Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
Remository - SQL Injection
CVE-2004-2143—webappsphp18 set 2004
SQL injection vulnerability in the ReMOSitory Server add-on module to Mambo Portal 4.5.1 (1.09) and earlier allows remot
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
DNS4Me 3.0 - Denial of Service / Cross-Site Scripting
CVE-2004-1691—dosmultiple17 set 2004
The Web Server in DNS4Me 3.0.0.4 allows remote attackers to cause a denial of service (CPU consumption and crash) via a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Google Toolbar 1.1.x - About.HTML HTML Injection
CVE-2004-2475—remotewindows17 set 2004
Cross-site scripting (XSS) vulnerability in Google Toolbar 2.0.114.1 allows remote attackers to inject arbitrary web scr
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP-Nuke - SQL Injection Edit/Save Messages
CVE-2004-1932—webappsphp16 set 2004
SQL injection vulnerability in (1) auth.php and (2) admin.php in PHP-Nuke 6.x through 7.2 allows remote attackers to exe
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Snitz Forums 2000 - 'down.asp' HTTP Response Splitting
CVE-2004-1687—webappsasp16 set 2004
CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response S
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Alt-N MDaemon 6.5.1 SMTP Server - Multiple Command Remote Overflows
CVE-2004-1546—remotewindows16 set 2004
Multiple buffer overflows in MDaemon 6.5.1 allow remote attackers to cause a denial of service (application crash) via a
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
myserver 0.7 - Directory Traversal
CVE-2004-2516—remotewindows15 set 2004
Directory traversal vulnerability in myServer 0.7 allows remote attackers to list arbitrary directories via an HTTP GET
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP 4.x/5.0.1 - PHP_Variables Remote Memory Disclosure
CVE-2004-0958—remotephp15 set 2004
php_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET, (2) POST, or
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
CUPS 1.1.x - UDP Packet Remote Denial of Service
CVE-2004-0558—doslinux15 set 2004
The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of s
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
SnipSnap 0.5.2 - HTTP Response Splitting
CVE-2004-1470—remotemultiple14 set 2004
CRLF injection vulnerability in SnipSnap 0.5.2a, and other versions before 1.0b1, allows remote attackers to perform HTT
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
QNX Photon phrelay-cfg - '-s' Overflow
CVE-2004-1681—dosunix13 set 2004
Multiple buffer overflows in (1) phrelay-cfg, (2) phlocale, (3) pkg-installer, or (4) input-cfg in QNX Photon microGUI f
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
RhinoSoft Serv-U FTP Server < 5.2 - Remote Denial of Service
CVE-2004-1675—doswindows13 set 2004
Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service (application crash) via a STORE UNIQU
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
QNX Photon input-cfg - '-s' Overflow
CVE-2004-1681—dosunix13 set 2004
Multiple buffer overflows in (1) phrelay-cfg, (2) phlocale, (3) pkg-installer, or (4) input-cfg in QNX Photon microGUI f
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
QNX Photon phlocale - '-s' Overflow
CVE-2004-1681—dosunix13 set 2004
Multiple buffer overflows in (1) phrelay-cfg, (2) phlocale, (3) pkg-installer, or (4) input-cfg in QNX Photon microGUI f
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
QNX Photon pkg-installer - '-s' Overflow
CVE-2004-1681—dosunix13 set 2004
Multiple buffer overflows in (1) phrelay-cfg, (2) phlocale, (3) pkg-installer, or (4) input-cfg in QNX Photon microGUI f
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PerlDesk Language Variable - Server-Side Script Execution
CVE-2004-1678—webappscgi13 set 2004
Directory traversal vulnerability in pdesk.cgi in PerlDesk allows remote attackers to read portions of arbitrary files a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
BlackJumboDog FTP Server 3.6.1 - Remote Buffer Overflow
CVE-2004-1439—remotewindows12 set 2004
Buffer overflow in BlackJumboDog 3.x allows remote attackers to execute arbitrary code via long FTP commands such as (1)
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
CDRecord's ReadCD - '$RSH exec()' SUID Shell Creation
CVE-2004-0806—locallinux11 set 2004
cdrecord in the cdrtools package before 2.01, when installed setuid root, does not properly drop privileges before execu
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apache mod_ssl 2.0.x - Remote Denial of Service
CVE-2004-0751—doslinux10 set 2004
The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows
45RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Citadel/UX 6.23 - Remote USER Directive
CVE-2004-1705—remotelinux09 set 2004
Buffer overflow in Citadel/UX 6.23 and earlier allows remote attackers to cause a denial of service via a long username.
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Trillian 0.74i MSN Module - Remote Buffer Overflow
CVE-2004-1666—remotewindows08 set 2004
Buffer overflow in the MSN module in Trillian 0.74i allows remote MSN servers to execute arbitrary code via a long strin
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PSNews 1.1 - 'No' Cross-Site Scripting
CVE-2004-1665—webappsphp05 set 2004
Cross-site scripting (XSS) vulnerability in index.php in PsNews 1.1 allows remote attackers to inject arbitrary web scri
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Call of Duty 1.4 - Denial of Service
CVE-2004-1664—dosmultiple05 set 2004
Call of Duty 1.4 and earlier allows remote attackers to cause a denial of service (game end) via a large (1) query or (2
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Oracle Database Server 8.1.7/9.0.x - ctxsys.driload Access Validation
CVE-2004-0637—remotemultiple03 set 2004
Oracle Database Server 8.1.7.4 through 9.2.0.4 allows local users to execute commands with additional privileges via the
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
SiteCubed MailWorks Professional - Authentication Bypass
CVE-2004-1661—webappsphp02 set 2004
MailWorks Professional allows remote attackers to bypass authentication and gain privileges via a cookie that contains "
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
CuteNews 0.88/1.3.x - 'index.php' Cross-Site Scripting
CVE-2004-1659—webappsphp02 set 2004
Cross-site scripting (XSS) vulnerability in index.php in CuteNews 1.3.6 and earlier allows remote attackers with Adminis
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
AOL Instant Messenger AIM - 'Away' Message Remote (2)
CVE-2004-0636—remotewindows02 set 2004
Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Courier-IMAP 3.0.2-r1 - 'auth_debug()' Remote Format String
CVE-2004-0777—remotebsd02 set 2004
Format string vulnerability in the auth_debug function in Courier-IMAP 1.6.0 through 2.2.1 and 3.x through 3.0.3, when l
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM DB2 DTS To String Conversion - Denial of Service
CVE-2005-4869—doslinux01 set 2004
The (1) to_char and (2) to_date function in IBM DB2 8.1 allows local users to cause a denial of service (application cra
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Newtelligence DasBlog 1.x - Request Log HTML Injection
CVE-2004-1657—webappsphp01 set 2004
Cross-site scripting (XSS) vulnerability in the Activity and Events Viewer for Newtelligence DasBlog allows remote attac
23RISCO
abrir ↗
← anteriorpágina 1794 / 2.974próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.