Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados

41.197CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentes populares risco

89.220 exploits

Exploit-DB✓ VexDay Proof

OFTPD 0.3.x - User Command Buffer Overflow

CVE-2005-2239—doslinux06 jul 2005

oftpd 0.3.7 allows remote attackers to cause a denial of service via a USER command with a large number of null (\0) cha

23RISCO

Exploit-DB✓ VexDay Proof

Internet Download Manager 4.0.5 - Input URL Stack Overflow

CVE-2005-2210—localwindows06 jul 2005

Stack-based buffer overflow in Internet Download Manager 4.05 allows remote attackers to execute arbitrary code via a lo

23RISCO

Exploit-DB✓ VexDay Proof

Novell NetMail 3.x - Automatic Script Execution

CVE-2005-2176—remotewindows06 jul 2005

Novell NetMail automatically processes HTML in an attachment without prompting the user to save or open it, which makes

23RISCO

Exploit-DB✓ VexDay Proof

phpPgAdmin 3.x - Login Form Directory Traversal

CVE-2005-2256—webappsphp05 jul 2005

Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote attackers to access arbitrary files v

23RISCO

Exploit-DB✓ VexDay Proof

AutoIndex PHP Script 1.5.2 - 'index.php' Cross-Site Scripting

CVE-2005-2163—webappsphp05 jul 2005

Cross-site scripting (XSS) vulnerability in index.php in AutoIndex PHP Script 1.5.2 allows remote attackers to inject ar

23RISCO

Exploit-DB✓ VexDay Proof

MyGuestbook 0.6.1 - 'Form.Inc.php3' Remote File Inclusion

CVE-2005-2162—webappsphp05 jul 2005

PHP remote file inclusion vulnerability in form.inc.php3 in MyGuestbook 0.6.1 allows remote attackers to execute arbitra

23RISCO

Exploit-DB✓ VexDay Proof

Drupal 4.5.3 < 4.6.1 - Comments PHP Injection

CVE-2005-2106—webappsphp05 jul 2005

Unknown vulnerability in Drupal 4.5.0 through 4.5.3, 4.6.0, and 4.6.1 allows remote attackers to execute arbitrary PHP c

23RISCO

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer - 'javaprxy.dll' COM Object Remote Overflow

CVE-2005-2087—remotewindows05 jul 2005

Internet Explorer 5.01 SP4 up to 6 on various Windows operating systems, including IE 6.0.2900.2180 on Windows XP, allow

35RISCO

Exploit-DB✓ VexDay Proof

EasyPHPCalendar 6.1.5/6.2.x - 'header.inc.php?serverPath' Remote File Inclusion

CVE-2005-2155—webappsphp04 jul 2005

PHP remote file inclusion vulnerability in EasyPHPCalendar 6.1.5 and earlier allows remote attackers to execute arbitrar

23RISCO

Exploit-DB✓ VexDay Proof

EasyPHPCalendar 6.1.5/6.2.x - 'popup.php?serverPath' Remote File Inclusion

CVE-2005-2155—webappsphp04 jul 2005

PHP remote file inclusion vulnerability in EasyPHPCalendar 6.1.5 and earlier allows remote attackers to execute arbitrar

23RISCO

Exploit-DB✓ VexDay Proof

EasyPHPCalendar 6.1.5/6.2.x - 'calendar.php?serverPath' Remote File Inclusion

CVE-2005-2155—webappsphp04 jul 2005

PHP remote file inclusion vulnerability in EasyPHPCalendar 6.1.5 and earlier allows remote attackers to execute arbitrar

23RISCO

Exploit-DB✓ VexDay Proof

EasyPHPCalendar 6.1.5/6.2.x - 'datePicker.php?serverPath' Remote File Inclusion

CVE-2005-2155—webappsphp04 jul 2005

PHP remote file inclusion vulnerability in EasyPHPCalendar 6.1.5 and earlier allows remote attackers to execute arbitrar

23RISCO

Exploit-DB✓ VexDay Proof

EasyPHPCalendar 6.1.5/6.2.x - 'setupSQL.php?serverPath' Remote File Inclusion

CVE-2005-2155—webappsphp04 jul 2005

PHP remote file inclusion vulnerability in EasyPHPCalendar 6.1.5 and earlier allows remote attackers to execute arbitrar

23RISCO

Exploit-DB✓ VexDay Proof

XML-RPC Library 1.3.0 - 'xmlrpc.php' Remote Command Execution (3)

