Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.900exploits catalogados

35.840CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

24.458 exploits

Exploit-DB✓ VexDay Proof

Microsoft Windows - Compressed Zipped Folders (MS04-034)

CVE-2004-0575—remotewindows19 nov 2004

Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows S

35RISCO

Exploit-DB✓ VexDay Proof

Seattle Lab Mail (SLmail) 5.5 - POP3 'PASS' Remote Buffer Overflow (1)

CVE-2003-0264—remotewindows18 nov 2004

Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO arg

60RISCO

Exploit-DB✓ VexDay Proof

Cscope 13.0/15.x - Insecure Temporary File Creation (1)

CVE-2004-0996—locallinux17 nov 2004

main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite

23RISCO

Exploit-DB✓ VexDay Proof

Cscope 13.0/15.x - Insecure Temporary File Creation (2)

CVE-2004-0996—locallinux17 nov 2004

main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite

23RISCO

Exploit-DB✓ VexDay Proof

phpBB 2.0.x - 'admin_cash.php' PHP Remote File Inclusion

CVE-2004-1535—webappsphp17 nov 2004

PHP remote file inclusion vulnerability in admin_cash.php for the Cash Mod module for phpBB allows remote attackers to e

23RISCO

Exploit-DB✓ VexDay Proof

TABS MailCarrier 2.51 - Remote Buffer Overflow

CVE-2004-1638—remotewindows16 nov 2004

Buffer overflow in MailCarrier 2.51 allows remote attackers to execute arbitrary code via a long (1) EHLO and possibly (

50RISCO

Exploit-DB✓ VexDay Proof

MiniBB 1.7f - 'user' SQL Injection

CVE-2004-2456—webappsphp16 nov 2004

SQL injection vulnerability in index.php in miniBB 1.7f and earlier allows remote attackers to execute arbitrary SQL com

23RISCO

Exploit-DB✓ VexDay Proof

MiniShare 1.4.1 - Remote Buffer Overflow (2)

CVE-2004-2271—remotewindows16 nov 2004

Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET req

60RISCO

Exploit-DB✓ VexDay Proof

vBulletin - 'LAST.php' SQL Injection

CVE-2004-1515—webappsphp15 nov 2004

SQL injection vulnerability in (1) ttlast.php and (2) last10.php in vBulletin 3.0.x allows remote attackers to execute a

23RISCO

Exploit-DB✓ VexDay Proof

Multiple AntiVirus - '.zip' Detection Bypass

CVE-2004-2442—localmultiple14 nov 2004

Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows S

28RISCO

Exploit-DB✓ VexDay Proof

Multiple AntiVirus - '.zip' Detection Bypass

CVE-2004-1096—localmultiple14 nov 2004

Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to by

28RISCO

Exploit-DB✓ VexDay Proof

Multiple AntiVirus - '.zip' Detection Bypass

CVE-2004-0933—localmultiple14 nov 2004

Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and

28RISCO

Exploit-DB✓ VexDay Proof

Multiple AntiVirus - '.zip' Detection Bypass

CVE-2004-0935—localmultiple14 nov 2004

Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compress

28RISCO

Exploit-DB✓ VexDay Proof

Multiple AntiVirus - '.zip' Detection Bypass

CVE-2004-0934—localmultiple14 nov 2004

Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and gl

28RISCO

Exploit-DB✓ VexDay Proof

Multiple AntiVirus - '.zip' Detection Bypass

CVE-2004-0932—localmultiple14 nov 2004

McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004

35RISCO

Exploit-DB✓ VexDay Proof

Multiple AntiVirus - '.zip' Detection Bypass

CVE-2004-0936—localmultiple14 nov 2004

RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global he

28RISCO

Exploit-DB✓ VexDay Proof

Multiple AntiVirus - '.zip' Detection Bypass

CVE-2004-0937—localmultiple14 nov 2004

Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers

28RISCO

Exploit-DB✓ VexDay Proof

IPSwitch IMail 8.13 - 'DELETE' Remote Stack Overflow

CVE-2004-1520—remotewindows12 nov 2004

Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a lon

60RISCO

Exploit-DB✓ VexDay Proof

Aztek Forum 4.0 - Multiple Input Validation Vulnerabilities

CVE-2004-2725—webappsphp12 nov 2004

Multiple cross-site scripting (XSS) vulnerabilities in Aztek Forum 4.0 allow remote attackers to inject arbitrary web sc

23RISCO

Exploit-DB✓ VexDay Proof

Kerio Personal Firewall 4.1.1 - Multiple IP Options Denial of Service Vulnerabilities

CVE-2004-1109—doswindows12 nov 2004

The FWDRV.SYS driver in Kerio Personal Firewall 4.1.1 and earlier allows remote attackers to cause a denial of service (

23RISCO

Exploit-DB✓ VexDay Proof

Linux Kernel 2.4.27/2.6.8 - 'binfmt_elf' Executable File Read

CVE-2004-1073—locallinux10 nov 2004

The open_exec function in the execve functionality (exec.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, a

23RISCO

Exploit-DB✓ VexDay Proof

XFree86 4.3 - Font Information File Buffer Overflow

CVE-2004-0083—locallinux10 nov 2004

Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers t

28RISCO

Exploit-DB✓ VexDay Proof

SlimFTPd 3.15 - Remote Buffer Overflow

CVE-2004-2418—remotewindows10 nov 2004

Buffer overflow in SlimFTPd 3.15 and earlier allows local users to execute arbitrary code via a long command, such as (1

23RISCO

Exploit-DB✓ VexDay Proof

CCProxy Log - Remote Stack Overflow

CVE-2004-2416—remotewindows09 nov 2004

Buffer overflow in the logging component of CCProxy allows remote attackers to execute arbitrary code via a long HTTP GE

50RISCO

Exploit-DB✓ VexDay Proof

Qwik SMTP 0.3 - Format String

CVE-2004-2677—remotelinux09 nov 2004

Format string vulnerability in qwik-smtpd.c in QwikMail SMTP (qwik-smtpd) 0.3 and earlier allows remote attackers to exe

23RISCO

Exploit-DB✓ VexDay Proof

Ability Server 2.34 (Unix) - FTP 'STOR' Remote Buffer Overflow

CVE-2004-1626—remotewindows07 nov 2004

Buffer overflow in Ability Server 2.34, and possibly other versions, allows remote attackers to execute arbitrary code v

50RISCO

Exploit-DB✓ VexDay Proof

MiniShare 1.4.1 - Remote Buffer Overflow (1)

CVE-2004-2271—remotewindows07 nov 2004

Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET req

60RISCO

Exploit-DB✓ VexDay Proof

Trend Micro ScanMail for Domino 2.51/2.6 - Remote File Disclosure

CVE-2004-1003—remotemultiple05 nov 2004

Trend ScanMail allows remote attackers to obtain potentially sensitive information or disable the anti-virus capability

23RISCO

Exploit-DB✓ VexDay Proof

Monolith Lithtech Game Engine - Multiple Remote Format String Vulnerabilities

CVE-2004-1500—remotemultiple05 nov 2004

Format string vulnerability in the Lithtech engine, as used in multiple games, allows remote authenticated users to caus

23RISCO

Exploit-DB✓ VexDay Proof

TIPS MailPost 5.1.1 - Error Message Cross-Site Scripting

CVE-2004-1101—webappscgi03 nov 2004

mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, allows remote attackers to cause a denial of service (s

23RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.