Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
89.220 exploits
Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4 Weblog Server - Cross-Site Scripting
CVE-2005-2523—remoteosx15 ago 2005
Multiple cross-site scripting (XSS) vulnerabilities in Weblog Server in Mac OS X 10.4 to 10.4.2 allow remote attackers t
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Isemarket JaguarControl - ActiveX Control Buffer Overflow
CVE-2005-2644—remotewindows13 ago 2005
Buffer overflow in JaguarEditControl.dll in Isemarket JaguarControl allows remote attackers to cause a denial of service
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Grandstream Budge Tone 101/102 VOIP Phone - Denial of Service
CVE-2005-2581—doshardware12 ago 2005
Grandstream BudgeTone 101 and 102 running firmware 1.0.6.7 and possibly earlier versions, allows remote attackers to cau
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MyBulletinBoard (MyBB) RC4 - 'polloptions' SQL Injection
CVE-2005-2580—webappsphp12 ago 2005
Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 with Security Patch allow remote attackers to
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows Plug-and-Play Service - Remote Universal (MS05-039)
CVE-2005-1983—remotewindows12 ago 2005
Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MDaemon 8.0.3 - IMAPD CRAM-MD5 Authentication Overflow (Metasploit)
CVE-2004-1520—remotewindows12 ago 2005
Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a lon
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MyBulletinBoard (MyBB) RC4 - 'member.php' Multiple SQL Injections
CVE-2005-2580—webappsphp12 ago 2005
Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 with Security Patch allow remote attackers to
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Novell eDirectory 8.7.3 - iMonitor Remote Stack Overflow (Metasploit)
CVE-2005-2551—remotewindows12 ago 2005
Buffer overflow in dhost.exe in iMonitor for Novell eDirectory 8.7.3 on Windows allows attackers to cause a denial of se
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MyBulletinBoard (MyBB) RC4 - 'Username' SQL Injection
CVE-2005-2580—webappsphp12 ago 2005
Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 with Security Patch allow remote attackers to
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Novell ZENworks 6.5 - Desktop/Server Management Remote Stack Overflow (Metasploit)
CVE-2005-1543—remotewindows12 ago 2005
Multiple stack-based and heap-based buffer overflows in Remote Management authentication (zenrem32.exe) on Novell ZENwor
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MyBulletinBoard (MyBB) RC4 - 'action' SQL Injection
CVE-2005-2580—webappsphp12 ago 2005
Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 with Security Patch allow remote attackers to
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Veritas Backup Exec (Windows) - Remote File Access (Metasploit)
CVE-2005-2611—remotewindows11 ago 2005
VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup for
60RISCO
abrir ↗
Metasploit500
eDirectory 8.7.3 iMonitor Remote Stack Buffer Overflow
CVE-2005-2551—11 ago 2005
Buffer overflow in dhost.exe in iMonitor for Novell eDirectory 8.7.3 on Windows allows attackers to cause a denial of se
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - Plug-and-Play Service Remote Overflow (MS05-039)
CVE-2005-1983—remotewindows11 ago 2005
Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Gaim AIM/ICQ Protocols - Multiple Vulnerabilities
CVE-2005-2103CRITICALdoswindows10 ago 2005
Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (app
53RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ezUpload 2.2 - 'index.php?path' Remote File Inclusion
CVE-2005-2616—webappsphp10 ago 2005
Multiple PHP file include vulnerabilities in ezUpload 2.2 allow remote attackers to execute arbitrary code via the path
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHPTB Topic Board 2.0 - 'index.php?mid' SQL Injection
CVE-2005-2587—webappsphp10 ago 2005
SQL injection vulnerability in emailvalidate.php in PHPTB Topic Boards 2.0 allows remote attackers to execute arbitrary
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ezUpload 2.2 - 'initialize.php?path' Remote File Inclusion
CVE-2005-2616—webappsphp10 ago 2005
Multiple PHP file include vulnerabilities in ezUpload 2.2 allow remote attackers to execute arbitrary code via the path
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ezUpload 2.2 - 'form.php?path' Remote File Inclusion
CVE-2005-2616—webappsphp10 ago 2005
Multiple PHP file include vulnerabilities in ezUpload 2.2 allow remote attackers to execute arbitrary code via the path
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ezUpload 2.2 - 'customize.php?path' Remote File Inclusion
CVE-2005-2616—webappsphp10 ago 2005
Multiple PHP file include vulnerabilities in ezUpload 2.2 allow remote attackers to execute arbitrary code via the path
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Wyse Winterm 1125SE 4.2/4.4 - Remote Denial of Service
CVE-2005-2577—dosmultiple10 ago 2005
Wyse Winterm 1125SE running firmware 4.2.09f or 4.4.061f allows remote attackers to cause a denial of service (device cr
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Safari 1.3 Web Browser - JavaScript Invalid Address Denial of Service
CVE-2005-2594—dososx09 ago 2005
Apple Safari 1.3 (132) on Mac OS X 1.3.9 allows remote attackers to cause a denial of service (crash) via certain Javasc
23RISCO
abrir ↗
Metasploit600
WordPress cache_lastpostdate Arbitrary Code Execution
CVE-2005-2612—09 ago 2005
Direct code injection vulnerability in WordPress 1.5.1.3 and earlier allows remote attackers to execute arbitrary PHP co
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - 'blnmgr.dll' COM Object Remote (MS05-038)
CVE-2005-1988—remotewindows09 ago 2005
Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to execute arbitrary code via a web
35RISCO
abrir ↗
Metasploit400
MS05-039 Microsoft Plug and Play Service Overflow
CVE-2005-1983—09 ago 2005
Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows XP SP2 - 'rdpwd.sys' Remote Kernel Denial of Service
CVE-2005-1218—doswindows09 ago 2005
The Microsoft Windows kernel in Microsoft Windows 2000 Server, Windows XP, and Windows Server 2003 allows remote attacke
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows XP SP2 - 'rdpwd.sys' Remote Kernel Denial of Service
CVE-2005-2303—doswindows09 ago 2005
20RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - 'blnmgr.dll' COM Object Remote (MS05-038)
CVE-2005-1990—remotewindows09 ago 2005
Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (application crash) and possibl
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - 'blnmgr.dll' COM Object Remote (MS05-038)
CVE-2005-1989—remotewindows09 ago 2005
Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to obtain information and possibly
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP Lite Calendar Express 2.2 - 'login.php?cid' SQL Injection
CVE-2007-3627—webappsphp08 ago 2005
Multiple SQL injection vulnerabilities in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL
23RISCO
abrir ↗
← anteriorpágina 1754 / 2.974próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.