CVE-2005-1921—webappsphp04 jul 2005

Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PH

60RISCO

Exploit-DB✓ VexDay Proof

XML-RPC Library 1.3.0 - 'xmlrpc.php' Remote Command Execution (2)

CVE-2005-1921—webappsphp04 jul 2005

Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PH

60RISCO

Exploit-DB✓ VexDay Proof

XOOPS 2.0.11 - 'xmlrpc.php' SQL Injection

CVE-2005-2113—webappsphp04 jul 2005

SQL injection vulnerability in the loginUser function in the XMLRPC server in XOOPS 2.0.11 and earlier allows remote att

23RISCO

Exploit-DB✓ VexDay Proof

Nokia Affix < 3.2.0 - btftp Remote Client

CVE-2005-2250—remotehardware03 jul 2005

Buffer overflow in Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitr

28RISCO

Exploit-DB✓ VexDay Proof

XML-RPC Library 1.3.0 - 'xmlrpc.php' Remote Code Injection

CVE-2005-1921—webappsphp01 jul 2005

Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PH

60RISCO

Exploit-DB✓ VexDay Proof

RaXnet Cacti 0.5/0.6.x/0.8.x - 'Graph_Image.php' Remote Command Execution Variant

CVE-2005-1524—webappsphp01 jul 2005

PHP file inclusion vulnerability in top_graph_header.php in Cacti 0.8.6d and possibly earlier versions allows remote att

28RISCO

Exploit-DB✓ VexDay Proof

XML-RPC Library 1.3.0 - 'xmlrpc.php' Remote Code Injection

CVE-2005-2116—webappsphp01 jul 2005

20RISCO

Exploit-DB✓ VexDay Proof

WordPress Core 1.5.1.2 - 'xmlrpc' Interface SQL Injection

CVE-2005-2108—webappsphp30 jun 2005

SQL injection vulnerability in XMLRPC server in WordPress 1.5.1.2 and earlier allows remote attackers to execute arbitra

23RISCO

Exploit-DB✓ VexDay Proof

CyberStrong eShop 4.2 - '10expand.asp' SQL Injection

CVE-2003-0509—webappsasp30 jun 2005

SQL injection vulnerability in Cyberstrong eShop 4.2 and earlier allows remote attackers to steal authentication informa

23RISCO

Exploit-DB✓ VexDay Proof

osTicket 1.2/1.3 - 'view.php?inc' Arbitrary Local File Inclusion

CVE-2005-2154—webappsphp30 jun 2005

PHP local file inclusion vulnerability in (1) view.php and (2) open.php in osTicket 1.3.1 beta and earlier allows remote

23RISCO

Exploit-DB✓ VexDay Proof

fsboard 2.0 - Directory Traversal

CVE-2005-2140—webappsasp30 jun 2005

Directory traversal vulnerability in default.asp for FSboard 2.0 allows remote attackers to read arbitrary files via "..

23RISCO

Exploit-DB✓ VexDay Proof

CyberStrong EShop 4.2 - '20review.asp' SQL Injection

CVE-2003-0509—webappsasp30 jun 2005

SQL injection vulnerability in Cyberstrong eShop 4.2 and earlier allows remote attackers to steal authentication informa

23RISCO

Exploit-DB✓ VexDay Proof

Microsoft Windows Message Queuing - Remote Buffer Overflow Universal (MS05-017) (v.0.3)

CVE-2005-0059—remotewindows29 jun 2005

Buffer overflow in the Message Queuing component of Microsoft Windows 2000 and Windows XP SP1 allows remote attackers to

60RISCO

Metasploit600

PHP XML-RPC Arbitrary Code Execution

CVE-2005-1921—29 jun 2005

Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PH

60RISCO

Exploit-DB✓ VexDay Proof

Hosting Controller 6.1 - 'error.asp' Cross-Site Scripting

CVE-2005-2077—webappsasp28 jun 2005

Cross-site scripting (XSS) vulnerability in error.asp for Hosting Controller allows remote attackers to inject arbitrary

23RISCO

Exploit-DB✓ VexDay Proof

BisonFTP 4R1 - Remote Denial of Service

CVE-2005-2078—doswindows28 jun 2005

BisonFTP Server V4R1 allows remote authenticated users to cause a denial of service via an invalid command with a long a

23RISCO

Exploit-DB✓ VexDay Proof

Solaris 9/10 - 'ld.so' Local Privilege Escalation (1)

CVE-2005-2072—localsolaris28 jun 2005

The runtime linker (ld.so) in Solaris 8, 9, and 10 trusts the LD_AUDIT environment variable in setuid or setgid programs

23RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.