Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
Merak Mail Server 7.4.5 - 'address.html' Multiple Cross-Site Scripting Vulnerabilities
CVE-2004-1719—webappsphp17 jul 2004
Multiple cross-site scripting (XSS) vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbit
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Merak Mail Server 7.4.5 - 'attachment.html?attachmentpage_text_error' Cross-Site Scripting
CVE-2004-1719—webappsphp17 jul 2004
Multiple cross-site scripting (XSS) vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbit
23RISCO
abrir ↗
Metasploit500
Medal of Honor Allied Assault getinfo Stack Buffer Overflow
CVE-2004-0735—17 jul 2004
Buffer overflow in Medal of Honor (1) Allied Assault 1.11v9 and earlier, (2) Breakthrough 2.40b and earlier, and (3) Spe
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Gallery 1.4.4 - Remote Server-Side Script Execution
CVE-2004-1466—webappsphp17 jul 2004
The set_time_limit function in Gallery before 1.4.4_p2 deletes non-image files in a temporary directory every 30 seconds
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Merak Mail Server 7.4.5 - HTML Message Body Cross-Site Scripting
CVE-2004-1719—webappsphp17 jul 2004
Multiple cross-site scripting (XSS) vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbit
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Merak Mail Server 7.4.5 - address.html Full Path Disclosure
CVE-2004-1720—webappsphp17 jul 2004
The (1) address.html and possibly (2) calendar.html pages in Merak Mail Server 5.2.7 allow remote attackers to gain sens
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Merak Mail Server 7.4.5 - 'calendar.html?schedule' SQL Injection
CVE-2004-1722—webappsphp17 jul 2004
SQL injection vulnerability in calendar.html in Merak Mail Server 5.2.7 allows remote attackers to execute arbitrary SQL
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows Server 2000 - Universal Language Utility Manager (MS04-019)
CVE-2004-0213—localwindows17 jul 2004
Utility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with raised privileges, which all
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows Server 2000 - POSIX Subsystem Privilege Escalation (MS04-020)
CVE-2004-0213—localwindows17 jul 2004
Utility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with raised privileges, which all
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Merak Mail Server 7.4.5 - 'settings.html' Multiple Cross-Site Scripting Vulnerabilities
CVE-2004-1719—webappsphp17 jul 2004
Multiple cross-site scripting (XSS) vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbit
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows NT 4.0/2000 - POSIX Subsystem Local Buffer Overflow / Local Privilege Escalation (MS04-020)
CVE-2004-0210HIGHsob ataquelocalwindows16 jul 2004
The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain pa
71RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
RaXnet Cacti 0.6.x/0.8.x - 'Auth_Login.php' SQL Injection
CVE-2004-1737—webappsphp16 jul 2004
SQL injection vulnerability in auth_login.php in Cacti 0.8.5a allows remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
CuteNews 1.3.1 - 'show_archives.php' Cross-Site Scripting
CVE-2004-0660—webappsphp16 jul 2004
Cross-site scripting (XSS) vulnerability in (1) show_archives.php, (2) show_news.php, and possibly other php files in Cu
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
BoardPower Forum - 'ICQ.cgi' Cross-Site Scripting
CVE-2004-1441—webappscgi15 jul 2004
Cross-site scripting (XSS) vulnerability in icq.cgi in Board Power 2.04PF allows remote attackers to inject arbitrary we
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Gattaca Server 2003 - Cross-Site Scripting
CVE-2004-2522—webappscgi15 jul 2004
Cross-site scripting (XSS) vulnerability in web.tmpl in Gattaca Server 2003 1.1.10.0 allows remote attackers to inject a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Gattaca Server 2003 - Null Byte Full Path Disclosure
CVE-2004-2518—webappscgi15 jul 2004
Gattaca Server 2003 1.1.10.0 allows remote attackers to obtain sensitive information via (1) a trailing null byte ("%00"
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Gattaca Server 2003 - 'web.tmpl?Language' CPU Consumption (Denial of Service)
CVE-2004-2519—dosmultiple15 jul 2004
Gattaca Server 2003 1.1.10.0 allows remote attackers to cause a denial of service (CPU consumption) via directory specif
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Gattaca Server 2003 POP3 - Denial of Service
CVE-2004-2520—dosmultiple15 jul 2004
POP3 protocol in Gattaca Server 2003 1.1.10.0 allows remote authenticated users to cause a denial of service (applicatio
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Gattaca Server 2003 - 'Language' Path Exposure
CVE-2004-2518—webappscgi15 jul 2004
Gattaca Server 2003 1.1.10.0 allows remote attackers to obtain sensitive information via (1) a trailing null byte ("%00"
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP 4.x/5.0 - 'Strip_Tags()' Function Bypass
CVE-2004-0595—remotephp14 jul 2004
The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows Server 2000 - Utility Manager Privilege Escalation (MS04-019)
CVE-2004-0213—localwindows14 jul 2004
Utility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with raised privileges, which all
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WebSTAR FTP Server 5.3.2 (OSX) - USER Overflow (Metasploit)
CVE-2004-0695—remoteosx13 jul 2004
Stack-based buffer overflow in the FTP service for 4D WebSTAR 5.3.2 and earlier allows remote attackers to execute arbit
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - Remote Wscript.Shell
CVE-2004-0549—remotewindows13 jul 2004
The WebBrowser ActiveX control, or the Internet Explorer HTML rendering engine (MSHTML), as used in Internet Explorer 6,
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Lotus Notes 6.0/6.5 - Multiple Java Applet Vulnerabilities
CVE-2004-2280—dosunix13 jul 2004
Buffer overflow in IBM Lotus Notes 6.5.x before 6.5.3 and 6.0.x before 6.0.5 allows remote attackers to cause a denial o
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Moodle Help Script 1.x - Cross-Site Scripting
CVE-2004-0725—webappsphp13 jul 2004
Cross-site scripting (XSS) vulnerability in help.php in Moodle 1.3.2 and 1.4 dev allows remote attackers to inject arbit
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IM-Switch - Insecure Temporary File Handling Symbolic Link
CVE-2004-2502—locallinux13 jul 2004
im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a symlink attack on the
23RISCO
abrir ↗
Metasploit200
WebSTAR FTP Server USER Overflow
CVE-2004-0695—13 jul 2004
Stack-based buffer overflow in the FTP service for 4D WebSTAR 5.3.2 and earlier allows remote attackers to execute arbit
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Mozilla Browser 0.9/1.x Cache File - Multiple Vulnerabilities
CVE-2004-0760—remotewindows13 jul 2004
Mozilla allows remote attackers to cause Mozilla to open a URI as a different MIME type than expected via a null charact
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5.0.1 - Popup.show Mouse Event Hijacking
CVE-2004-0841—remotewindows12 jul 2004
Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.sho
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5.0.1 - JavaScript Method Assignment Cross-Domain Scripting
CVE-2004-0727—remotewindows12 jul 2004
Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows
35RISCO
abrir ↗
← anteriorpágina 1799 / 2.974próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.