Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.866exploits catalogados

35.812CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.573GitHub PoC 14.316VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

24.455 exploits

Exploit-DB✓ VexDay Proof

Microsoft Windows - Malformed IP Options Denial of Service (MS05-019)

CVE-2004-1060—doswindows17 abr 2005

Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause

45RISCO

Exploit-DB✓ VexDay Proof

Microsoft Windows - Malformed IP Options Denial of Service (MS05-019)

CVE-2005-0048—doswindows17 abr 2005

Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Server 2003, and older operating systems allows remote attackers

35RISCO

Exploit-DB✓ VexDay Proof

Microsoft Windows - Malformed IP Options Denial of Service (MS05-019)

CVE-2004-0230—doswindows17 abr 2005

TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial o

45RISCO

Exploit-DB✓ VexDay Proof

Microsoft Windows - Malformed IP Options Denial of Service (MS05-019)

CVE-2005-0688—doswindows17 abr 2005

Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service (

35RISCO

Exploit-DB✓ VexDay Proof

Microsoft Windows - Malformed IP Options Denial of Service (MS05-019)

CVE-2004-0790—doswindows17 abr 2005

Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via

45RISCO

Exploit-DB✓ VexDay Proof

Microsoft Windows XP/2000 - Internet Protocol Validation Remote Code Execution (2)

CVE-2005-0048—remotewindows16 abr 2005

Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Server 2003, and older operating systems allows remote attackers

35RISCO

Exploit-DB✓ VexDay Proof

Datenbank Module For phpBB - 'Remote mod.php' Cross-Site Scripting

CVE-2005-1171—webappsphp16 abr 2005

Cross-site scripting (XSS) vulnerability in mod.php in the datenbank module for phpBB allows remote attackers to inject

23RISCO

Exploit-DB✓ VexDay Proof

phpBB Remote - 'mod.php' SQL Injection

CVE-2005-1170—webappsphp16 abr 2005

SQL injection vulnerability in mod.php in the datenbank module for phpBB allows remote attackers to execute arbitrary SQ

23RISCO

Exploit-DB✓ VexDay Proof

RSA Security RSA Authentication Agent For Web 5.2 - Cross-Site Scripting

CVE-2005-1118—remotewindows15 abr 2005

Cross-site scripting (XSS) vulnerability in IISWebAgentIF.dll in the RSA Authentication Agent for Web 5.2 allows remote

23RISCO

Exploit-DB✓ VexDay Proof

SqWebMail 3.x/4.0 - HTTP Response Splitting

CVE-2005-1308—webappsphp15 abr 2005

SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect parameter fo

23RISCO

Exploit-DB✓ VexDay Proof

Libsafe 2.0 - Multi-threaded Process Race Condition Security Bypass

CVE-2005-1125—doslinux15 abr 2005

Race condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass li

23RISCO

Exploit-DB✓ VexDay Proof

All4WWW-HomePageCreator 1.0 - 'index.php' Remote File Inclusion

CVE-2005-1117—webappsphp14 abr 2005

PHP remote file inclusion vulnerability in index.php in All4WWW-Homepagecreator 1.0a allows remote attackers to execute

23RISCO

Exploit-DB✓ VexDay Proof

OneWorldStore - 'OWProductDetail.asp' SQL Injection

CVE-2005-1161—webappsasp14 abr 2005

Multiple SQL injection vulnerabilities in OneWorldStore allow remote attackers to execute arbitrary SQL commands via the

23RISCO

Exploit-DB✓ VexDay Proof

SPHPBlog 0.4 - 'search.php' Cross-Site Scripting

CVE-2005-1135—webappsphp14 abr 2005

Cross-site scripting (XSS) vulnerability in search.php for Simple PHP Blog (sphpBlog) 0.4.0 allows remote attackers to i

23RISCO

Exploit-DB✓ VexDay Proof

Yager 5.24 - Multiple Denial of Service Vulnerabilities

CVE-2005-1164—doswindows14 abr 2005

Yager 5.24 and earlier allows remote attackers to cause a denial of service (application hang) via a packet with a game

23RISCO

Exploit-DB✓ VexDay Proof

Yager 5.24 - Multiple Denial of Service Vulnerabilities

CVE-2005-1165—doswindows14 abr 2005

Yager 5.24 and earlier allows remote attackers to cause a denial of service (application crash) via certain malformed da

