Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Metasploit200
Sybase EAServer 5.2 Remote Stack Buffer Overflow
CVE-2005-2297—25 jul 2005
Stack-based buffer overflow in TreeAction.do in Sybase EAServer 4.2.5 through 5.2 allows remote authenticated users to e
60RISCO
abrir ↗
Metasploit500
SlimFTPd LIST Concatenation Overflow
CVE-2005-2373—21 jul 2005
Buffer overflow in SlimFTPd 3.15 and 3.16 allows remote authenticated users to execute arbitrary code via a long directo
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - Color Management Module Overflow (MS05-036) (1)
CVE-2005-1219—doswindows21 jul 2005
Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code v
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHPNews 1.2.x - 'auth.php' SQL Injection
CVE-2005-2383—webappsphp20 jul 2005
SQL injection vulnerability in auth.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via t
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Greasemonkey 0.3.3 - Multiple Remote Information Disclosure Vulnerabilities
CVE-2005-2455—webappscgi20 jul 2005
Greasemonkey before 0.3.5 allows remote web servers to (1) read arbitrary files via a GET request to a file:// URL in th
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
phpBB 2.0.15 - PHP Remote Code Execution (Metasploit)
CVE-2005-2086—webappsphp19 jul 2005
PHP remote file inclusion vulnerability in viewtopic.php in phpBB 2.0.15 and earlier allows remote attackers to execute
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
osCommerce 2.2 - 'update.php' Information Disclosure
CVE-2005-2330—webappsphp18 jul 2005
Directory traversal vulnerability in extras/update.php in osCommerce 2.2 allows remote attackers to read arbitrary files
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Clever Copy 2.0 - 'calendar.php' Cross-Site Scripting
CVE-2005-2326—webappsphp15 jul 2005
Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web scr
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5.0.1 - '.JPEG' Image Rendering Buffer Overflow
CVE-2005-1988—doswindows15 jul 2005
Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to execute arbitrary code via a web
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Novell Groupwise 6.5 Webaccess - HTML Injection
CVE-2005-2276—webappsjava15 jul 2005
Cross-site scripting (XSS) vulnerability in Novell Groupwise WebAccess 6.5 before July 11, 2005 allows remote attackers
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5.0.1 - '.JPEG' Image Rendering CMP Fencepost Denial of Service
CVE-2005-2308—doswindows15 jul 2005
The JPEG decoder in Microsoft Internet Explorer allows remote attackers to cause a denial of service (CPU consumption or
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NullSoft Winamp 5.0 - Malformed ID3v2 Tag Buffer Overflow
CVE-2005-2310—remotewindows15 jul 2005
Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arb
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Remote Control Server 1.6.2 - Denial of Service
CVE-2005-2305—doswindows15 jul 2005
DG Remote Control Server 1.6.2 allows remote attackers to cause a denial of service (crash or CPU consumption) and possi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - Netman Service Local Denial of Service
CVE-2005-2307—doswindows14 jul 2005
netman.dll in Microsoft Windows Connections Manager Library allows local users to cause a denial of service (Network Con
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
netPanzer 0.8 - Remote Denial of Service
CVE-2005-2295—doswindows14 jul 2005
NetPanzer 0.8 and earlier allows remote attackers to cause a denial of service (infinite loop) via a packet with a zero
23RISCO
abrir ↗
Metasploit300
Mozilla Suite/Firefox compareTo() Code Execution
CVE-2005-2265—13 jul 2005
Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of serv
50RISCO
abrir ↗
Metasploit500
MailEnable IMAPD (1.54) STATUS Request Buffer Overflow
CVE-2005-2278—13 jul 2005
Stack-based buffer overflow in the IMAP daemon (imapd) in MailEnable Professional 1.54 allows remote authenticated users
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Mozilla Firefox 1.0.4 - 'Set As Wallpaper' Code Execution
CVE-2005-2262—remotewindows13 jul 2005
Firefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers to execute arbitrary code by tricking the user into
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Mozilla Suite/Firefox < 1.0.5 - compareTo Code Execution (Metasploit)
CVE-2005-2265—remotewindows13 jul 2005
Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of serv
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Nokia Affix 2.0/2.1/3.x - BTSRV/BTOBEX Remote Command Execution
CVE-2005-2277—remotehardware12 jul 2005
Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via sh
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
DVBBS 7.1 - 'ShowErr.asp' Cross-Site Scripting
CVE-2005-2318—webappsasp12 jul 2005
Cross-site scripting (XSS) vulnerability in showerr.asp in DVBBS 7.1 SP2 allows remote attackers to inject arbitrary web
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Cisco CallManager 1.0/2.0/3.x/4.0 - CTI Manager Remote Denial of Service
CVE-2005-2242—doshardware12 jul 2005
Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 allows
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
SoftiaCom wMailServer 1.0 - Remote Denial of Service
CVE-2005-2287—doswindows12 jul 2005
SoftiaCom wMailServer 1.0 and 2.0 allows remote attackers to cause a denial of service (application crash) via a large T
50RISCO
abrir ↗
Metasploit200
SoftiaCom WMailserver 1.0 Buffer Overflow
CVE-2005-2287—11 jul 2005
SoftiaCom wMailServer 1.0 and 2.0 allows remote attackers to cause a denial of service (application crash) via a large T
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
BlogTorrent 0.92 - Remote Password Disclosure
CVE-2005-2229—webappsphp11 jul 2005
Blog Torrent 0.92 and earlier stores sensitive files under the web document root in the (1) data or (2) torrents directo
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PPA 0.5.6 - 'ppa_root_path' File Inclusion
CVE-2005-2199—webappsphp10 jul 2005
PHP remote file inclusion vulnerability in inc/functions.inc.php in PPA web photo gallery 0.5.6 allows remote attackers
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Hosting Controller 0.6.1 HotFix 2.1 - Change Credit Limit
CVE-2005-2219—remotewindows10 jul 2005
Hosting Controller 6.1 Hotfix 2.1 allows remote authenticated users to perform unauthorized actions, such as modifying t
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PrivaShare 1.3 - Denial of Service
CVE-2005-2208—doswindows07 jul 2005
PrivaShare 1.1b allows remote attackers to cause a denial of service (crash) via a malformed message.
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Lotus Domino Notes 6.0/6.5 - Mail Template Automatic Script Execution
CVE-2005-2175—remotemultiple06 jul 2005
The web interface for Lotus Notes mail automatically processes HTML in an attachment without prompting the user to save
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Internet Download Manager 4.0.5 - Input URL Stack Overflow
CVE-2005-2210—localwindows06 jul 2005
Stack-based buffer overflow in Internet Download Manager 4.05 allows remote attackers to execute arbitrary code via a lo
23RISCO
abrir ↗
← anteriorpágina 1757 / 2.974próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.