Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.017exploits catalogados

35.920CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.640GitHub PoC 14.386VulnCheck XDB 8.722Nuclei 4.333Metasploit 3.478✓ só verificadosrecentes populares risco

24.458 exploits

Exploit-DB✓ VexDay Proof

Microsoft Windows - ASN.1 Remote (MS04-007)

CVE-2003-0818—remotewindows26 mar 2004

Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microso

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

eSignal 7.6 - STREAMQUOTE Remote Buffer Overflow

CVE-2004-1868—remotewindows26 mar 2004

Stack-based buffer overflow in WinSig.exe in eSignal 7.5 and 7.6 allows remote attackers to execute arbitrary code via a

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

NetSupport School 7.0/7.5 - Weak Password Encryption

CVE-2004-1861—locallinux26 mar 2004

Invision NetSupport School Pro uses a weak encryption algorithm to encrypt passwords, which allows local users to obtain

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Ethereal - EIGRP Dissector TLV_IP_INT Long IP Remote Denial of Service

CVE-2004-0176—dosmultiple26 mar 2004

Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

NexGen FTP Server 1.0/2.x - Directory Traversal

CVE-2004-2487—remotewindows24 mar 2004

Directory traversal vulnerability in Nexgen FTP Server before 2.2.3.23 allows remote authenticated users to read or list

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Topic Calendar 1.0.1 - 'Calendar_Scheduler.php' Cross-Site Scripting

CVE-2005-0872—webappsphp24 mar 2004

Cross-site scripting (XSS) vulnerability in calendar_scheduler.php in the Topic Calendar 1.0.1 module for phpBB allows r

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Trend Micro Interscan VirusWall localweb - Directory Traversal

CVE-2004-1859—webappswindows24 mar 2004

Directory traversal vulnerability in Trend Micro Interscan Web Viruswall in InterScan VirusWall 3.5x allows remote attac

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

HP Web Jetadmin 7.5.2456 - setinfo.hts Script Directory Traversal

CVE-2004-1857—remotewindows24 mar 2004

Directory traversal vulnerability in setinfo.hts in HP Web Jetadmin 7.5.2546 allows remote authenticated attackers to re

45RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PicoPhone Internet Phone 1.63 - Remote Buffer Overflow

CVE-2004-1854—doshardware24 mar 2004

Buffer overflow in the logging function in Picophone 1.63 and earlier allows remote attackers to execute arbitrary code

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

HP Web Jetadmin 7.5.2456 - Arbitrary Command Execution

CVE-2004-1857—remotewindows24 mar 2004

Directory traversal vulnerability in setinfo.hts in HP Web Jetadmin 7.5.2546 allows remote authenticated attackers to re

45RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

HP Web Jetadmin 7.5.2456 - Printer Firmware Update Script Arbitrary File Upload

CVE-2004-1856—remotewindows24 mar 2004

devices_update_printer_fw_upload.hts in HP Web JetAdmin 7.5.2546, when no password is set, allows remote attackers to up

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Sun Solaris 2.6/7.0/8/9 - vfs_getvfssw function Privilege Escalation

CVE-2004-2686—localsolaris23 mar 2004

Directory traversal vulnerability in the vfs_getvfssw function in Solaris 2.6, 7, 8, and 9 allows local users to load ar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Ipswitch WS_FTP Server 4.0.2 - ALLO Remote Buffer Overflow

CVE-2004-1883—remotewindows23 mar 2004

Multiple buffer overflows in Ipswitch WS_FTP Server 4.0.2 (1) allow remote authenticated users to execute arbitrary code

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Invision Power Services Invision Gallery 1.0.1 - Multiple SQL Injections

CVE-2004-1835—webappsphp23 mar 2004

Multiple SQL injection vulnerabilities in index.php in Invision Gallery 1.0.1 allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Mythic Entertainment Dark Age of Camelot 1.6x - Encryption Key Signing

