Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
Linux Kernel 2.4.x/2.6.x - Multiple ISO9660 Filesystem Handling Vulnerabilities
CVE-2005-0815—doslinux17 mar 2005
Multiple "range checking flaws" in the ISO9660 filesystem handler in Linux 2.6.11 and earlier may allow attackers to cau
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MailEnable 1.8 - Remote Format String Denial of Service
CVE-2005-0804—doswindows17 mar 2005
Format string vulnerability in MailEnable 1.8 allows remote attackers to cause a denial of service (application crash) v
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
McNews 1.x - 'install.php' Arbitrary File Inclusion
CVE-2005-0800—webappsphp17 mar 2005
PHP remote file inclusion vulnerability in install.php in mcNews 1.3 and earlier allows remote attackers to execute arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ACS Blog 0.8/0.9/1.0/1.1 - 'search.asp' Cross-Site Scripting
CVE-2005-0802—webappsasp17 mar 2005
Cross-site scripting (XSS) vulnerability in search.asp in ACS Blog 0.8 through 1.1b allows remote attackers to execute a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
iPool 1.6.81 - Local Password Disclosure
CVE-2005-0823—localwindows16 mar 2005
ThePoolClub (1) iPool and (2) iSnooker 1.6.81 and earlier stores usernames and passwords in cleartext in the MyDetails.t
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
iSnooker 1.6.8 - Local Password Disclosure
CVE-2005-0823—localwindows16 mar 2005
ThePoolClub (1) iPool and (2) iSnooker 1.6.81 and earlier stores usernames and passwords in cleartext in the MyDetails.t
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PunBB 1.2.3 - Multiple HTML Injection Vulnerabilities
CVE-2005-0818—webappsphp16 mar 2005
Cross-site scripting (XSS) vulnerability in PunBB 1.2.3 allows remote attackers to inject arbitrary web script or HTML v
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHPOpenChat 2.3.4/3.0.1 - 'ENGLISH_poc.php' Remote File Inclusion
CVE-2005-0862—webappsphp15 mar 2005
Multiple PHP remote file inclusion vulnerabilities in PHPOpenChat 3.0.1 and earlier allow remote attackers to execute ar
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
GoodTech Telnet Server < 5.0.7 - Buffer Overflow Crash
CVE-2005-0768—doswindows15 mar 2005
Buffer overflow in the administration web server for GoodTech Telnet Server 4.0 and 5.0, and possibly all versions befor
50RISCO
abrir ↗
Metasploit200
GoodTech Telnet Server Buffer Overflow
CVE-2005-0768—15 mar 2005
Buffer overflow in the administration web server for GoodTech Telnet Server 4.0 and 5.0, and possibly all versions befor
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHPOpenChat 2.3.4/3.0.1 - 'poc.php' Remote File Inclusion
CVE-2005-0862—webappsphp15 mar 2005
Multiple PHP remote file inclusion vulnerabilities in PHPOpenChat 3.0.1 and earlier allow remote attackers to execute ar
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHPOpenChat 2.3.4/3.0.1 - 'poc_loginform.php?phpbb_root_path' Remote File Inclusion
CVE-2005-0862—webappsphp15 mar 2005
Multiple PHP remote file inclusion vulnerabilities in PHPOpenChat 3.0.1 and earlier allow remote attackers to execute ar
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ZPanel 2.5 - SQL Injection
CVE-2005-0792—webappsphp15 mar 2005
SQL injection vulnerability in ZPanel 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) uname pa
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Frank McIngvale LuxMan 0.41 - Local Buffer Overflow
CVE-2005-0385—locallinux14 mar 2005
Buffer overflow in luxman before 0.41, if used with certain insecure svgalib libraries, allows local users to execute ar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
LimeWire 4.1.2 < 4.5.6 - 'GET' Remote File Read
CVE-2005-0788—remotemultiple14 mar 2005
LimeWire 4.1.2 through 4.5.6 allows remote attackers to read arbitrary files by specifying the full pathname in a Gnutel
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PaX - Double-Mirrored VMA munmap Privilege Escalation
