Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.900exploits catalogados

35.840CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

24.458 exploits

Exploit-DB✓ VexDay Proof

SnipSnap 0.5.2 - HTTP Response Splitting

CVE-2004-1470—remotemultiple14 set 2004

CRLF injection vulnerability in SnipSnap 0.5.2a, and other versions before 1.0b1, allows remote attackers to perform HTT

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

QNX Photon input-cfg - '-s' Overflow

CVE-2004-1681—dosunix13 set 2004

Multiple buffer overflows in (1) phrelay-cfg, (2) phlocale, (3) pkg-installer, or (4) input-cfg in QNX Photon microGUI f

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

QNX Photon phlocale - '-s' Overflow

CVE-2004-1681—dosunix13 set 2004

Multiple buffer overflows in (1) phrelay-cfg, (2) phlocale, (3) pkg-installer, or (4) input-cfg in QNX Photon microGUI f

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

QNX Photon phrelay-cfg - '-s' Overflow

CVE-2004-1681—dosunix13 set 2004

Multiple buffer overflows in (1) phrelay-cfg, (2) phlocale, (3) pkg-installer, or (4) input-cfg in QNX Photon microGUI f

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

RhinoSoft Serv-U FTP Server < 5.2 - Remote Denial of Service

CVE-2004-1675—doswindows13 set 2004

Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service (application crash) via a STORE UNIQU

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PerlDesk Language Variable - Server-Side Script Execution

CVE-2004-1678—webappscgi13 set 2004

Directory traversal vulnerability in pdesk.cgi in PerlDesk allows remote attackers to read portions of arbitrary files a

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

QNX Photon pkg-installer - '-s' Overflow

CVE-2004-1681—dosunix13 set 2004

Multiple buffer overflows in (1) phrelay-cfg, (2) phlocale, (3) pkg-installer, or (4) input-cfg in QNX Photon microGUI f

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BlackJumboDog FTP Server 3.6.1 - Remote Buffer Overflow

CVE-2004-1439—remotewindows12 set 2004

Buffer overflow in BlackJumboDog 3.x allows remote attackers to execute arbitrary code via long FTP commands such as (1)

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CDRecord's ReadCD - '$RSH exec()' SUID Shell Creation

CVE-2004-0806—locallinux11 set 2004

cdrecord in the cdrtools package before 2.01, when installed setuid root, does not properly drop privileges before execu

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Apache mod_ssl 2.0.x - Remote Denial of Service

CVE-2004-0751—doslinux10 set 2004

The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows

45RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Citadel/UX 6.23 - Remote USER Directive

CVE-2004-1705—remotelinux09 set 2004

Buffer overflow in Citadel/UX 6.23 and earlier allows remote attackers to cause a denial of service via a long username.

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Trillian 0.74i MSN Module - Remote Buffer Overflow

CVE-2004-1666—remotewindows08 set 2004

Buffer overflow in the MSN module in Trillian 0.74i allows remote MSN servers to execute arbitrary code via a long strin

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PSNews 1.1 - 'No' Cross-Site Scripting

CVE-2004-1665—webappsphp05 set 2004

Cross-site scripting (XSS) vulnerability in index.php in PsNews 1.1 allows remote attackers to inject arbitrary web scri

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Call of Duty 1.4 - Denial of Service

CVE-2004-1664—dosmultiple05 set 2004

Call of Duty 1.4 and earlier allows remote attackers to cause a denial of service (game end) via a large (1) query or (2

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Oracle Database Server 8.1.7/9.0.x - ctxsys.driload Access Validation

CVE-2004-0637—remotemultiple03 set 2004

Oracle Database Server 8.1.7.4 through 9.2.0.4 allows local users to execute commands with additional privileges via the

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

AOL Instant Messenger AIM - 'Away' Message Remote (2)

CVE-2004-0636—remotewindows02 set 2004

Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.

50RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Courier-IMAP 3.0.2-r1 - 'auth_debug()' Remote Format String

CVE-2004-0777—remotebsd02 set 2004

Format string vulnerability in the auth_debug function in Courier-IMAP 1.6.0 through 2.2.1 and 3.x through 3.0.3, when l

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CuteNews 0.88/1.3.x - 'index.php' Cross-Site Scripting

CVE-2004-1659—webappsphp02 set 2004

Cross-site scripting (XSS) vulnerability in index.php in CuteNews 1.3.6 and earlier allows remote attackers with Adminis

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SiteCubed MailWorks Professional - Authentication Bypass

CVE-2004-1661—webappsphp02 set 2004

MailWorks Professional allows remote attackers to bypass authentication and gain privileges via a cookie that contains "

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

phpWebSite 0.7.3/0.8.x/0.9.x Comment Module - 'CM_pid' Cross-Site Scripting

CVE-2004-1655—webappsphp01 set 2004

Cross-site scripting (XSS) vulnerability in phpWebsite 0.9.3-4 and earlier allows remote attackers to inject arbitrary w

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

IBM DB2 DTS To String Conversion - Denial of Service

CVE-2005-4869—doslinux01 set 2004

The (1) to_char and (2) to_date function in IBM DB2 8.1 allows local users to cause a denial of service (application cra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Comersus Cart 5.0 - HTTP Response Splitting

CVE-2004-1656—webappsasp01 set 2004

CRLF injection vulnerability in Comersus Shopping Cart 5.0991 allows remote attackers to perform HTTP Response Splitting

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Newtelligence DasBlog 1.x - Request Log HTML Injection

CVE-2004-1657—webappsphp01 set 2004

Cross-site scripting (XSS) vulnerability in the Activity and Events Viewer for Newtelligence DasBlog allows remote attac

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

IBM DB2 - Universal Database Information Disclosure

CVE-2005-4868—localwindows01 set 2004

Shared memory sections and events in IBM DB2 8.1 have default permissions of read and write for the Everyone group, whic

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Titan FTP Server - Long Command Heap Overflow

CVE-2004-1641—remotewindows31 ago 2004

Heap-based buffer overflow in Titan FTP 3.21 and earlier allows remote attackers to cause a denial of service (crash) vi

38RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Web Animations Password Protect - Multiple Input Validation Vulnerabilities

CVE-2004-1647—webappsasp31 ago 2004

SQL injection vulnerability in Password Protect allows remote attackers to execute arbitrary SQL statements and bypass a

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

D-Link DCS-900 Camera - Remote IP Address Changer

CVE-2004-1650—remotehardware31 ago 2004

D-Link DCS-900 Internet Camera listens on UDP port 62976 for an IP address, which allows remote attackers to change the

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Ground Control 1.0.0.7 - 'Server/Client' Denial of Service

CVE-2004-1751—doswindows31 ago 2004

Ground Control II: Operation Exodus 1.0.0.7 and earlier allows remote servers to cause a denial of service (client or se

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

WFTPD Pro Server 3.21 - MLST Remote Denial of Service

CVE-2004-1642—doswindows31 ago 2004

WFTPD Pro Server 3.21 allows remote authenticated users to cause a denial of service (crash) via a series of long MLIST

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Ipswitch WS_FTP Server 5.0.x - CD Command Malformed File Path Remote Denial of Service

CVE-2004-1643—doswindows30 ago 2004

WS_FTP 5.0.2 allows remote authenticated users to cause a denial of service (CPU consumption) via a CD command that cont

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.