Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

84.031exploits catalogados
39.530CVEs con explotación pública
24.695probados en laboratorio
3524 exploits
Metasploit200
Alt-N WebAdmin USER Buffer Overflow
CVE-2003-0471—24 jun 2003
Buffer overflow in WebAdmin.exe for WebAdmin allows remote attackers to execute arbitrary code via an HTTP request to We
50RIESGO
abrir ↗
Metasploit300
Sambar 6 Search Results Buffer Overflow
CVE-2004-2086—21 jun 2003
Stack-based buffer overflow in results.stm for Sambar Server before the 6.0 production release allows remote attackers t
60RIESGO
abrir ↗
Metasploit300
LeapWare LeapFTP v2.7.3.600 PASV Reply Client Overflow
CVE-2003-0558—09 jun 2003
Buffer overflow in LeapFTP 2.7.3.600 allows remote FTP servers to execute arbitrary code via a long IP address response
50RIESGO
abrir ↗
Metasploit300
MS03-020 Microsoft Internet Explorer Object Type
CVE-2003-0344—04 jun 2003
Buffer overflow in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code via
60RIESGO
abrir ↗
Metasploit500
MS03-007 Microsoft IIS 5.0 WebDAV ntdll.dll Path Overflow
CVE-2003-0109—30 may 2003
Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Wind
60RIESGO
abrir ↗
Metasploit500
Seattle Lab Mail 5.5 POP3 Buffer Overflow
CVE-2003-0264—07 may 2003
Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO arg
60RIESGO
abrir ↗
Metasploit200
Kerio Firewall 2.1.4 Authentication Packet Overflow
CVE-2003-0220—28 abr 2003
Buffer overflow in the administrator authentication process for Kerio Personal Firewall (KPF) 2.1.4 and earlier allows r
50RIESGO
abrir ↗
Metasploit500
BadBlue 2.5 EXT.dll Buffer Overflow
CVE-2005-0595—20 abr 2003
Buffer overflow in ext.dll in BadBlue 2.55 allows remote attackers to execute arbitrary code via a long mfcisapicommand
50RIESGO
abrir ↗
Metasploit500
Poptop Negative Read Overflow
CVE-2003-0213—09 abr 2003
ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length fie
60RIESGO
abrir ↗
Metasploit500
Samba trans2open Overflow (Linux x86)
CVE-2003-0201—07 abr 2003
Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x vers
60RIESGO
abrir ↗
Metasploit200
Samba 2.2.2 - 2.2.6 nttrans Buffer Overflow
CVE-2002-1318—07 abr 2003
Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute a
30RIESGO
abrir ↗
Metasploit500
Samba trans2open Overflow (*BSD x86)
CVE-2003-0201—07 abr 2003
Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x vers
60RIESGO
abrir ↗
Metasploit500
Samba trans2open Overflow (Solaris SPARC)
CVE-2003-0201—07 abr 2003
Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x vers
60RIESGO
abrir ↗
Metasploit500
Samba trans2open Overflow (Mac OS X PPC)
CVE-2003-0201—07 abr 2003
Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x vers
60RIESGO
abrir ↗
Metasploit600
QuickTime Streaming Server parse_xml.cgi Remote Execution
CVE-2003-0050—24 feb 2003
parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote a
50RIESGO
abrir ↗
Metasploit300
Solaris KCMS + TTDB Arbitrary File Read
CVE-2003-0027—22 ene 2003
Directory traversal vulnerability in Sun Kodak Color Management System (KCMS) library service daemon (kcms_server) allow
23RIESGO
abrir ↗
Metasploit500
RealServer Describe Buffer Overflow
CVE-2002-1643—20 dic 2002
Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbit
60RIESGO
abrir ↗
Metasploit300
PuTTY Buffer Overflow
CVE-2002-1359—16 dic 2002
Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers
60RIESGO
abrir ↗
Metasploit200
Webster HTTP Server GET Buffer Overflow
CVE-2002-2268—02 dic 2002
Buffer overflow in Webster HTTP Server allows remote attackers to execute arbitrary code via a long URL.
50RIESGO
abrir ↗
Metasploit200
TFTPD32 Long Filename Buffer Overflow
CVE-2002-2226—19 nov 2002
Buffer overflow in tftpd of TFTP32 2.21 and earlier allows remote attackers to execute arbitrary code via a long filenam
50RIESGO
abrir ↗
Metasploit300
MS02-065 Microsoft IIS MDAC msadcs.dll RDS DataStub Content-Type Overflow
CVE-2002-1142—02 nov 2002
Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 th
60RIESGO
abrir ↗
Metasploit300
MS02-063 PPTP Malformed Control Data Kernel Denial of Service
CVE-2002-1214—26 sep 2002
Buffer overflow in Microsoft PPTP Service on Windows XP and Windows 2000 allows remote attackers to cause a denial of se
30RIESGO
abrir ↗
Metasploit500
Savant 3.1 Web Server Overflow
CVE-2002-1120—10 sep 2002
Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP G
50RIESGO
abrir ↗
Metasploit600
HP-UX LPD Command Execution
CVE-2002-1473—28 ago 2002
Multiple buffer overflows in lp subsystem for HP-UX 10.20 through 11.11 (11i) allow local users to cause a denial of ser
38RIESGO
abrir ↗
Metasploit400
MS02-056 Microsoft SQL Server Hello Overflow
CVE-2002-1123—05 ago 2002
Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 al
60RIESGO
abrir ↗
Metasploit400
MS02-039 Microsoft SQL Server Resolution Overflow
CVE-2002-0649—24 jul 2002
Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSD
60RIESGO
abrir ↗
Metasploit200
SecureCRT SSH1 Buffer Overflow
CVE-2002-1059—23 jul 2002
Buffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x before 4.0 beta 3, allows an SSH server to execut
50RIESGO
abrir ↗
Metasploit500
Solaris dtspcd Heap Overflow
CVE-2001-0803—10 jul 2002
Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remo
60RIESGO
abrir ↗
Metasploit400
Apache Win32 Chunked Encoding
CVE-2002-0392—19 jun 2002
Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possi
60RIESGO
abrir ↗
Metasploit400
Oracle 8i TNS Listener SERVICE_NAME Buffer Overflow
CVE-2002-0965—27 may 2002
Buffer overflow in TNS Listener for Oracle 9i Database Server on Windows systems, and Oracle 8 on VM, allows local users
50RIESGO
abrir ↗
← anteriorpágina 107 / 118siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.