Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
CVS (Linux/FreeBSD) - Remote Entry Line Heap Overflow
CVE-2004-0396—remotemultiple25 jun 2004
Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Subversion 1.0.2 - 'svn_time_from_cstring()' Remote Overflow
CVE-2004-0397—remotelinux25 jun 2004
Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attacker
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ZaireWeb Solutions NewsLetter ZWS - Administrative Interface Authentication Bypass
CVE-2004-0621—webappsphp24 jun 2004
admin.php in Newsletter ZWS allows remote attackers to gain administrative privileges via a list_user operation with the
23RISCO
abrir ↗
Metasploit300
3Com SuperStack Switch Denial of Service
CVE-2004-2691—24 jun 2004
Unspecified vulnerability in 3Com SuperStack 3 4400 switches with firmware version before 3.31 allows remote attackers t
30RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
vBulletin 3.0.1 - 'newreply.php?WYSIWYG_HTML' Cross-Site Scripting
CVE-2004-0620—webappsphp24 jun 2004
Cross-site scripting (XSS) vulnerability in (1) newreply.php or (2) newthread.php in vBulletin 3.0.1 allows remote attac
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
FreeBSD 4.10/5.x - 'execve()' Unaligned Memory Access Denial of Service
CVE-2004-0618—dosfreebsd23 jun 2004
FreeBSD 5.1 for the Alpha processor allows local users to cause a denial of service (crash) via an execve system call wi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ArbitroWeb PHP Proxy 0.5/0.6 - Cross-Site Scripting
CVE-2004-0617—webappsphp22 jun 2004
Cross-site scripting (XSS) vulnerability in ArbitroWeb 0.6 allows remote attackers to inject arbitrary script or HTML vi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
BT Voyager 2000 Wireless ADSL Router - SNMP Community String Information Disclosure
CVE-2004-0616—remotehardware22 jun 2004
The BT Voyager 2000 Wireless ADSL Router has a default public SNMP community name, which allows remote attackers to obta
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
D-Link AirPlus DI-614+ / DI-624 / DI-704 - DHCP Log HTML Injection
CVE-2004-0615—remotehardware21 jun 2004
Cross-site scripting (XSS) vulnerability in D-Link DI-614+ SOHO router running firmware 2.30, and DI-704 SOHO router run
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
osTicket STS 1.2 - Attachment Remote Command Execution
CVE-2004-0613—webappsphp21 jun 2004
osTicket allows remote attackers to view sensitive uploaded files and possibly execute arbitrary code via an HTTP reques
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
SqWebMail 4.0.4.20040524 - Email Header HTML Injection
CVE-2004-0591—webappsphp21 jun 2004
Cross-site scripting (XSS) vulnerability in the print_header_uc function for SqWebMail 4.0.4 and earlier, and possibly 3
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Rlpr 2.0 - 'msg()' Multiple Vulnerabilities
CVE-2004-0393—remotelinux19 jun 2004
Format string vulnerability in the msg function for rlpr daemon (rlprd) 2.0.4 allows remote attackers to execute arbitra
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ircd-hybrid 7.0.1 / ircd-ratbox 1.5.1/2.0 - Socket Dequeuing Denial of Service
CVE-2004-0605—doslinux19 jun 2004
Non-registered IRC users using (1) ircd-hybrid 7.0.1 and earlier, (2) ircd-ratbox 1.5.1 and earlier, or (3) ircd-ratbox
23RISCO
abrir ↗
Metasploit400
Unreal Tournament 2004 "secure" Overflow (Linux)
CVE-2004-0608—18 jun 2004
The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier,
60RISCO
abrir ↗
Metasploit400
Unreal Tournament 2004 "secure" Overflow (Win32)
CVE-2004-0608—18 jun 2004
The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier,
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
phpHeaven phpMyChat 0.14.5 - 'usersL.php3' Multiple SQL Injections
CVE-2004-2716—webappsphp15 jun 2004
Multiple SQL injection vulnerabilities in usersL.php3 in PHPMyChat 0.14.5 allow remote attackers to execute arbitrary SQ
