Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
Hosting Controller 0.6.1 - User Registration (3)
CVE-2005-1784—webappsasp27 mai 2005
Hosting Controller 6.1 HotFix 2.0 and earlier allows remote attackers to steal passwords and gain privileges via a modif
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
BookReview 1.0 - 'add_review.htm' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-1782—webappsphp26 mai 2005
Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary we
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
BookReview 1.0 - 'add_contents.htm' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-1782—webappsphp26 mai 2005
Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary we
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
BookReview 1.0 - 'add_url.htm?node' Cross-Site Scripting
CVE-2005-1782—webappsphp26 mai 2005
Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary we
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
BookReview 1.0 - 'suggest_review.htm?node' Cross-Site Scripting
CVE-2005-1782—webappsphp26 mai 2005
Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary we
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Gentoo Webapp-Config 1.10 - Insecure File Creation
CVE-2005-1707—locallinux26 mai 2005
The fn_show_postinst function in Gentoo webapp-config before 1.10-r14 allows local users to overwrite arbitrary files vi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
BookReview 1.0 - 'add_classification.htm?isbn' Cross-Site Scripting
CVE-2005-1782—webappsphp26 mai 2005
Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary we
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
BookReview 1.0 - 'add_booklist.htm?node' Cross-Site Scripting
CVE-2005-1782—webappsphp26 mai 2005
Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary we
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Maxwebportal 1.36 - 'Password.asp' Change Password (3)
CVE-2005-1779—webappsasp26 mai 2005
SQL injection vulnerability in password.asp in MaxWebPortal 1.35, 1.36, 2.0, and 20050418 Next allows remote attackers t
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
BookReview 1.0 - 'search.htm?submit string' Cross-Site Scripting
CVE-2005-1782—webappsphp26 mai 2005
Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary we
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
BookReview 1.0 - 'contact.htm?user' Cross-Site Scripting
CVE-2005-1782—webappsphp26 mai 2005
Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary we
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
BookReview 1.0 - 'suggest_category.htm?node' Cross-Site Scripting
CVE-2005-1782—webappsphp26 mai 2005
Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary we
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Maxwebportal 1.36 - 'Password.asp' Change Password (2)
CVE-2005-1779—webappsasp26 mai 2005
SQL injection vulnerability in password.asp in MaxWebPortal 1.35, 1.36, 2.0, and 20050418 Next allows remote attackers t
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Nokia 9500 - vCard Viewer Remote Denial of Service
CVE-2005-1801—doshardware26 mai 2005
The vCard viewer in Nokia 9500 allows attackers to cause a denial of service (crash) via a vCard with a long Name field,
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Maxwebportal 1.36 - 'Password.asp' Change Password (1) (HTML)
CVE-2005-1779—webappsasp26 mai 2005
SQL injection vulnerability in password.asp in MaxWebPortal 1.35, 1.36, 2.0, and 20050418 Next allows remote attackers t
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - Cryptoloop Information Disclosure
CVE-2004-2135—locallinux26 mai 2005
cryptoloop on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or greater, has certain "IV c
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Berlios GPSD 1.91-1 < 2.7-2 - Format String
CVE-2004-1388—remotelinux25 mai 2005
Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Exim 4.41 - 'dns_build_reverse' Local Read Emails
CVE-2005-0021—locallinux25 mai 2005
Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with
23RISCO
abrir ↗
Metasploit200
Berlios GPSD Format String Vulnerability
CVE-2004-1388—25 mai 2005
Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Blue Coat Reporter 7.0/7.1 - License HTML Injection
CVE-2005-1709—remotewindows24 mai 2005
Unknown vulnerability in Blue Coat Reporter before 7.1.2 allows remote unauthenticated attackers to add a license.
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Blue Coat Reporter 7.0/7.1 - Privilege Escalation
CVE-2005-1708—remotewindows24 mai 2005
templates.admin.users.user_form_processing in Blue Coat Reporter before 7.1.2 allows authenticated users to gain adminis
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Sun JavaMail 1.x - Multiple Information Disclosure Vulnerabilities
CVE-2005-1754—webappsjava24 mai 2005
JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to read arbitrary files via a f
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Gearbox Software Halo Game Server 1.06/1.07 - Infinite Loop Denial of Service
CVE-2005-1741—doswindows24 mai 2005
Gearbox Software Halo: Combat Evolved 1.6 allows remote attackers to cause a denial of service (infinite loop) via malfo
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
GForge 3.x - Arbitrary Command Execution
CVE-2005-1752—webappsphp24 mai 2005
viewFile.php in the scm component of Gforge before 4.0 allows remote attackers to execute arbitrary commands via shell m
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Warrior Kings 1.3 And Warrior Kings: Battles 1.23 - Remote Format String
CVE-2005-1702—remotemultiple23 mai 2005
Format string vulnerability in Warrior Kings: Battles 1.23 and earlier and Warrior Kings 1.3 and earlier allows remote a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Warrior Kings: Battles 1.23 - Remote Denial of Service
CVE-2005-1703—dosmultiple23 mai 2005
Warrior Kings: Battles 1.23 and earlier allows remote attackers to cause a denial of service (server crash) via a partia
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MWChat 6.8 - 'chat.php' SQL Injection
CVE-2005-3324—webappsphp21 mai 2005
SQL injection vulnerability in chat.php in MWChat 6.8 allows remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
TCP TIMESTAMPS - Denial of Service
CVE-2005-0356—dosmultiple21 mai 2005
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled
45RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WebAPP 0.9.9.2.1 - Remote Command Execution (1)
CVE-2005-1628—webappscgi20 mai 2005
apage.cgi in WebAPP 0.9.9.2.1, and possibly earlier versions, allows remote attackers to execute arbitrary commands via
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WebAPP 0.9.9.2.1 - Remote Command Execution (2)
CVE-2005-1628—webappscgi20 mai 2005
apage.cgi in WebAPP 0.9.9.2.1, and possibly earlier versions, allows remote attackers to execute arbitrary commands via
28RISCO
abrir ↗
← anteriorpágina 1764 / 2.974próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.