Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.900exploits catalogados

35.840CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

24.458 exploits

Exploit-DB✓ VexDay Proof

Symantec Brightmail Anti-Spam 6.0 - Unauthorized Message Disclosure

CVE-2004-0671—webappscgi05 jul 2004

Brightmail Spamfilter 6.0 and earlier beta releases allows remote attackers to read mail from other users by modifying t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

phpMyAdmin 2.5.7 - Remote code Injection

CVE-2004-2631—webappsphp04 jul 2004

Eval injection vulnerability in left.php in phpMyAdmin 2.5.1 up to 2.5.7, when LeftFrameLight is FALSE, allows remote at

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MPlayer 1.0pre4 GUI - Filename handling Overflow

CVE-2004-0659—remotelinux04 jul 2004

Buffer overflow in TranslateFilename for common.c in MPlayer 1.0pre4 allows remote attackers to execute arbitrary code v

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Netegrity IdentityMinder Web Edition 5.6 - Management Interface Cross-Site Scripting

CVE-2004-0672—webappscgi01 jul 2004

Multiple cross-site scripting (XSS) vulnerabilities in the primary and management web interfaces in Netegrity IdentityMi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Netegrity IdentityMinder Web Edition 5.6 - Null Byte Cross-Site Scripting

CVE-2004-0672—webappscgi01 jul 2004

Multiple cross-site scripting (XSS) vulnerabilities in the primary and management web interfaces in Netegrity IdentityMi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

IBM Lotus Domino Server 6 - Web Access Remote Denial of Service

CVE-2004-0668—dosunix30 jun 2004

Web Access in Lotus Domino 6.5.1 allows remote attackers to cause a denial of service (server crash) via a large e-mail

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CuteNews 0.88/1.3 - 'example2.php' Cross-Site Scripting

CVE-2004-0660—webappsphp28 jun 2004

Cross-site scripting (XSS) vulnerability in (1) show_archives.php, (2) show_news.php, and possibly other php files in Cu

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

McMurtrey/Whitaker & Associates Cart32 2-5 GetLatestBuilds Script - Cross-Site Scripting

CVE-2004-0675—webappscgi28 jun 2004

Cross-site scripting (XSS) vulnerability in (1) cart32.exe or (2) c32web.exe in Cart32 shopping cart allows remote attac

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CGIScript.net CSFAQ 1.0 Script - Full Path Disclosure

CVE-2004-0665—webappscgi28 jun 2004

csFAQ.cgi in csFAQ allows remote attackers to gain sensitive information via an invalid database parameter, which reveal

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CuteNews 0.88/1.3 - 'show_archives.php' Cross-Site Scripting

CVE-2004-0660—webappsphp28 jun 2004

Cross-site scripting (XSS) vulnerability in (1) show_archives.php, (2) show_news.php, and possibly other php files in Cu

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PowerPortal 1.1/1.3 - 'modules.php' Traversal Arbitrary Directory Listing

CVE-2004-0664—webappsphp28 jun 2004

Directory traversal vulnerability in modules.php in PowerPortal 1.x allows remote attackers to list arbitrary directorie

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CuteNews 0.88/1.3 - 'example1.php' Cross-Site Scripting

CVE-2004-0660—webappsphp28 jun 2004

Cross-site scripting (XSS) vulnerability in (1) show_archives.php, (2) show_news.php, and possibly other php files in Cu

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Rlpr 2.04 - 'msg()' Remote Format String

CVE-2004-0393—remotelinux25 jun 2004

Format string vulnerability in the msg function for rlpr daemon (rlprd) 2.0.4 allows remote attackers to execute arbitra

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Subversion 1.0.2 - 'svn_time_from_cstring()' Remote Overflow

CVE-2004-0397—remotelinux25 jun 2004

Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attacker

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CVS (Linux/FreeBSD) - Remote Entry Line Heap Overflow

CVE-2004-0396—remotemultiple25 jun 2004

Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CVS - Remote Entry Line Root Heap Overflow

CVE-2004-0396—remotesolaris25 jun 2004

Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Borland Interbase 7.x - Remote Buffer Overflow

CVE-2004-2043—remotelinux25 jun 2004

Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that us

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Linux Kernel 2.4.x/2.6.x - Assembler Inline Function Local Denial of Service

CVE-2004-0554—doslinux25 jun 2004

Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an inf

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

vBulletin 3.0.1 - 'newreply.php?WYSIWYG_HTML' Cross-Site Scripting

CVE-2004-0620—webappsphp24 jun 2004

Cross-site scripting (XSS) vulnerability in (1) newreply.php or (2) newthread.php in vBulletin 3.0.1 allows remote attac

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ZaireWeb Solutions NewsLetter ZWS - Administrative Interface Authentication Bypass

CVE-2004-0621—webappsphp24 jun 2004

admin.php in Newsletter ZWS allows remote attackers to gain administrative privileges via a list_user operation with the

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

FreeBSD 4.10/5.x - 'execve()' Unaligned Memory Access Denial of Service

CVE-2004-0618—dosfreebsd23 jun 2004

FreeBSD 5.1 for the Alpha processor allows local users to cause a denial of service (crash) via an execve system call wi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BT Voyager 2000 Wireless ADSL Router - SNMP Community String Information Disclosure

CVE-2004-0616—remotehardware22 jun 2004

The BT Voyager 2000 Wireless ADSL Router has a default public SNMP community name, which allows remote attackers to obta

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ArbitroWeb PHP Proxy 0.5/0.6 - Cross-Site Scripting

CVE-2004-0617—webappsphp22 jun 2004

Cross-site scripting (XSS) vulnerability in ArbitroWeb 0.6 allows remote attackers to inject arbitrary script or HTML vi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

osTicket STS 1.2 - Attachment Remote Command Execution

CVE-2004-0613—webappsphp21 jun 2004

osTicket allows remote attackers to view sensitive uploaded files and possibly execute arbitrary code via an HTTP reques

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SqWebMail 4.0.4.20040524 - Email Header HTML Injection

CVE-2004-0591—webappsphp21 jun 2004

Cross-site scripting (XSS) vulnerability in the print_header_uc function for SqWebMail 4.0.4 and earlier, and possibly 3

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

D-Link AirPlus DI-614+ / DI-624 / DI-704 - DHCP Log HTML Injection

CVE-2004-0615—remotehardware21 jun 2004

Cross-site scripting (XSS) vulnerability in D-Link DI-614+ SOHO router running firmware 2.30, and DI-704 SOHO router run

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ircd-hybrid 7.0.1 / ircd-ratbox 1.5.1/2.0 - Socket Dequeuing Denial of Service

CVE-2004-0605—doslinux19 jun 2004

Non-registered IRC users using (1) ircd-hybrid 7.0.1 and earlier, (2) ircd-ratbox 1.5.1 and earlier, or (3) ircd-ratbox

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Rlpr 2.0 - 'msg()' Multiple Vulnerabilities

CVE-2004-0393—remotelinux19 jun 2004

Format string vulnerability in the msg function for rlpr daemon (rlprd) 2.0.4 allows remote attackers to execute arbitra

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

phpHeaven phpMyChat 0.14.5 - 'admin.php3' Arbitrary File Access

CVE-2004-2717—webappsphp15 jun 2004

Multiple directory traversal vulnerabilities in admin.php3 in PHPMyChat 0.14.5 allow remote attackers with administrativ

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

phpHeaven phpMyChat 0.14.5 - 'usersL.php3' Multiple SQL Injections

CVE-2004-2716—webappsphp15 jun 2004

Multiple SQL injection vulnerabilities in usersL.php3 in PHPMyChat 0.14.5 allow remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.