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
phpHeaven phpMyChat 0.14.5 - 'edituser.php3?do_not_login' Authentication Bypass
CVE-2004-2715—webappsphp15 jun 2004
edituser.php3 in PHPMyChat 0.14.5 allow remote attackers to bypass authentication and gain administrative privileges by
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
phpHeaven phpMyChat 0.14.5 - 'admin.php3' Arbitrary File Access
CVE-2004-2717—webappsphp15 jun 2004
Multiple directory traversal vulnerabilities in admin.php3 in PHPMyChat 0.14.5 allow remote attackers with administrativ
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Symantec Enterprise Firewall 7.0/8.0 - DNSD DNS Cache Poisoning
CVE-2004-1754—remotewindows15 jun 2004
The DNS proxy (DNSd) for multiple Symantec Gateway Security products allows remote attackers to poison the DNS cache via
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Virtual Programming VP-ASP Shoperror Script 4/5 - Cross-Site Scripting
CVE-2004-2411—webappsasp14 jun 2004
The CleanseMessage function in shop$db.asp for VP-ASP Shopping Cart 4.0 through 5.0 does not sufficiently cleanse inputs
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Invision Power Board (IP.Board) 1.3 - 'SSI.php' Cross-Site Scripting
CVE-2004-2413—webappsphp14 jun 2004
SQL injection vulnerability in VP-ASP Shopping Cart 4.0 through 5.0 allows remote attackers to execute arbitrary SQL com
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Linksys Web Camera Software 2.10 - 'Next_file' Cross-Site Scripting
CVE-2004-2508—webappscgi14 jun 2004
Cross-site scripting (XSS) vulnerability in main.cgi in Linksys WVC11B Wireless-B Internet Video Camera allows remote at
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP-Nuke 6.x/7.x FAQ Module - 'categories' Cross-Site Scripting
CVE-2005-1023—webappsjava11 jun 2004
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x to 7.6 allow remote attackers to inject arbitrary we
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP-Nuke 6.x/7.x - Multiple Input Validation Vulnerabilities
CVE-2004-2297—webappsphp11 jun 2004
The Reviews module in PHP-Nuke 6.0 to 7.3 allows remote attackers to cause a denial of service (CPU and memory consumpti
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP-Nuke 6.x/7.x Reviews Module - 'order' SQL Injection
CVE-2004-2295—webappsphp11 jun 2004
SQL injection vulnerability in the Reviews module in PHP-Nuke 6.0 to 7.3 allows remote attackers to execute arbitrary SQ
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP-Nuke 6.x/7.x Reviews Module - Multiple Cross-Site Scripting Vulnerabilities
CVE-2004-2294—webappsphp11 jun 2004
Canonicalize-before-filter error in the send_review function in the Reviews module for PHP-Nuke 6.0 to 7.3 allows remote
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP-Nuke 6.x/7.x Encyclopedia Module - Multiple Function Cross-Site Scripting Vulnerabilities
CVE-2004-2293—webappsphp11 jun 2004
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.0 to 7.3 allow remote attackers to inject arbitrary we
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
CVS 1.11.x - Multiple Vulnerabilities
CVE-2004-1471—locallinux09 jun 2004
Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attacker
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
AspDotNetStorefront 3.3 - Access Validation
CVE-2004-2699—webappsasp09 jun 2004
deleteicon.aspx in AspDotNetStorefront 3.3 allows remote attackers to delete arbitrary product images via a modified Pro
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
AspDotNetStorefront 3.3 - 'ReturnURL' Cross-Site Scripting
CVE-2004-2701—webappsasp09 jun 2004
Cross-site scripting (XSS) vulnerability in signin.aspx for AspDotNetStorefront 3.3 allows remote attackers to inject ar
23RISCO
abrir ↗
← anteriorpágina 1801 / 2.974próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.