Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
Brooky CubeCart 2.0.1/2.0.4 - 'index.php?language' Cross-Site Scripting
CVE-2005-0443—webappsphp14 fev 2005
index.php in CubeCart 2.0.4 allows remote attackers to (1) obtain the full path for the web server or (2) conduct cross-
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Brooky CubeCart 2.0.1/2.0.4 - 'index.php?language' Traversal Arbitrary File Access
CVE-2005-0442—webappsphp14 fev 2005
Directory traversal vulnerability in index.php for CubeCart 2.0.4 allows remote attackers to read arbitrary files via th
23RISCO
abrir ↗
Metasploit200
CA BrightStor Discovery Service TCP Overflow
CVE-2005-2535—14 fev 2005
Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execu
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
vBulletin 3.0.4 - 'forumdisplay.php' Code Execution (1)
CVE-2005-0429—webappsphp14 fev 2005
Direct code injection vulnerability in forumdisplay.php in vBulletin 3.0 through 3.0.4, when showforumusers is enabled,
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
AWStats 6.4 - Denial of Service
CVE-2005-0435—doscgi14 fev 2005
awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to read server web logs by setting the loadplugin and pluginmo
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
AWStats 6.4 - Denial of Service
CVE-2005-0436—doscgi14 fev 2005
Direct code injection vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to execute portions of
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Quake 3 Engine - Infostring Crash and Shutdown
CVE-2005-0430—doswindows12 fev 2005
The Quake 3 engine, as used in multiple game packages, allows remote attackers to cause a denial of service (shutdown ga
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
CA BrightStor ARCserve Backup - Remote Buffer Overflow (PoC)
CVE-2005-2535—doslinux12 fev 2005
Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execu
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MercuryBoard 1.1.1 - SQL Injection
CVE-2005-0414—webappsphp12 fev 2005
SQL injection vulnerability in post.php for MercuryBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Armagetron Advanced 0.2.7.0 - Server Crash
CVE-2005-0369MEDIUMdoswindows10 fev 2005
Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 earlier allows remote attackers to cause a denial of serv
33RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MyPHP Forum 1.0 - SQL Injection
CVE-2005-0413—webappsphp10 fev 2005
Multiple SQL injection vulnerabilities in MyPHP Forum 1.0 allow remote attackers to execute arbitrary SQL commands via (
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Armagetron Advanced 0.2.7.0 - Server Crash
CVE-2005-0370—doswindows10 fev 2005
Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 and earlier allow remote attackers to cause a denial of s
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
CMScore - SQL Injection
CVE-2005-0368—webappsphp10 fev 2005
Multiple SQL injection vulnerabilities in CMScore allow remote attackers to execute arbitrary SQL commands via the (1) E
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
DelphiTurk FTP 1.0 - Passwords to Local Users
CVE-2005-0421—localwindows09 fev 2005
DelphiTurk FTP 1.0 stores usernames and passwords in the profile.dat file, which allows local users to gain privileges.
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ELOG 2.5.6 - Remote Shell
CVE-2005-0439—remotemultiple09 fev 2005
Buffer overflow in the decode_post function in ELOG before 2.5.7 allows remote attackers to execute arbitrary code via a
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Prozilla 1.3.7.3 - Remote Format String
CVE-2005-0523—remotelinux09 fev 2005
Format string vulnerability in ProZilla 1.3.7.3 and earlier allows remote attackers to execute arbitrary code via format
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
DelphiTurk CodeBank 3.1 - Local Username and Password Disclosure
CVE-2005-0422—localwindows08 fev 2005
DelphiTurk CodeBank (aka KodBank) 3.1 and earlier stores usernames and passwords in the Codebank registry key, which all
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP-Fusion 4.0 - 'Viewthread.php' Information Disclosure
CVE-2005-0345—webappsphp08 fev 2005
viewthread.php in php-fusion 4.x does not check the (1) forum_id or (2) forum_cat parameters, which allows remote attack
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Software602 602 Lan Suite 2004 2004.0.04.1221 - Arbitrary File Upload
CVE-2005-0344—remotewindows08 fev 2005
Directory traversal vulnerability in 602LAN SUITE 2004.0.04.1221 allows remote authenticated users to upload and execute
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX - AppleFileServer Remote Denial of Service
CVE-2005-0340—dososx08 fev 2005
Integer signedness error in Apple File Service (AFP Server) allows remote attackers to cause a denial of service (applic
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft MSN Messenger 6.2.0137 - '.png' Remote Buffer Overflow
CVE-2004-0597—remotewindows08 fev 2005
Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute a
45RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Foxmail 2.0 - 'MAIL FROM:' Denial of Service
CVE-2005-0339—doswindows07 fev 2005
Buffer overflow in Foxmail 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Foxmail 2.0 - 'MAIL FROM:' Denial of Service
CVE-2005-0636—doswindows07 fev 2005
Format string vulnerability in Foxmail Server 2.0 allows remote attackers to cause a denial of service (crash) and possi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Outlook 2003 - Web Access Login Form Remote URI redirection
CVE-2005-0420—webappsasp07 fev 2005
Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect users to arbitrary URLs
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Setuid perl - 'PerlIO_Debug()' Local Overflow
CVE-2005-0156—locallinux07 fev 2005
Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local use
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
3CServer 1.1 (FTP Server) - Remote Overflow
CVE-2005-0419—remotewindows07 fev 2005
Multiple heap-based buffer overflows in 3Com 3CServer allow remote authenticated users to execute arbitrary code via lon
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Setuid perl - 'PerlIO_Debug()' Root Owned File Creation Privilege Escalation
CVE-2005-0155—locallinux07 fev 2005
The PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to create arbitr
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX - '.DS_Store' Arbitrary File Overwrite
CVE-2005-0342—localosx07 fev 2005
The Finder in Mac OS X and earlier allows local users to overwrite arbitrary files and gain privileges by creating a har
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PerlDesk 1.x - SQL Injection
CVE-2005-0343—webappscgi05 fev 2005
SQL injection vulnerability in PerlDesk 1.x allows remote attackers to inject arbitrary SQL commands via the view parame
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Operator Shell (osh) 1.7-12 - Local Privilege Escalation
CVE-2005-3533—locallinux05 fev 2005
Buffer overflow in OSH before 1.7-15 allows local users to execute arbitrary code via a long current working directory a
23RISCO
abrir ↗
← anteriorpágina 1781 / 2.974próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.