Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

84.002exploits catalogados

39.526CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.557Exploit-DB 24.485GitHub PoC 16.307VulnCheck XDB 9651Nuclei 4478Metasploit 3524✓ solo verificadosrecientes populares riesgo

3524 exploits

Metasploit400

Unreal Tournament 2004 "secure" Overflow (Linux)

CVE-2004-0608—18 jun 2004

The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier,

60RIESGO

abrir ↗

Metasploit500

Squid NTLM Authenticate Overflow

CVE-2004-0541—08 jun 2004

Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when comp

60RIESGO

abrir ↗

Metasploit200

Subversion Date Svnserve

CVE-2004-0397—19 may 2004

Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attacker

60RIESGO

abrir ↗

Metasploit200

AppleFileServer LoginExt PathName Overflow

CVE-2004-0430—03 may 2004

Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitr

50RIESGO

abrir ↗

Metasploit200

MS04-011 Microsoft Private Communications Transport Overflow

CVE-2003-0719—13 abr 2004

Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as u

60RIESGO

abrir ↗

Metasploit400

MS04-011 Microsoft LSASS Service DsRolerUpgradeDownlevelServer Overflow

CVE-2003-0533—13 abr 2004

Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority

60RIESGO

abrir ↗

Metasploit300

Norton AntiSpam 2004 SymSpamHelper ActiveX Control Buffer Overflow

CVE-2004-0363—19 mar 2004

Stack-based buffer overflow in the SymSpamHelper ActiveX component (symspam.dll) in Norton AntiSpam 2004, as used in Nor

50RIESGO

abrir ↗

Metasploit500

ISS PAM.dll ICQ Parser Buffer Overflow

CVE-2004-0362—18 mar 2004

Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, a

60RIESGO

abrir ↗

Metasploit300

IBM DB2 db2rcmd.exe Command Execution Vulnerability

CVE-2004-0795—04 mar 2004

DB2 8.1 remote command server (DB2RCMD.EXE) executes the db2rcmdc.exe program as the db2admin administrator, which allow

18RIESGO

abrir ↗

Metasploit400

BolinTech Dream FTP Server 1.02 Format String

CVE-2004-2074—03 mar 2004

Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service (crash) via format string

50RIESGO

abrir ↗

Metasploit300

Dell OpenManage POST Request Heap Overflow (win32)

CVE-2004-0331—26 feb 2004

Heap-based buffer overflow in Dell OpenManage Web Server 3.4.0 allows remote attackers to cause a denial of service (cra

23RIESGO

abrir ↗

Metasploit400

Serv-U FTPD MDTM Overflow

CVE-2004-0330—26 feb 2004

Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time

60RIESGO

abrir ↗

Metasploit500

Proxy-Pro Professional GateKeeper 4.7 GET Request Overflow

CVE-2004-0326—23 feb 2004

Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GET

50RIESGO

abrir ↗

Metasploit200

PSO Proxy v0.91 Stack Buffer Overflow

CVE-2004-0313—20 feb 2004

Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary cod

50RIESGO

abrir ↗

Metasploit200

IMail LDAP Service Buffer Overflow

CVE-2004-0297—17 feb 2004

Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Serve

50RIESGO

abrir ↗

Metasploit100

MS04-007 Microsoft ASN.1 Library Bitstring Heap Overflow

CVE-2003-0818—10 feb 2004

Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microso

60RIESGO

abrir ↗

Metasploit500

MDaemon WorldClient form2raw.cgi Stack Buffer Overflow

CVE-2003-1200—29 dic 2003

Stack-based buffer overflow in FORM2RAW.exe in Alt-N MDaemon 6.5.2 through 6.8.5 allows remote attackers to execute arbi

50RIESGO

abrir ↗

Metasploit400

MS03-049 Microsoft Workstation Service NetAddAlternateComputerName Overflow

CVE-2003-0812—11 nov 2003

Stack-based buffer overflow in a logging function for Windows Workstation Service (WKSSVC.DLL) allows remote attackers t

60RIESGO

abrir ↗

Metasploit400

MS03-051 Microsoft IIS ISAPI FrontPage fp30reg.dll Chunked Overflow

CVE-2003-0822—11 nov 2003

Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002

60RIESGO

abrir ↗

Metasploit400

NIPrint LPD Request Overflow

CVE-2003-1141—05 nov 2003

Buffer overflow in NIPrint 4.10 allows remote attackers to execute arbitrary code via a long string to TCP port 515.

50RIESGO

abrir ↗

Metasploit200

IA WebMail 3.x Buffer Overflow

CVE-2003-1192—03 nov 2003

Stack-based buffer overflow in IA WebMail Server 3.1.0 allows remote attackers to execute arbitrary code via a long GET

50RIESGO

abrir ↗

Metasploit400

MS03-046 Exchange 2000 XEXCH50 Heap Overflow

CVE-2003-0714—15 oct 2003

The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service

60RIESGO

abrir ↗

Metasploit300

mIRC IRC URL Buffer Overflow

CVE-2003-1336—13 oct 2003

Buffer overflow in mIRC before 6.11 allows remote attackers to execute arbitrary code via a long irc:// URL.

50RIESGO

abrir ↗

Metasploit300

Sendmail SMTP Address prescan Memory Corruption

CVE-2003-0694—17 sep 2003

The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, a

30RIESGO

abrir ↗

Metasploit600

Solaris sadmind Command Execution

CVE-2003-0722—13 sep 2003

The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attack

60RIESGO

abrir ↗

Metasploit500

Oracle 9i XDB FTP PASS Overflow (win32)

CVE-2003-0727—18 ago 2003

Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release 2 allow local users to

50RIESGO

abrir ↗

Metasploit500

Oracle 9i XDB FTP UNLOCK Overflow (win32)

CVE-2003-0727—18 ago 2003

Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release 2 allow local users to

50RIESGO

abrir ↗

Metasploit500

Oracle 9i XDB HTTP PASS Overflow (win32)

CVE-2003-0727—18 ago 2003

Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release 2 allow local users to

50RIESGO

abrir ↗

Metasploit500

MS03-026 Microsoft RPC DCOM Interface Overflow

CVE-2003-0352—16 jul 2003

Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote

60RIESGO

abrir ↗

Metasploit400

MS03-022 Microsoft IIS ISAPI nsiislog.dll ISAPI POST Overflow

CVE-2003-0349—25 jun 2003

Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability

60RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.