Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.813exploits catalogados

35.788CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.549GitHub PoC 14.290VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

24.455 exploits

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 5.0.1 - '.JPEG' Image Rendering CMP Fencepost Denial of Service

CVE-2005-2308—doswindows15 jul 2005

The JPEG decoder in Microsoft Internet Explorer allows remote attackers to cause a denial of service (CPU consumption or

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Novell Groupwise 6.5 Webaccess - HTML Injection

CVE-2005-2276—webappsjava15 jul 2005

Cross-site scripting (XSS) vulnerability in Novell Groupwise WebAccess 6.5 before July 11, 2005 allows remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

NullSoft Winamp 5.0 - Malformed ID3v2 Tag Buffer Overflow

CVE-2005-2310—remotewindows15 jul 2005

Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arb

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

netPanzer 0.8 - Remote Denial of Service

CVE-2005-2295—doswindows14 jul 2005

NetPanzer 0.8 and earlier allows remote attackers to cause a denial of service (infinite loop) via a packet with a zero

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows - Netman Service Local Denial of Service

CVE-2005-2307—doswindows14 jul 2005

netman.dll in Microsoft Windows Connections Manager Library allows local users to cause a denial of service (Network Con

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Mozilla Suite/Firefox < 1.0.5 - compareTo Code Execution (Metasploit)

CVE-2005-2265—remotewindows13 jul 2005

Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of serv

50RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Mozilla Firefox 1.0.4 - 'Set As Wallpaper' Code Execution

CVE-2005-2262—remotewindows13 jul 2005

Firefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers to execute arbitrary code by tricking the user into

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Nokia Affix 2.0/2.1/3.x - BTSRV/BTOBEX Remote Command Execution

CVE-2005-2277—remotehardware12 jul 2005

Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via sh

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SoftiaCom wMailServer 1.0 - Remote Denial of Service

CVE-2005-2287—doswindows12 jul 2005

SoftiaCom wMailServer 1.0 and 2.0 allows remote attackers to cause a denial of service (application crash) via a large T

50RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Cisco CallManager 1.0/2.0/3.x/4.0 - CTI Manager Remote Denial of Service

CVE-2005-2242—doshardware12 jul 2005

Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 allows

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DVBBS 7.1 - 'ShowErr.asp' Cross-Site Scripting

CVE-2005-2318—webappsasp12 jul 2005

Cross-site scripting (XSS) vulnerability in showerr.asp in DVBBS 7.1 SP2 allows remote attackers to inject arbitrary web

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BlogTorrent 0.92 - Remote Password Disclosure

CVE-2005-2229—webappsphp11 jul 2005

Blog Torrent 0.92 and earlier stores sensitive files under the web document root in the (1) data or (2) torrents directo

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PPA 0.5.6 - 'ppa_root_path' File Inclusion

CVE-2005-2199—webappsphp10 jul 2005

PHP remote file inclusion vulnerability in inc/functions.inc.php in PPA web photo gallery 0.5.6 allows remote attackers

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Hosting Controller 0.6.1 HotFix 2.1 - Change Credit Limit

CVE-2005-2219—remotewindows10 jul 2005

Hosting Controller 6.1 Hotfix 2.1 allows remote authenticated users to perform unauthorized actions, such as modifying t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PrivaShare 1.3 - Denial of Service

CVE-2005-2208—doswindows07 jul 2005

PrivaShare 1.1b allows remote attackers to cause a denial of service (crash) via a malformed message.

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Novell NetMail 3.x - Automatic Script Execution

CVE-2005-2176—remotewindows06 jul 2005

Novell NetMail automatically processes HTML in an attachment without prompting the user to save or open it, which makes

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

TCP Chat (TCPX) 1.0 - Denial of Service

CVE-2005-2141—doswindows06 jul 2005

TCP Chat 1.0 allows remote attackers to cause a denial of service (crash) via a long string to the chat service, possibl

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

IBM Lotus Domino Notes 6.0/6.5 - Mail Template Automatic Script Execution

CVE-2005-2175—remotemultiple06 jul 2005

The web interface for Lotus Notes mail automatically processes HTML in an attachment without prompting the user to save

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Internet Download Manager 4.0.5 - Input URL Stack Overflow

CVE-2005-2210—localwindows06 jul 2005

Stack-based buffer overflow in Internet Download Manager 4.05 allows remote attackers to execute arbitrary code via a lo

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

OFTPD 0.3.x - User Command Buffer Overflow

CVE-2005-2239—doslinux06 jul 2005

oftpd 0.3.7 allows remote attackers to cause a denial of service via a USER command with a large number of null (\0) cha

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MyGuestbook 0.6.1 - 'Form.Inc.php3' Remote File Inclusion

CVE-2005-2162—webappsphp05 jul 2005

PHP remote file inclusion vulnerability in form.inc.php3 in MyGuestbook 0.6.1 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

phpPgAdmin 3.x - Login Form Directory Traversal

CVE-2005-2256—webappsphp05 jul 2005

Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote attackers to access arbitrary files v

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

AutoIndex PHP Script 1.5.2 - 'index.php' Cross-Site Scripting

CVE-2005-2163—webappsphp05 jul 2005

Cross-site scripting (XSS) vulnerability in index.php in AutoIndex PHP Script 1.5.2 allows remote attackers to inject ar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer - 'javaprxy.dll' COM Object Remote Overflow

CVE-2005-2087—remotewindows05 jul 2005

Internet Explorer 5.01 SP4 up to 6 on various Windows operating systems, including IE 6.0.2900.2180 on Windows XP, allow

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Drupal 4.5.3 < 4.6.1 - Comments PHP Injection

CVE-2005-2106—webappsphp05 jul 2005

Unknown vulnerability in Drupal 4.5.0 through 4.5.3, 4.6.0, and 4.6.1 allows remote attackers to execute arbitrary PHP c

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

EasyPHPCalendar 6.1.5/6.2.x - 'popup.php?serverPath' Remote File Inclusion

CVE-2005-2155—webappsphp04 jul 2005

PHP remote file inclusion vulnerability in EasyPHPCalendar 6.1.5 and earlier allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

EasyPHPCalendar 6.1.5/6.2.x - 'setupSQL.php?serverPath' Remote File Inclusion

CVE-2005-2155—webappsphp04 jul 2005

PHP remote file inclusion vulnerability in EasyPHPCalendar 6.1.5 and earlier allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

XML-RPC Library 1.3.0 - 'xmlrpc.php' Remote Command Execution (2)

CVE-2005-1921—webappsphp04 jul 2005

Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PH

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

XOOPS 2.0.11 - 'xmlrpc.php' SQL Injection

CVE-2005-2113—webappsphp04 jul 2005

SQL injection vulnerability in the loginUser function in the XMLRPC server in XOOPS 2.0.11 and earlier allows remote att

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

EasyPHPCalendar 6.1.5/6.2.x - 'header.inc.php?serverPath' Remote File Inclusion

CVE-2005-2155—webappsphp04 jul 2005

PHP remote file inclusion vulnerability in EasyPHPCalendar 6.1.5 and earlier allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.