Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.866exploits catalogados

35.812CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.573GitHub PoC 14.316VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

24.455 exploits

Exploit-DB✓ VexDay Proof

Blue Coat Reporter 7.0/7.1 - Privilege Escalation

CVE-2005-1708—remotewindows24 mai 2005

templates.admin.users.user_form_processing in Blue Coat Reporter before 7.1.2 allows authenticated users to gain adminis

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Gearbox Software Halo Game Server 1.06/1.07 - Infinite Loop Denial of Service

CVE-2005-1741—doswindows24 mai 2005

Gearbox Software Halo: Combat Evolved 1.6 allows remote attackers to cause a denial of service (infinite loop) via malfo

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Blue Coat Reporter 7.0/7.1 - License HTML Injection

CVE-2005-1709—remotewindows24 mai 2005

Unknown vulnerability in Blue Coat Reporter before 7.1.2 allows remote unauthenticated attackers to add a license.

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Sun JavaMail 1.x - Multiple Information Disclosure Vulnerabilities

CVE-2005-1754—webappsjava24 mai 2005

JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to read arbitrary files via a f

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

GForge 3.x - Arbitrary Command Execution

CVE-2005-1752—webappsphp24 mai 2005

viewFile.php in the scm component of Gforge before 4.0 allows remote attackers to execute arbitrary commands via shell m

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Warrior Kings: Battles 1.23 - Remote Denial of Service

CVE-2005-1703—dosmultiple23 mai 2005

Warrior Kings: Battles 1.23 and earlier allows remote attackers to cause a denial of service (server crash) via a partia

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Warrior Kings 1.3 And Warrior Kings: Battles 1.23 - Remote Format String

CVE-2005-1702—remotemultiple23 mai 2005

Format string vulnerability in Warrior Kings: Battles 1.23 and earlier and Warrior Kings 1.3 and earlier allows remote a

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MWChat 6.8 - 'chat.php' SQL Injection

CVE-2005-3324—webappsphp21 mai 2005

SQL injection vulnerability in chat.php in MWChat 6.8 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

TCP TIMESTAMPS - Denial of Service

CVE-2005-0356—dosmultiple21 mai 2005

Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled

45RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

phpMyAdmin 2.x - 'queryframe.php' Cross-Site Scripting

CVE-2005-3301—webappsphp20 mai 2005

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4-pl3 allow remote attackers to inject arbi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

cPanel 9.1 - 'User' Cross-Site Scripting

CVE-2005-2021—webappsphp20 mai 2005

Cross-site scripting (XSS) vulnerability in cPanel 9.1 and earlier allows remote attackers to inject arbitrary web scrip

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

phpMyAdmin 2.x - 'server_databases.php' Cross-Site Scripting

CVE-2005-3301—webappsphp20 mai 2005

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4-pl3 allow remote attackers to inject arbi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

WebAPP 0.9.9.2.1 - Remote Command Execution (1)

CVE-2005-1628—webappscgi20 mai 2005

apage.cgi in WebAPP 0.9.9.2.1, and possibly earlier versions, allows remote attackers to execute arbitrary commands via

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

WebAPP 0.9.9.2.1 - Remote Command Execution (2)

CVE-2005-1628—webappscgi20 mai 2005

apage.cgi in WebAPP 0.9.9.2.1, and possibly earlier versions, allows remote attackers to execute arbitrary commands via

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Picasm 1.10/1.12 - Error Generation Remote Buffer Overflow

CVE-2005-1679—remotefreebsd20 mai 2005

Stack-based buffer overflow in the error directive in picasm 1.12b and earlier allows attackers to execute arbitrary cod

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

D-Link DSL Router - Remote Authentication Bypass

CVE-2005-1827—remotehardware19 mai 2005

D-Link DSL-504T allows remote attackers to bypass authentication and gain privileges, such as upgrade firmware, restart

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP Advanced Transfer Manager 1.21 - Arbitrary File Inclusion

CVE-2005-1681—webappsphp19 mai 2005

PHP remote file inclusion vulnerability in common.php in phpATM 1.21, and possibly earlier versions, allows remote attac

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

War Times - Remote Game Server Denial of Service

CVE-2005-1718—doswindows17 mai 2005

Buffer overflow in LS Games War Times 1.03 and earlier allows remote attackers to cause a denial of service (server cras

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Linux Kernel 2.6.12-rc4 - 'ioctl_by_bdev' Local Denial of Service

CVE-2005-1589—doslinux17 mai 2005

The pkt_ioctl function in the pktcdvd block device ioctl handler (pktcdvd.c) in Linux kernel 2.6.12-rc4 and earlier call

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BakBone NetVault 6.x/7.x - Remote Heap Buffer Overflow (1)

CVE-2005-1547—remotewindows17 mai 2005

Heap-based buffer overflow in the demo version of Bakbone Netvault, and possibly other versions, allows remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Gaim 1.2.1 - URL Handling Remote Stack Overflow

CVE-2005-1261—doslinux17 mai 2005

Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execute arbitrar

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BakBone NetVault 6.x/7.x - Remote Heap Buffer Overflow (1)

CVE-2005-1009—remotewindows17 mai 2005

Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow (1) remote attackers to execute arbitrary code via a mod

50RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

NPDS 4.8/5.0 - 'comments.php?thold' SQL Injection

CVE-2005-1637—webappsphp16 mai 2005

Multiple SQL injection vulnerabilities in NPDS 4.8 and 5.0 allow remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

JGS-Portal 3.0.1/3.0.2 - 'jgs_portal_sponsor.php?id' SQL Injection

CVE-2005-1633—webappsphp16 mai 2005

Multiple SQL injection vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

JGS-Portal 3.0.1/3.0.2 - 'jgs_portal_mitgraf.php?year' SQL Injection

CVE-2005-1633—webappsphp16 mai 2005

Multiple SQL injection vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

JGS-Portal 3.0.1/3.0.2 - 'jgs_portal_viewsgraf.php?tag' SQL Injection

CVE-2005-1633—webappsphp16 mai 2005

Multiple SQL injection vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Mozilla Suite And Firefox - DOM Property Overrides Code Execution

CVE-2005-1532—remotemultiple16 mai 2005

Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objec

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

JGS-Portal 3.0.1/3.0.2 - 'jgs_portal_themengraf.php?year' SQL Injection

CVE-2005-1633—webappsphp16 mai 2005

Multiple SQL injection vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

JGS-Portal 3.0.1/3.0.2 - 'jgs_portal_statistik.php?year' SQL Injection

CVE-2005-1633—webappsphp16 mai 2005

Multiple SQL injection vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

pserv 3.2 - Directory Traversal

CVE-2005-1365—remotelinux16 mai 2005

Pico Server (pServ) 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multiple leadin

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.