Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
ATutor 1.4.3 - 'search.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-2044—webappsphp16 jun 2005
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitr
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ATutor 1.4.3 - 'tile.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-2044—webappsphp16 jun 2005
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitr
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
eXtropia Shopping Cart - 'web_store.cgi' Remote Command Execution
CVE-2004-0734—webappscgi15 jun 2005
Web_Store.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter.
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
McGallery 1.0/1.1 - Lang Argument File Disclosure
CVE-2005-1998—webappsphp15 jun 2005
Directory traversal vulnerability in admin.php in McGallery 1.1 allows remote attackers to read arbitrary files via a ..
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Mambo 4.5.2.1 - Fetch Password Hash
CVE-2005-2002—webappsphp15 jun 2005
SQL injection vulnerability in content.php in Mambo 4.5.2.2 and earlier allows remote attackers to execute arbitrary SQL
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Adobe Acrobat 7.0 / Adobe Reader 7.0 - File Existence / File Disclosure
CVE-2005-1306—remotewindows15 jun 2005
The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP Arena 1.1.3 - 'pafiledb.php' Remote Change Password
CVE-2005-2000—webappsphp15 jun 2005
Multiple SQL injection vulnerabilities in paFileDB 3.1 and earlier allow remote attackers to execute arbitrary SQL comma
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4 - launchd Race Condition
CVE-2005-1725—localosx14 jun 2005
launchd 106 in Apple Mac OS X 10.4.x up to 10.4.1 allows local users to overwrite arbitrary files via a symlink attack o
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ViRobot Advanced Server 2.0 - 'addschup' Remote Cookie
CVE-2005-2041—remotelinux14 jun 2005
Buffer overflow in addschup in HAURI ViRobot 2.0, and possibly other products, allows remote attackers to execute arbitr
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
AIX 5.2 - 'paginit' Local Privilege Escalation
CVE-2005-2236—localaix14 jun 2005
Format string vulnerability in the paginit command in IBM AIX 5.3, and possibly other versions, might allow local users
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
AIX 5.2 - 'ipl_varyon' Local Privilege Escalation
CVE-2005-0262—localaix14 jun 2005
Buffer overflow in ipl_varyon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -d argume
23RISCO
abrir ↗
Metasploit300
MS05-030 Microsoft Outlook Express NNTP Response Parsing Buffer Overflow
CVE-2005-1213—14 jun 2005
Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows rem
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
AIX 5.2 - 'paginit' Local Privilege Escalation
CVE-2005-2232—localaix14 jun 2005
Buffer overflow in invscout in IBM AIX 5.1.0 through 5.3.0 might allow local users to execute arbitrary code via a long
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
AIX 5.2 - 'netpmon' Local Privilege Escalation
CVE-2005-0263—localaix14 jun 2005
Buffer overflow in netpmon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -O argument.
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Singapore 0.9.11 Beta Image Gallery - 'index.php' Cross-Site Scripting
CVE-2005-1955—webappsphp13 jun 2005
Cross-site scripting (XSS) vulnerability in index.php in singapore 0.9.11 allows remote attackers to inject arbitrary we
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
JamMail 1.8 - Jammail.pl Arbitrary Command Execution
CVE-2005-1959—webappscgi12 jun 2005
jammail.pl in jamchen JamMail 1.8 allows remote attackers to execute arbitrary commands via shell metacharacters in the
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Webhints 1.03 - Remote Command Execution (Perl) (3)
CVE-2005-1950—webappscgi11 jun 2005
hints.pl in Webhints 1.03 allows remote attackers to execute arbitrary commands via shell metacharacters in the argument
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Webhints 1.03 - Remote Command Execution (Perl) (1)
CVE-2005-1950—webappscgi11 jun 2005
hints.pl in Webhints 1.03 allows remote attackers to execute arbitrary commands via shell metacharacters in the argument
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Webhints 1.03 - Remote Command Execution (C) (2)
CVE-2005-1950—webappscgi11 jun 2005
hints.pl in Webhints 1.03 allows remote attackers to execute arbitrary commands via shell metacharacters in the argument
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Invision Power Services Invision Gallery 1.0.1/1.3 - SQL Injection
CVE-2005-1948—webappsphp09 jun 2005
Multiple SQL injection vulnerabilities in Invision Gallery before 1.3.1 allow remote attackers to execute arbitrary SQL
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Tcpdump - bgp_update_print Remote Denial of Service
CVE-2005-1267—dosmultiple09 jun 2005
The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Loki Download Manager 2.0 - 'Catinfo.asp' SQL Injection
CVE-2005-1943—webappsasp08 jun 2005
Multiple SQL injection vulnerabilities in Loki download manager 2.0 allow remote attackers to execute arbitrary SQL comm
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Loki Download Manager 2.0 - 'default.asp' SQL Injection
CVE-2005-1943—webappsasp08 jun 2005
Multiple SQL injection vulnerabilities in Loki download manager 2.0 allow remote attackers to execute arbitrary SQL comm
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IPSwitch IMAP Server - LOGON Remote Stack Overflow
CVE-2005-1255—remotewindows07 jun 2005
Multiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite (ICS), a
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
GoodTech SMTP Server 5.14 - Denial of Service
CVE-2005-1931—doswindows07 jun 2005
GoodTech SMTP Server 5.14 allows remote attackers to cause a denial of service (application crash) via a RCPT TO command
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
FlatNuke 2.5.x - 'index.php?where' Full Path Disclosure
CVE-2005-1893—webappsphp07 jun 2005
FlatNuke 2.5.3 allows remote attackers to obtain sensitive information via invalid parameters to certain scripts, which
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WinZip 8.1 - Command Line Local Buffer Overflow
CVE-2004-1465—localwindows07 jun 2005
Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code via multiple vectors,
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Kaspersky AntiVirus - 'klif.sys' Local Privilege Escalation
CVE-2005-1905—localwindows07 jun 2005
The klif.sys driver in Kaspersky Labs Anti-Virus 5.0.227, 5.0.228, and 5.0.335 on Windows 2000 allows local users to gai
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
FlatNuke 2.5.x - 'help.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-1895—webappsphp07 jun 2005
Cross-site scripting (XSS) vulnerability in FlatNuke 2.5.3 allows remote attackers to inject arbitrary web script or HTM
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
FlatNuke 2.5.x - 'referer.php' Crafted Referer Arbitrary PHP Code Execution
CVE-2005-1894—webappsphp07 jun 2005
Direct code injection vulnerability in FlatNuke 2.5.3 allows remote attackers to execute arbitrary PHP code by placing t
23RISCO
abrir ↗
← anteriorpágina 1761 / 2.974próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.