Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
ARPUS/Ce - Local Overflow (setuid)
CVE-2005-1396—locallinux01 mai 2005
Race condition in Ce/Ceterm (aka ARPUS/Ce) 2.5.4 and earlier allows local users to write to arbitrary files via a symlin
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Solaris 10.x - ESRI Arcgis Format String Privilege Escalation
CVE-2005-1394—localsolaris30 abr 2005
Format string vulnerability in ArcGIS for ESRI ArcInfo Workstation 9.0 allows local users to gain privileges via format
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
JGS-Portal 3.0.1 - 'ID' SQL Injection
CVE-2005-1479—webappsphp30 abr 2005
SQL injection vulnerability in jgs_portal.php in JGS-Portal 3.0.1 and earlier allows remote attackers to execute arbitra
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Golden FTP Server Pro 2.52 - Remote Buffer Overflow (1)
CVE-2005-0634—remotewindows29 abr 2005
Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long USER command.
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
BulletProof FTP Server 2.4.0.31 - Local Privilege Escalation
CVE-2005-1371—localwindows29 abr 2005
BPFTPServer service in BulletProof FTP Server 2.4.0.31 does not properly drop privileges before opening files through th
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Golden FTP Server Pro 2.52 - Remote Buffer Overflow (2)
CVE-2005-0634—remotewindows29 abr 2005
Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long USER command.
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Snmppd - SNMP Proxy Daemon Remote Format String
CVE-2005-1246—remotelinux29 abr 2005
Format string vulnerability in the snmppd_log function in snmppd_util.c for snmppd 0.4.5 and earlier may allow remote at
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Golden FTP Server Pro 2.52 - Remote Buffer Overflow (3)
CVE-2005-0634—remotewindows29 abr 2005
Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long USER command.
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
FilePocket 1.2 - Local Proxy Password Disclosure
CVE-2005-1414—localwindows28 abr 2005
ExoticSoft FilePocket 1.2 stores sensitive proxy information, including proxy passwords, in plaintext in the registry, w
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Oracle Application Server 9.0 - HTTP Service Mod_Access Restriction Bypass
CVE-2005-1383—remotemultiple28 abr 2005
The OHS component 1.0.2 through 10.x, when UseWebcacheIP is disabled, in Oracle Application Server allows remote attacke
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Just William's Amazon Webstore - 'Closeup.php?Image' Cross-Site Scripting
CVE-2005-1403—webappsphp28 abr 2005
Multiple cross-site scripting (XSS) vulnerabilities in JustWilliam's Amazon Webstore 04050100 allow remote attackers to
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Oracle Application Server 9i - Webcache PartialPageErrorPage Cross-Site Scripting
CVE-2005-1381—remotemultiple28 abr 2005
Multiple cross-site scripting (XSS) vulnerabilities in Oracle Webcache 9i allow remote attackers to inject arbitrary web
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Just William's Amazon Webstore - 'CurrentIsExpanded' Cross-Site Scripting
CVE-2005-1403—webappsphp28 abr 2005
Multiple cross-site scripting (XSS) vulnerabilities in JustWilliam's Amazon Webstore 04050100 allow remote attackers to
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
phpCOIN 1.2 Pages Module - Multiple SQL Injections
CVE-2005-1384—webappsphp28 abr 2005
Multiple SQL injection vulnerabilities in phpCoin 1.2.2 allow remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ICUII 7.0 - Local Password Disclosure
CVE-2005-1411—localwindows28 abr 2005
Cybration ICUII 7.0 stores passwords in plaintext in the world-readable icuii.ini file, which allows local users to gain
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
phpCOIN 1.2 - 'login.php?PHPcoinsessid' SQL Injection
CVE-2005-1384—webappsphp28 abr 2005
Multiple SQL injection vulnerabilities in phpCoin 1.2.2 allow remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Just William's Amazon Webstore - 'CurrentNumber' Cross-Site Scripting
CVE-2005-1403—webappsphp28 abr 2005
Multiple cross-site scripting (XSS) vulnerabilities in JustWilliam's Amazon Webstore 04050100 allow remote attackers to
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NotJustBrowsing 1.0.3 - Local Password Disclosure
CVE-2005-1418—localwindows28 abr 2005
NetLeaf Limited NotJustBrowsing 1.0.3 stores the View Lock Password in plaintext in the notjustbrowsing.prf file, which
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Just William's Amazon Webstore - 'searchFor' Cross-Site Scripting
CVE-2005-1403—webappsphp28 abr 2005
Multiple cross-site scripting (XSS) vulnerabilities in JustWilliam's Amazon Webstore 04050100 allow remote attackers to
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
HP OpenView Radia Management Portal 1.0/2.0 - Remote Command Execution
CVE-2005-1370—remotewindows28 abr 2005
Unknown vulnerability in Radia Management Agent (RMA) in HP OpenView Radia Management Portal (RMP) 1.x and 2.x allows re
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
GoText 1.01 - Local User Informations Disclosure
CVE-2005-1424—localwindows28 abr 2005
StumbleInside GoText 1.01 stores sensitive username, mail address,and phone number information in plaintext in the GoTex
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Oracle Application Server 9i Webcache - Arbitrary File Corruption
CVE-2005-1382—remotemultiple28 abr 2005
The webcacheadmin module in Oracle Webcache 9i allows remote attackers to corrupt arbitrary files via a full pathname in
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Oracle Application Server 9i - Webcache Cache_dump_file Cross-Site Scripting
CVE-2005-1381—remotemultiple28 abr 2005
Multiple cross-site scripting (XSS) vulnerabilities in Oracle Webcache 9i allow remote attackers to inject arbitrary web
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
phpBB Notes Module - SQL Injection
CVE-2005-1378—webappsphp28 abr 2005
SQL injection vulnerability in posting_notes.php in the notes module for phpBB allows remote attackers to execute arbitr
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Dream4 Koobi CMS 4.2.3 - 'index.php?Q' SQL Injection
CVE-2005-0890—webappsphp27 abr 2005
SQL injection vulnerability in Dream4 Koobi CMS 4.2.3 allows remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Dream4 Koobi CMS 4.2.3 - 'index.php?P' SQL Injection
CVE-2005-0890—webappsphp27 abr 2005
SQL injection vulnerability in Dream4 Koobi CMS 4.2.3 allows remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Claroline E-Learning 1.5/1.6 - 'exercises_details.php?exo_id' SQL Injection
CVE-2005-1375—webappsphp27 abr 2005
Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow re
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Claroline 1.5/1.6 - 'myagenda.php?coursePath' Cross-Site Scripting
CVE-2005-1374—webappsphp27 abr 2005
Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dok
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Claroline E-Learning 1.5/1.6 - 'userInfo.php' Multiple SQL Injections
CVE-2005-1375—webappsphp27 abr 2005
Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow re
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Claroline 1.5/1.6 - 'toolaccess_details.php?tool' Cross-Site Scripting
CVE-2005-1374—webappsphp27 abr 2005
Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dok
23RISCO
abrir ↗
← anteriorpágina 1768 / 2.974próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.