Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
@lexPHPTeam @lex Guestbook 3.12 - PHP Remote File Inclusion
CVE-2004-1554—webappsphp27 set 2004
PHP remote file inclusion vulnerability in livre_include.php in @lex Guestbook allows remote attackers to execute arbitr
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows XP - TCP Packet Fragmentation Handling Denial of Service (4)
CVE-2005-4316—doswindows27 set 2004
HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows remote attackers to cause a denial of service via a "Rose Attack" th
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows XP - TCP Packet Fragmentation Handling Denial of Service (2)
CVE-2005-4316—doswindows27 set 2004
HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows remote attackers to cause a denial of service via a "Rose Attack" th
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
FreezingCold Broadboard - 'search.asp' SQL Injection
CVE-2004-1555—webappsasp27 set 2004
Multiple SQL injection vulnerabilities in BroadBoard Instant ASP Message Board allow remote attackers to run arbitrary S
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
FreezingCold Broadboard - 'profile.asp' SQL Injection
CVE-2004-1555—webappsasp27 set 2004
Multiple SQL injection vulnerabilities in BroadBoard Instant ASP Message Board allow remote attackers to run arbitrary S
23RISCO
abrir ↗
Metasploit200
YPOPS 0.6 Buffer Overflow
CVE-2004-1558—27 set 2004
Multiple stack-based buffer overflows in YPOPs! (aka YahooPOPS) 0.4 through 0.6 allow remote attackers to cause a denial
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - JPEG GDI+ Bind/Reverse/Admin/File Download
CVE-2004-0200—remotewindows27 set 2004
Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlu
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MyServer 0.7.1 - 'POST' Denial of Service
CVE-2004-2517—doslinux27 set 2004
myServer 0.7.1 allows remote attackers to cause a denial of service (crash) via a long HTTP POST request in a View=Logon
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows XP - TCP Packet Fragmentation Handling Denial of Service (3)
CVE-2005-4316—doswindows27 set 2004
HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows remote attackers to cause a denial of service via a "Rose Attack" th
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - JPEG GDI+ Remote Heap Overflow (MS04-028)
CVE-2004-0200—remotewindows25 set 2004
Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlu
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - JPEG GDI+ Overflow Download Shellcode (MS04-028)
CVE-2004-0200—remotewindows25 set 2004
Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlu
35RISCO
abrir ↗
Metasploit400
Zinf Audio Player 2.2.1 (PLS File) Stack Buffer Overflow
CVE-2004-0964—24 set 2004
Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to
50RISCO
abrir ↗
Metasploit300
Motorola WR850G v4.03 Credentials
CVE-2004-1550—24 set 2004
Motorola Wireless Router WR850G running firmware 4.03 allows remote attackers to bypass authentication, log on as an adm
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PopMessenger 1.60 - Remote Denial of Service
CVE-2004-1698—doswindows23 set 2004
The Base64 function in PopMessenger 1.60 (before 20 Sep 2004) and earlier allows remote attackers to cause a denial of s
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - JPEG GDI+ Overflow Administrator (MS04-028)
CVE-2004-0200—remotewindows23 set 2004
Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlu
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Alt-N MDaemon 6.5.1 - IMAP/SMTP Remote Buffer Overflow
CVE-2004-1546—remotewindows22 set 2004
Multiple buffer overflows in MDaemon 6.5.1 allow remote attackers to cause a denial of service (application crash) via a
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Sophos Anti-Virus 3.x - Reserved MS-DOS Name Scan Evasion
CVE-2004-0552—remotewindows22 set 2004
Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device na
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - JPEG GDI+ Overflow Shellcode
CVE-2004-0200—remotewindows22 set 2004
Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlu
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - JPEG Processing Buffer Overrun (MS04-028)
CVE-2004-0200—doswindows22 set 2004
Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlu
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
LaTeX2rtf 1.9.15 - Remote Buffer Overflow
CVE-2004-2167—remotelinux21 set 2004
Multiple buffer overflows in LaTeX2rtf 1.9.15, and possibly other versions, allow remote attackers to execute arbitrary
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Pinnacle ShowCenter 1.51 - Web Interface Skin Denial of Service
CVE-2004-1699—dosphp21 set 2004
SettingsBase.php in Pinnacle ShowCenter 1.51 allows remote attackers to cause a denial of service (web interface errors)
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
EmuLive Server4 - Authentication Bypass / Denial of Service
CVE-2004-1695—doscgi21 set 2004
EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to bypass authentication for the remote administrati
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
SudoEdit 1.6.8 - Local Change Permission
CVE-2004-1689—locallinux21 set 2004
sudoedit (aka sudo -e) in sudo 1.6.8 opens a temporary file with root privileges, which allows local users to read arbit
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Emulive Server4 Build 7560 - Remote Denial of Service
CVE-2004-1696—doswindows21 set 2004
EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to cause a denial of service (application crash) via
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
TUTOS - 'file_overview.php?link_id' SQL Injection
CVE-2004-2161—webappsphp20 set 2004
SQL injection vulnerability in file_overview.php in TUTOS 1.1 allows remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Mambo Open Source 4.5.1 (1.0.9) - 'Function.php' Arbitrary Command Execution
CVE-2004-1693—webappsphp20 set 2004
PHP remote file inclusion vulnerability in Function.php in Mambo 4.5 (1.0.9) allows remote attackers to execute arbitrar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Mambo Open Source 4.5.1 (1.0.9) - Cross-Site Scripting
CVE-2004-1692—webappsphp20 set 2004
Cross-site scripting (XSS) vulnerability in index.php in Mambo 4.5 (1.0.9) allows remote attackers to inject arbitrary w
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
TUTOS - 'app_new.php?t' Cross-Site Scripting
CVE-2004-2162—webappsphp20 set 2004
Multiple cross-site scripting (XSS) vulnerabilities in TUTOS 1.1 allow remote attackers to inject arbitrary web script o
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Pigeon Server 3.02.0143 - Denial of Service
CVE-2004-1688—doswindows19 set 2004
Pigeon Server 3.02.0143 and earlier allows remote attackers to cause a denial of service (infinite loop and CPU consumpt
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
CDRecord's ReadCD - Local Privilege Escalation
CVE-2004-0806—locallinux19 set 2004
cdrecord in the cdrtools package before 2.01, when installed setuid root, does not properly drop privileges before execu
23RISCO
abrir ↗
← anteriorpágina 1793 / 2.974próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.