Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.980exploits catalogados

36.899CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.400GitHub PoC 15.250VulnCheck XDB 8.959Nuclei 4.393Metasploit 3.502✓ só verificadosrecentes populares risco

3.502 exploits

Metasploit400

Arkeia Backup Client Type 77 Overflow (Win32)

CVE-2005-0491—18 fev 2005

Stack-based buffer overflow in Knox Arkeia Server Backup 5.3.x allows remote attackers to execute arbitrary code via a l

50RISCO

abrir ↗

Metasploit200

CA BrightStor Discovery Service TCP Overflow

CVE-2005-2535—14 fev 2005

Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execu

60RISCO

abrir ↗

Metasploit400

URSoft W32Dasm Disassembler Function Buffer Overflow

CVE-2005-0308—24 jan 2005

Buffer overflow in the wsprintf function in W32Dasm 8.93 and earlier allows remote attackers to execute arbitrary code v

50RISCO

abrir ↗

Metasploit600

Cacti graph_view.php Remote Command Execution

CVE-2005-10004HIGH15 jan 2005

Cacti graph_view.php RCE via graph_start Parameter Injection

36RISCO

abrir ↗

Metasploit600

AWStats configdir Remote Command Execution

CVE-2005-0116—15 jan 2005

AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacte

60RISCO

abrir ↗

Metasploit300

Apple ITunes 4.7 Playlist Buffer Overflow

CVE-2005-0043—11 jan 2005

Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in (1) .m3u or (2)

50RISCO

abrir ↗

Metasploit500

Blue Coat WinProxy Host Header Overflow

CVE-2005-4085—05 jan 2005

Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.

50RISCO

abrir ↗

Metasploit200

3Com 3CDaemon 2.0 FTP Username Overflow

CVE-2005-0277—04 jan 2005

Buffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service

50RISCO

abrir ↗

Metasploit300

Serv-U FTP Server Buffer Overflow

CVE-2004-2111—31 dez 2004

Stack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows remote attackers to execute

60RISCO

abrir ↗

Metasploit500

Netcat v1.10 NT Stack Buffer Overflow

CVE-2004-1317—27 dez 2004

Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attack

50RISCO

abrir ↗

Metasploit200

SHOUTcast DNAS/win32 1.9.4 File Request Format String Overflow

CVE-2004-1373—23 dez 2004

Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service (application crash)

60RISCO

abrir ↗

Metasploit200

CA BrightStor Discovery Service Stack Buffer Overflow

CVE-2005-0260—20 dez 2004

Stack-based buffer overflow in the Discovery Service for BrightStor ARCserve Backup 11.1 and earlier allows remote attac

50RISCO

abrir ↗

Metasploit200

Veritas Backup Exec Name Service Overflow

CVE-2004-1172—16 dez 2004

Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before 8.60.3878 Hotfix 68, and 9.x before 9

60RISCO

abrir ↗

Metasploit500

MS04-045 Microsoft WINS Service Memory Overwrite

CVE-2004-1080—14 dez 2004

The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remo

60RISCO

abrir ↗

Metasploit400

Microsoft IIS ISAPI w3who.dll Query String Overflow

CVE-2004-1134—06 dez 2004

Buffer overflow in the Microsoft W3Who ISAPI (w3who.dll) allows remote attackers to cause a denial of service and possib

60RISCO

abrir ↗

Metasploit200

Mercury/32 v4.01a IMAP RENAME Buffer Overflow

CVE-2004-1211—29 nov 2004

Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of

60RISCO

abrir ↗

Metasploit500

WS-FTP Server 5.03 MKD Overflow

CVE-2004-1135—29 nov 2004

Multiple buffer overflows in WS_FTP Server 5.03 2004.10.14 allow remote attackers to cause a denial of service (service

50RISCO

abrir ↗

Metasploit500

Mdaemon 8.0.3 IMAPD CRAM-MD5 Authentication Overflow

CVE-2004-1520—12 nov 2004

Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a lon

60RISCO

abrir ↗

Metasploit200

IMail IMAP4D Delete Overflow

CVE-2004-1520—12 nov 2004

Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a lon

60RISCO

abrir ↗

Metasploit600

phpBB viewtopic.php Arbitrary Code Execution

CVE-2004-1315—12 nov 2004

viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phrase

60RISCO

abrir ↗

Metasploit600

phpBB viewtopic.php Arbitrary Code Execution

CVE-2005-2086—12 nov 2004

PHP remote file inclusion vulnerability in viewtopic.php in phpBB 2.0.15 and earlier allows remote attackers to execute

60RISCO

abrir ↗

Metasploit300

MS06-019 Exchange MODPROP Heap Overflow

CVE-2006-0027—12 nov 2004

Unspecified vulnerability in Microsoft Exchange allows remote attackers to execute arbitrary code via e-mail messages wi

40RISCO

abrir ↗

Metasploit200

CCProxy Telnet Proxy Ping Overflow

CVE-2004-2416—11 nov 2004

Buffer overflow in the logging component of CCProxy allows remote attackers to execute arbitrary code via a long HTTP GE

50RISCO

abrir ↗

Metasploit200

Minishare 1.4.1 Buffer Overflow

CVE-2004-2271—07 nov 2004

Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET req

60RISCO

abrir ↗

Metasploit400

TABS MailCarrier v2.51 SMTP EHLO Overflow

CVE-2004-1638—26 out 2004

Buffer overflow in MailCarrier 2.51 allows remote attackers to execute arbitrary code via a long (1) EHLO and possibly (

50RISCO

abrir ↗

Metasploit300

Ability Server 2.34 STOR Command Stack Buffer Overflow

CVE-2004-1626—22 out 2004

Buffer overflow in Ability Server 2.34, and possibly other versions, allows remote attackers to execute arbitrary code v

50RISCO

abrir ↗

Metasploit600

VERITAS NetBackup Remote Command Execution

CVE-2004-1389—21 out 2004

Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1

38RISCO

abrir ↗

Metasploit400

MS04-031 Microsoft NetDDE Service Overflow

CVE-2004-0206—12 out 2004

Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and

60RISCO

abrir ↗

Metasploit500

ShixxNOTE 6.net Font Field Overflow

CVE-2004-1595—04 out 2004

Buffer overflow in ShixxNote 6.net build 117 allows remote attackers to execute arbitrary code via a long font field.

50RISCO

abrir ↗

Metasploit600

TWiki Search Function Arbitrary Command Execution

CVE-2004-1037—01 out 2004

The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in

50RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.