrir ↗

Metasploit500

MailEnable IMAPD (1.54) STATUS Request Buffer Overflow

CVE-2005-2278—13 jul 2005

Stack-based buffer overflow in the IMAP daemon (imapd) in MailEnable Professional 1.54 allows remote authenticated users

60RISCO

abrir ↗

Metasploit200

SoftiaCom WMailserver 1.0 Buffer Overflow

CVE-2005-2287—11 jul 2005

SoftiaCom wMailServer 1.0 and 2.0 allows remote attackers to cause a denial of service (application crash) via a large T

50RISCO

abrir ↗

Metasploit600

PHP XML-RPC Arbitrary Code Execution

CVE-2005-1921—29 jun 2005

Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PH

60RISCO

abrir ↗

Metasploit500

Veritas Backup Exec Windows Remote Agent Overflow

CVE-2005-0773—22 jun 2005

Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.3

60RISCO

abrir ↗

Metasploit300

MS05-030 Microsoft Outlook Express NNTP Response Parsing Buffer Overflow

CVE-2005-1213—14 jun 2005

Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows rem

60RISCO

abrir ↗

Metasploit200

FutureSoft TFTP Server 2000 Transfer-Mode Overflow

CVE-2005-1812—31 mai 2005

Multiple stack-based buffer overflows in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allow remote attackers to exe

50RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.