CVE-2004-1855—remotemultiple23 mar 2004

Dark Age of Camelot before 1.68 live patch does not sign the RSA public key, which could allow remote malicious servers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

xweb 1.0 - Directory Traversal

CVE-2004-1838—remotelinux22 mar 2004

Directory traversal vulnerability in xweb 1.0 allows remote attackers to download arbitrary files via a .. (dot dot) in

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Invision Power Top Site List 1.0/1.1 - 'id' SQL Injection

CVE-2004-1836—webappsphp22 mar 2004

SQL injection vulnerability in index.php in Invision Power Top Site List 1.1 RC 2 and earlier allows remote attackers to

23RISCO

abrir ↗

Exploit-DB

Invision Gallery < 1.0.1 - SQL Injection

CVE-2004-1835—webappsphp21 mar 2004

Multiple SQL injection vulnerabilities in index.php in Invision Gallery 1.0.1 allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Expinion.net News Manager Lite 2.5 - 'category_news_headline.asp' Cross-Site Scripting

CVE-2004-1845—webappsasp20 mar 2004

Multiple cross-site scripting (XSS) vulnerabilities in News Manager Lite 2.5 allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Expinion.net News Manager Lite 2.5 - 'NEWS_LOGIN?admin' Cookie Authentication Bypass

CVE-2004-1847—webappsasp20 mar 2004

News Manager Lite 2.5 allows remote attackers to bypass authentication and gain administrator privileges by setting the

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Expinion.net News Manager Lite 2.5 - 'more.asp?ID' SQL Injection

CVE-2004-1846—webappsasp20 mar 2004

Multiple SQL injection vulnerabilities in News Manager Lite 2.5 allow remote attackers to execute arbitrary SQL code via

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Expinion.net Member Management System 2.1 - 'news_view.asp?ID' SQL Injection

CVE-2004-1843—webappsasp20 mar 2004

SQL injection vulnerability in Member Management System 2.1 allows remote attackers to execute arbitrary SQL via the ID

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Expinion.net News Manager Lite 2.5 - 'search.asp' Cross-Site Scripting

CVE-2004-1845—webappsasp20 mar 2004

Multiple cross-site scripting (XSS) vulnerabilities in News Manager Lite 2.5 allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Expinion.net News Manager Lite 2.5 - 'news_sort.asp?filter' SQL Injection

CVE-2004-1846—webappsasp20 mar 2004

Multiple SQL injection vulnerabilities in News Manager Lite 2.5 allow remote attackers to execute arbitrary SQL code via

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Expinion.net News Manager Lite 2.5 - 'category_news.asp?ID' SQL Injection

CVE-2004-1846—webappsasp20 mar 2004

Multiple SQL injection vulnerabilities in News Manager Lite 2.5 allow remote attackers to execute arbitrary SQL code via

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Expinion.net Member Management System 2.1 - 'error.asp?err' Cross-Site Scripting

CVE-2004-1844—webappsasp20 mar 2004

Cross-site scripting (XSS) vulnerability in Member Management System 2.1 allows remote attackers to inject arbitrary web

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Expinion.net Member Management System 2.1 - 'resend.asp?ID' SQL Injection

CVE-2004-1843—webappsasp20 mar 2004

SQL injection vulnerability in Member Management System 2.1 allows remote attackers to execute arbitrary SQL via the ID

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Expinion.net Member Management System 2.1 - 'register.asp?err' Cross-Site Scripting

CVE-2004-1844—webappsasp20 mar 2004

Cross-site scripting (XSS) vulnerability in Member Management System 2.1 allows remote attackers to inject arbitrary web

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Expinion.net News Manager Lite 2.5 - 'comment_add.asp' Cross-Site Scripting

CVE-2004-1845—webappsasp20 mar 2004

Multiple cross-site scripting (XSS) vulnerabilities in News Manager Lite 2.5 allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Eudora 6.0.3 (Windows) - Attachment Spoofing

CVE-2004-1521—remotewindows19 mar 2004

Eudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains base64 or quoted-printable

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.