Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.900exploits catalogados

35.840CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

24.458 exploits

Exploit-DB✓ VexDay Proof

@lexPHPTeam @lex Guestbook 3.12 - PHP Remote File Inclusion

CVE-2004-1554—webappsphp27 set 2004

PHP remote file inclusion vulnerability in livre_include.php in @lex Guestbook allows remote attackers to execute arbitr

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows - JPEG GDI+ Bind/Reverse/Admin/File Download

CVE-2004-0200—remotewindows27 set 2004

Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlu

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows - JPEG GDI+ Remote Heap Overflow (MS04-028)

CVE-2004-0200—remotewindows25 set 2004

Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlu

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows - JPEG GDI+ Overflow Download Shellcode (MS04-028)

CVE-2004-0200—remotewindows25 set 2004

Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlu

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PopMessenger 1.60 - Remote Denial of Service

CVE-2004-1698—doswindows23 set 2004

The Base64 function in PopMessenger 1.60 (before 20 Sep 2004) and earlier allows remote attackers to cause a denial of s

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows - JPEG GDI+ Overflow Administrator (MS04-028)

CVE-2004-0200—remotewindows23 set 2004

Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlu

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Sophos Anti-Virus 3.x - Reserved MS-DOS Name Scan Evasion

CVE-2004-0552—remotewindows22 set 2004

Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device na

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows - JPEG GDI+ Overflow Shellcode

CVE-2004-0200—remotewindows22 set 2004

Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlu

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Alt-N MDaemon 6.5.1 - IMAP/SMTP Remote Buffer Overflow

CVE-2004-1546—remotewindows22 set 2004

Multiple buffer overflows in MDaemon 6.5.1 allow remote attackers to cause a denial of service (application crash) via a

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows - JPEG Processing Buffer Overrun (MS04-028)

CVE-2004-0200—doswindows22 set 2004

Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlu

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

EmuLive Server4 - Authentication Bypass / Denial of Service

CVE-2004-1695—doscgi21 set 2004

EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to bypass authentication for the remote administrati

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Emulive Server4 Build 7560 - Remote Denial of Service

CVE-2004-1696—doswindows21 set 2004

EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to cause a denial of service (application crash) via

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

LaTeX2rtf 1.9.15 - Remote Buffer Overflow

CVE-2004-2167—remotelinux21 set 2004

Multiple buffer overflows in LaTeX2rtf 1.9.15, and possibly other versions, allow remote attackers to execute arbitrary

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Pinnacle ShowCenter 1.51 - Web Interface Skin Denial of Service

CVE-2004-1699—dosphp21 set 2004

SettingsBase.php in Pinnacle ShowCenter 1.51 allows remote attackers to cause a denial of service (web interface errors)

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SudoEdit 1.6.8 - Local Change Permission

CVE-2004-1689—locallinux21 set 2004

sudoedit (aka sudo -e) in sudo 1.6.8 opens a temporary file with root privileges, which allows local users to read arbit

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Mambo Open Source 4.5.1 (1.0.9) - 'Function.php' Arbitrary Command Execution

CVE-2004-1693—webappsphp20 set 2004

PHP remote file inclusion vulnerability in Function.php in Mambo 4.5 (1.0.9) allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

TUTOS - 'app_new.php?t' Cross-Site Scripting

CVE-2004-2162—webappsphp20 set 2004

Multiple cross-site scripting (XSS) vulnerabilities in TUTOS 1.1 allow remote attackers to inject arbitrary web script o

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

TUTOS - 'file_overview.php?link_id' SQL Injection

CVE-2004-2161—webappsphp20 set 2004

SQL injection vulnerability in file_overview.php in TUTOS 1.1 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Mambo Open Source 4.5.1 (1.0.9) - Cross-Site Scripting

CVE-2004-1692—webappsphp20 set 2004

Cross-site scripting (XSS) vulnerability in index.php in Mambo 4.5 (1.0.9) allows remote attackers to inject arbitrary w

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Pigeon Server 3.02.0143 - Denial of Service

CVE-2004-1688—doswindows19 set 2004

Pigeon Server 3.02.0143 and earlier allows remote attackers to cause a denial of service (infinite loop and CPU consumpt

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CDRecord's ReadCD - Local Privilege Escalation

CVE-2004-0806—locallinux19 set 2004

cdrecord in the cdrtools package before 2.01, when installed setuid root, does not properly drop privileges before execu

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Remository - SQL Injection

CVE-2004-2143—webappsphp18 set 2004

SQL injection vulnerability in the ReMOSitory Server add-on module to Mambo Portal 4.5.1 (1.09) and earlier allows remot

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Google Toolbar 1.1.x - About.HTML HTML Injection

CVE-2004-2475—remotewindows17 set 2004

Cross-site scripting (XSS) vulnerability in Google Toolbar 2.0.114.1 allows remote attackers to inject arbitrary web scr

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DNS4Me 3.0 - Denial of Service / Cross-Site Scripting

CVE-2004-1691—dosmultiple17 set 2004

The Web Server in DNS4Me 3.0.0.4 allows remote attackers to cause a denial of service (CPU consumption and crash) via a

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Snitz Forums 2000 - 'down.asp' HTTP Response Splitting

CVE-2004-1687—webappsasp16 set 2004

CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response S

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Alt-N MDaemon 6.5.1 SMTP Server - Multiple Command Remote Overflows

CVE-2004-1546—remotewindows16 set 2004

Multiple buffer overflows in MDaemon 6.5.1 allow remote attackers to cause a denial of service (application crash) via a

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP-Nuke - SQL Injection Edit/Save Messages

CVE-2004-1932—webappsphp16 set 2004

SQL injection vulnerability in (1) auth.php and (2) admin.php in PHP-Nuke 6.x through 7.2 allows remote attackers to exe

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

myserver 0.7 - Directory Traversal

CVE-2004-2516—remotewindows15 set 2004

Directory traversal vulnerability in myServer 0.7 allows remote attackers to list arbitrary directories via an HTTP GET

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP 4.x/5.0.1 - PHP_Variables Remote Memory Disclosure

CVE-2004-0958—remotephp15 set 2004

php_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET, (2) POST, or

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CUPS 1.1.x - UDP Packet Remote Denial of Service

CVE-2004-0558—doslinux15 set 2004

The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of s

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.