CVE-2005-0666—locallinux14 mar 2005
Unknown vulnerability in PaX from the September 2003 release to 2.2 before 2005.03.05, related to SEGMEXEC or RANDEXEC a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Mozilla Suite/Firefox/Thunderbird - Nested Anchor Tag Status Bar Spoofing
CVE-2005-4809—remotelinux14 mar 2005
Mozilla Firefox 1.0.1 and possibly other versions, including Mozilla and Thunderbird, allows remote attackers to spoof t
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHPAdsNew 2.0.4 - 'AdFrame.php' Cross-Site Scripting
CVE-2005-0791—webappsphp14 mar 2005
Cross-site scripting (XSS) vulnerability in adframe.php in phpAdsNew 2.0.4-pr1, when register_globals is enabled, allows
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
SimpGB 1.0 - 'Guestbook.php' SQL Injection
CVE-2005-0786—webappsphp14 mar 2005
SQL injection vulnerability in gb_new.inc in SimpGB allows remote attackers to execute arbitrary SQL commands via the qu
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Phorum 5.0.14 - Multiple Subject and Attachment HTML Injection Vulnerabilities
CVE-2005-0783—webappsphp14 mar 2005
Cross-site scripting (XSS) vulnerability in Phorum before 5.0.14a allows remote attackers to inject arbitrary web script
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
HolaCMS 1.2.x/1.4.x Voting Module - Directory Traversal Remote File Corruption
CVE-2005-0796—webappsphp13 mar 2005
Directory traversal vulnerability in HolaCMS 1.4.9-1 allows remote attackers to overwrite arbitrary files via a "holaDB/
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Sentinel LM 7.x - UDP License Service Remote Buffer Overflow
CVE-2005-0353—remotewindows13 mar 2005
Buffer overflow in the Sentinel LM (Lservnt) service in the Sentinel License Manager 7.2.0.2 allows remote attackers to
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PAFileDB 1.1.3/2.1.1/3.0/3.1 - 'category.php?start' Cross-Site Scripting
CVE-2005-0782—webappsphp12 mar 2005
Cross-site scripting (XSS) vulnerability in (1) viewall.php and (2) category.php for paFileDB 3.1 and earlier allows rem
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
HolaCMS 1.2/1.4.x Voting Module - Remote File Corruption
CVE-2005-0795—webappsphp12 mar 2005
HolaCMS 1.4.9 does not restrict file access to the holaDB/votes directory, which allows remote attackers to overwrite ar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PAFileDB 1.1.3/2.1.1/3.0/3.1 - 'category.php?start' SQL Injection
CVE-2005-0781—webappsphp12 mar 2005
SQL injection vulnerability in (1) viewall.php and (2) category.php in paFileDB 3.1 and earlier allows remote attackers
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Ethereal 0.10.9 (Windows) - '3G-A11' Remote Buffer Overflow
CVE-2005-0739—doswindows12 mar 2005
The IAPP dissector (packet-iapp.c) for Ethereal 0.9.1 to 0.10.9 does not properly use certain routines for formatting st
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PAFileDB 1.1.3/2.1.1/3.0/3.1 - 'viewall.php?start' SQL Injection
CVE-2005-0781—webappsphp12 mar 2005
SQL injection vulnerability in (1) viewall.php and (2) category.php in paFileDB 3.1 and earlier allows remote attackers
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PAFileDB 1.1.3/2.1.1/3.0/3.1 - 'viewall.php?start' Cross-Site Scripting
CVE-2005-0782—webappsphp12 mar 2005
Cross-site scripting (XSS) vulnerability in (1) viewall.php and (2) category.php for paFileDB 3.1 and earlier allows rem
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MySQL 4.x - CREATE FUNCTION Arbitrary libc Code Execution
CVE-2005-0709—remotemultiple11 mar 2005
MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
UBBCentral UBB.Threads 6.0 - 'Printthread.php' SQL Injection
CVE-2005-1199—webappsphp11 mar 2005
SQL injection vulnerability in printthread.php in UBB.Threads allows remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗
← anteriorpágina 1777 / 2.974próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.