23RISCO

Exploit-DB✓ VexDay Proof

OneWorldStore - 'OWAddItem.asp' SQL Injection

CVE-2005-1161—webappsasp14 abr 2005

Multiple SQL injection vulnerabilities in OneWorldStore allow remote attackers to execute arbitrary SQL commands via the

23RISCO

Exploit-DB✓ VexDay Proof

Microsoft Windows - 'HTA' Script Execution (MS05-016)

CVE-2005-0063—localwindows14 abr 2005

The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server

35RISCO

Exploit-DB✓ VexDay Proof

OneWorldStore - 'OWListProduct.asp' Cross-Site Scripting

CVE-2005-1162—webappsasp14 abr 2005

Multiple cross-site scripting (XSS) vulnerabilities in OneWorldStore allow remote attackers to inject arbitrary web scri

23RISCO

Exploit-DB✓ VexDay Proof

Sumus 0.2.2 - HTTPd Remote Buffer Overflow

CVE-2005-1110—remotelinux14 abr 2005

Stack-based buffer overflow in the RespondeHTTPPendiente function in the HTTP server for SUMUS 0.2.2 allows remote attac

23RISCO

Exploit-DB✓ VexDay Proof

OneWorldStore - 'OWContactUs.asp' Cross-Site Scripting

CVE-2005-1162—webappsasp14 abr 2005

Multiple cross-site scripting (XSS) vulnerabilities in OneWorldStore allow remote attackers to inject arbitrary web scri

23RISCO

Exploit-DB✓ VexDay Proof

OneWorldStore - 'OWListProduct.asp' Multiple SQL Injections

CVE-2005-1161—webappsasp14 abr 2005

Multiple SQL injection vulnerabilities in OneWorldStore allow remote attackers to execute arbitrary SQL commands via the

23RISCO

Exploit-DB✓ VexDay Proof

S9Y Serendipity 0.8beta4 - 'exit.php' SQL Injection

CVE-2005-1134—webappsphp13 abr 2005

SQL injection vulnerability in exit.php for Serendipity 0.8 and earlier allows remote attackers to execute arbitrary SQL

23RISCO

Exploit-DB✓ VexDay Proof

Oracle Database 10.1 - MDSYS.MD2.SDO_CODE_SIZE Buffer Overflow

CVE-2004-1774—remotemultiple13 abr 2005

Buffer overflow in the SDO_CODE_SIZE procedure of the MD2 package (MDSYS.MD2.SDO_CODE_SIZE) in Oracle 10g before 10.1.0.

23RISCO

Exploit-DB✓ VexDay Proof

IBM Websphere 5.0/5.1/6.0 - Application Server Web Server Root JSP Source Code Disclosure

CVE-2005-1112—remotemultiple13 abr 2005

IBM WebSphere Application Server 6.0 and earlier, when sharing the document root of the web server, allows remote attack

23RISCO

Exploit-DB✓ VexDay Proof

DeluxeFtp 6.x - Local Password Disclosure

CVE-2005-1092—localwindows13 abr 2005

Lightspeed DeluxeFTP 6.01 stores usernames and passwords in plaintext in sites.xml, which is world-readable, which allow

23RISCO

Exploit-DB✓ VexDay Proof

phpBB 1.x/2.0.x - Knowledge Base Module 'KB.php' SQL Injection

CVE-2005-1196—webappsphp13 abr 2005

SQL injection vulnerability in kb.php in the Knowledge Base module for phpBB allows remote attackers to obtain sensitive

23RISCO

Exploit-DB✓ VexDay Proof

gld 1.4 - Postfix Greylisting Daemon Remote Format String

CVE-2005-1100—remotelinux13 abr 2005

Format string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon (GLD) 1.3 and 1.4 allows remote atta

28RISCO

Exploit-DB✓ VexDay Proof

Multiple Vendor ICMP Implementation - Spoofed Source Quench Packet Denial of Service

CVE-2004-0791—dosmultiple12 abr 2005

Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (network throughput reducti

28RISCO

Exploit-DB✓ VexDay Proof

XAMPP - Insecure Default Password Disclosure

CVE-2005-1078—dosmultiple12 abr 2005

XAMPP 1.4.x has multiple default or null passwords, which allows attackers to gain privileges.

23RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.