Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
ASP-Rider - SQL Injection
CVE-2004-1401—webappsasp14 dez 2004
SQL injection vulnerability in verify.asp in Asp-rider allows remote attackers to execute arbitrary SQL statements and b
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 2.4.28/2.6.9 - 'scm_send Local' Denial of Service
CVE-2004-1016—doslinux14 dez 2004
The scm_send function in the scm layer for Linux kernel 2.4.x up to 2.4.28, and 2.6.x up to 2.6.9, allows local users to
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Active Server Corner ASP Calendar 1.0 - Administrative Access
CVE-2004-1400—webappsasp14 dez 2004
The control panel in ASP Calendar does not require authentication to access, which allows remote attackers to gain unaut
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 2.4.22-28/2.6.9 - 'igmp.c' Local Denial of Service
CVE-2004-1137—doslinux14 dez 2004
Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local an
28RISCO
abrir ↗
Metasploit500
MS04-045 Microsoft WINS Service Memory Overwrite
CVE-2004-1080—14 dez 2004
The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remo
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Lithtech Engine (new protocol) - Socket Unreacheable Denial of Service
CVE-2004-1395—doswindows13 dez 2004
The Lithtech engine, as used in (1) Contract Jack 1.1 and earlier, (2) No one lives forever 2 1.3 and earlier, (3) Tron
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
UBBCentral UBB.Threads 6.2.3/6.5 - 'showflat.php?Cat' Cross-Site Scripting
CVE-2004-2510—webappsphp13 dez 2004
Cross-site scripting (XSS) vulnerability in showflat.php in Infopop UBB.Threads before 6.5 allows remote attackers to in
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Multiple Vendor - TCP Session Acknowledgement Number Denial of Service
CVE-2005-1184—dosmultiple13 dez 2004
The TCP/IP stack in multiple operating systems allows remote attackers to cause a denial of service (CPU consumption) vi
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Opera Web Browser 7.54 - 'KDE KFMCLIENT' Remote Command Execution
CVE-2004-1491—doslinux13 dez 2004
Opera 7.54 and earlier uses kfmclient exec to handle unknown MIME types, which allows remote attackers to execute arbitr
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
UBBCentral UBB.Threads 6.2.3/6.5 - 'login.php?Cat' Cross-Site Scripting
CVE-2004-2509—webappsphp13 dez 2004
Cross-site scripting (XSS) vulnerabilities in (1) calendar.php, (2) login.php, and (3) online.php in Infopop UBB.Threads
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
UBBCentral UBB.Threads 6.2.3/6.5 - 'online.php?Cat' Cross-Site Scripting
CVE-2004-2509—webappsphp13 dez 2004
Cross-site scripting (XSS) vulnerabilities in (1) calendar.php, (2) login.php, and (3) online.php in Infopop UBB.Threads
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
phpMyAdmin 2.x - External Transformations Remote Command Execution
CVE-2004-1147—webappsphp13 dez 2004
phpMyAdmin 2.6.0-pl2, and other versions before 2.6.1, with external transformations enabled, allows remote attackers to
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
UBBCentral UBB.Threads 6.2.3/6.5 - 'calendar.php?Cat' Cross-Site Scripting
CVE-2004-2509—webappsphp13 dez 2004
Cross-site scripting (XSS) vulnerabilities in (1) calendar.php, (2) login.php, and (3) online.php in Infopop UBB.Threads
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Citadel/UX 6.27 - Format String
CVE-2004-1192—remotelinux12 dez 2004
Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute ar
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Debian top - Format String
CVE-2000-0998—locallinux12 dez 2004
Format string vulnerability in top program allows local attackers to gain root privileges via the "kill" or "renice" fun
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Easy Software Products LPPassWd 1.1.22 - Resource Limit Denial of Service
CVE-2004-1269—doswindows11 dez 2004
lppasswd in CUPS 1.1.22 does not remove the passwd.new file if it encounters a file-size resource limit while writing to
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
GNU Wget 1.x - Multiple Vulnerabilities
CVE-2004-1488—remotelinux10 dez 2004
wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which m
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NapShare 1.2 - Remote Buffer Overflow (2)
CVE-2004-1286—remotelinux10 dez 2004
Buffer overflow in the auto_filter_extern function in auto.c for NapShare 1.2, with the extern filter enabled, allows re
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
F-Secure Policy Manager 5.11 - 'FSMSH.dll' CGI Application Installation Full Path Disclosure
CVE-2004-1223—remotewindows09 dez 2004
The Management Agent in F-Secure Policy Manager 5.11.2810 allows remote attackers to gain sensitive information, such as
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX Adobe Version Cue - Local Privilege Escalation
CVE-2005-1307—localosx08 dez 2004
The (1) stopserver.sh and (2) startserver.sh scripts in Adobe Version Cue on Mac OS X uses the current working directory
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MD5 - Message Digest Algorithm Hash Collision
CVE-2004-2761CRITICALdosmultiple07 dez 2004
The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context-dependent attackers to co
53RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Battlefield 1942 1.6.19 + Vietnam 1.2 - Broadcast Client Crash
CVE-2004-1220—doswindows07 dez 2004
Battlefield 1942 1.6.19 and earlier, and Battlefield Vietnam 1.2 and earlier, allows a remote master server to cause a d
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
darryl burgdorf weblibs 1.0 - Directory Traversal
CVE-2004-1221—webappsphp07 dez 2004
Directory traversal vulnerability in weblibs.pl in WebLibs 1.0 allows remote attackers to read arbitrary files via .. se
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
KDE FTP - KIOSlave URI Arbitrary FTP Server Command Execution
CVE-2004-1165—remotelinux06 dez 2004
Konqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
GetRight 5.2a - '.grs' Skin File Buffer Overflow
CVE-2004-0575—doswindows06 dez 2004
Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows S
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5.0.1 - FTP URI Arbitrary FTP Server Command Execution
CVE-2004-1166—remotewindows06 dez 2004
CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows remote attackers to execute
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NapShare 1.2 - Remote Buffer Overflow (1)
CVE-2004-1286—remotelinux06 dez 2004
Buffer overflow in the auto_filter_extern function in auto.c for NapShare 1.2, with the extern filter enabled, allows re
28RISCO
abrir ↗
Metasploit400
Microsoft IIS ISAPI w3who.dll Query String Overflow
CVE-2004-1134—06 dez 2004
Buffer overflow in the Microsoft W3Who ISAPI (w3who.dll) allows remote attackers to cause a denial of service and possib
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Hosting Controller 0.6.1 Hotfix 1.4 - Directory Browsing
CVE-2004-1217—remotewindows05 dez 2004
Hosting Controller 6.1 Hotfix 1.4, and possibly other versions, allows remote attackers to view arbitrary directories by
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PAFileDB 3.1 - Error Message Full Path Disclosure
CVE-2005-0780—webappsphp04 dez 2004
paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) auth.php, (
23RISCO
abrir ↗
← anteriorpágina 1786 / 2.974próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.