Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
Ocean12 Calendar Manager 1.0 - Admin Form SQL Injection
CVE-2005-1223—webappsphp20 abr 2005
Multiple SQL injection vulnerabilities in Ocean12 Calendar manager 1.01 allow remote attackers to execute arbitrary SQL
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP Labs - '.proFile' File URI Cross-Site Scripting
CVE-2005-1233—webappsphp20 abr 2005
Cross-site scripting (XSS) vulnerability in index.php in PHP Labs proFile allows remote attackers to inject arbitrary we
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
DUportal Pro 3.4 - 'detail.asp' Multiple SQL Injections
CVE-2005-1224—webappsasp20 abr 2005
Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL comman
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ECommPro 3.0 - 'Admin/login.asp' SQL Injection
CVE-2005-1412—webappsasp20 abr 2005
SQL injection vulnerability in verify.asp for Ecomm Professional Guestbook 3.x allows remote attackers to execute arbitr
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
DUportal Pro 3.4 - 'default.asp' Multiple SQL Injections
CVE-2005-1224—webappsasp20 abr 2005
Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL comman
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Logwatch 2.6 Secure Script - Denial of Service
CVE-2005-1061—doslinux20 abr 2005
The secure script in LogWatch before 2.6-2 allows attackers to prevent LogWatch from detecting malicious activity via ce
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP Labs - '.proFile' Dir URI Cross-Site Scripting
CVE-2005-1233—webappsphp20 abr 2005
Cross-site scripting (XSS) vulnerability in index.php in PHP Labs proFile allows remote attackers to inject arbitrary we
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
DUportal Pro 3.4 - 'cat.asp' Multiple SQL Injections
CVE-2005-1224—webappsasp20 abr 2005
Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL comman
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
DUportal 3.1.2 - 'inc_poll_voting.asp?DAT_PARENT' SQL Injection
CVE-2005-1236—webappsasp20 abr 2005
Multiple SQL injection vulnerabilities in DUware DUportal 3.1.2 and 3.1.2 SQL allow remote attackers to execute arbitrar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Multiple OS (Win32/Aix/Cisco) - Crafted ICMP Messages Denial of Service (MS05-019)
CVE-2004-0790—dosmultiple20 abr 2005
Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via
45RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
DUportal Pro 3.4 - 'result.asp' Multiple SQL Injections
CVE-2005-1224—webappsasp20 abr 2005
Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL comman
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
DUportal Pro 3.4 - 'inc_vote.asp' Multiple SQL Injections
CVE-2005-1224—webappsasp20 abr 2005
Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL comman
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PMSoftware Simple Web Server 1.0 - Remote Stack Overflow
CVE-2005-1173—remotewindows20 abr 2005
Buffer overflow in PMSoftware Simple Web Server 1.0 allows remote attackers to execute arbitrary code via a long GET req
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Neslo Desktop Rover 3.0 - Malformed Packet Remote Denial of Service
CVE-2005-1204—dosmultiple20 abr 2005
Desktop Rover 3.0, and possibly earlier versions, allows remote attackers to cause a denial of service (application cras
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Netref 4.2 - 'Cat_for_gen.php' Remote PHP Script Injection
CVE-2005-1222—webappsphp20 abr 2005
cat_for_gen.php in Annuaire Netref 4.2 allows remote attackers to execute arbitrary PHP code by setting the ad_direct pa
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Exchange Server - Remote Code Execution (MS05-021)
CVE-2005-0560—remotewindows19 abr 2005
Heap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink.dll in the SMTP service of Exchange Server
45RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows 98/2000 Explorer - Preview Pane Script Injection
CVE-2005-1191—remotewindows19 abr 2005
The Web View DLL (webvw.dll), as used in Windows Explorer on Windows 2000 systems, does not properly filter an apostroph
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
CityPost Simple PHP Upload - 'Simple-upload-53.php' Cross-Site Scripting
CVE-2005-4671—webappsphp19 abr 2005
Cross-site scripting (XSS) vulnerability in simple-upload-53.php in CityPost Simple PHP Upload 5.3 allows remote attacke
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
CityPost PHP LNKX 52.0 - 'message.php' Cross-Site Scripting
CVE-2005-4670—webappsphp19 abr 2005
Cross-site scripting (XSS) vulnerability in message.php in CityPost Automated Link Exchange (LNKX) allows remote attacke
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MVNForum 1.0 - Search Cross-Site Scripting
CVE-2005-1183—webappsphp18 abr 2005
Cross-site scripting (XSS) vulnerability in mvnForum 1.0 RC4 allows remote attackers to inject arbitrary web script or H
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
eGroupWare 1.0 - 'index.php?cats_app' SQL Injection
CVE-2005-1203—webappsphp18 abr 2005
Multiple SQL injection vulnerabilities in index.php in eGroupware before 1.0.0.007 allow remote attackers to execute arb
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
eGroupWare 1.0 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-1202—webappsphp18 abr 2005
Multiple cross-site scripting (XSS) vulnerabilities in eGroupware before 1.0.0.007 allow remote attackers to inject arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
eGroupWare 1.0 - '/tts/index.php?filter' SQL Injection
CVE-2005-1203—webappsphp18 abr 2005
Multiple SQL injection vulnerabilities in index.php in eGroupware before 1.0.0.007 allow remote attackers to execute arb
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
eGroupWare 1.0 - '/sitemgr-site/index.php?category_id' Cross-Site Scripting
CVE-2005-1202—webappsphp18 abr 2005
Multiple cross-site scripting (XSS) vulnerabilities in eGroupware before 1.0.0.007 allow remote attackers to inject arbi
23RISCO
abrir ↗
Metasploit300
Oracle DB SQL Injection via SYS.DBMS_CDC_SUBSCRIBE.ACTIVATE_SUBSCRIPTION
CVE-2005-4832—18 abr 2005
SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQL
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - Malformed IP Options Denial of Service (MS05-019)
CVE-2004-0790—doswindows17 abr 2005
Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via
45RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - Malformed IP Options Denial of Service (MS05-019)
CVE-2005-0688—doswindows17 abr 2005
Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service (
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - Malformed IP Options Denial of Service (MS05-019)
CVE-2004-1060—doswindows17 abr 2005
Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause
45RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - Malformed IP Options Denial of Service (MS05-019)
CVE-2004-0230—doswindows17 abr 2005
TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial o
45RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - Malformed IP Options Denial of Service (MS05-019)
CVE-2005-0048—doswindows17 abr 2005
Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Server 2003, and older operating systems allows remote attackers
35RISCO
abrir ↗
← anteriorpágina 1770 / 2.974próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.