Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

84.035exploits catalogados
39.531CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.557Exploit-DB 24.485GitHub PoC 16.313VulnCheck XDB 9678Nuclei 4478Metasploit 3524✓ solo verificadosrecientespopularesriesgo
3524 exploits
Metasploit400
MS02-018 Microsoft IIS 4.0 .HTR Path Overflow
CVE-1999-0874—10 abr 2002
Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .
60RIESGO
abrir ↗
Metasploit600
DistCC Daemon Command Execution
CVE-2004-2687—01 feb 2002
distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote at
60RIESGO
abrir ↗
Metasploit600
Solaris in.telnetd TTYPROMPT Buffer Overflow
CVE-2001-0797—18 ene 2002
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary comman
60RIESGO
abrir ↗
Metasploit400
System V Derived /bin/login Extraneous Arguments Buffer Overflow
CVE-2001-0797—12 dic 2001
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary comman
60RIESGO
abrir ↗
Metasploit600
Irix LPD tagprinter Command Execution
CVE-2001-0800—01 sep 2001
lpsched in IRIX 6.5.13f and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.
50RIESGO
abrir ↗
Metasploit600
Solaris LPD Command Execution
CVE-2001-1583—31 ago 2001
lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request wit
60RIESGO
abrir ↗
Metasploit400
Network Associates PGP KeyServer 7 LDAP Buffer Overflow
CVE-2001-1320—16 jul 2001
Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute a
50RIESGO
abrir ↗
Metasploit400
Oracle 8i TNS Listener (ARGUMENTS) Buffer Overflow
CVE-2001-0499—28 jun 2001
Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers t
60RIESGO
abrir ↗
Metasploit300
Cisco IOS HTTP Unauthorized Administrative Access
CVE-2001-0537—27 jun 2001
HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when lo
50RIESGO
abrir ↗
Metasploit400
MS01-033 Microsoft IIS 5.0 IDQ Path Overflow
CVE-2001-0500—18 jun 2001
Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier a
60RIESGO
abrir ↗
Metasploit600
MS01-026 Microsoft IIS/PWS CGI Filename Double Decode Command Execution
CVE-2001-0333—15 may 2001
Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encodi
60RIESGO
abrir ↗
Metasploit400
MS01-023 Microsoft IIS 5.0 Printer Host Header Overflow
CVE-2001-0241—01 may 2001
Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via
60RIESGO
abrir ↗
Metasploit400
NTP Daemon readvar Buffer Overflow
CVE-2001-0414—04 abr 2001
Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial o
60RIESGO
abrir ↗
Metasploit600
MS08-068 Microsoft Windows SMB Relay Code Execution
CVE-2008-4037—31 mar 2001
Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 20
50RIESGO
abrir ↗
Metasploit300
Windows Gather DynaZIP Saved Password Extraction
CVE-2001-0152—27 mar 2001
The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes password
18RIESGO
abrir ↗
Metasploit600
HP OpenView OmniBack II Command Execution
CVE-2001-0311—28 feb 2001
Vulnerability in OmniBackII A.03.50 in HP 11.x and earlier allows attackers to gain unauthorized access to an OmniBack c
43RIESGO
abrir ↗
Metasploit300
RealVNC 3.3.7 Client Buffer Overflow
CVE-2001-0167—29 ene 2001
Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute
50RIESGO
abrir ↗
Metasploit200
WinVNC Web Server GET Overflow
CVE-2001-0168—29 ene 2001
Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute
60RIESGO
abrir ↗
Metasploit400
MS00-094 Microsoft IIS Phone Book Service Overflow
CVE-2000-1089—04 dic 2000
Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Se
60RIESGO
abrir ↗
Metasploit300
Cisco Device HTTP Device Manager Access
CVE-2000-0945—26 oct 2000
The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands with
60RIESGO
abrir ↗
Metasploit300
CVE-2000-0979 SMB Share Password Enumerator
CVE-2000-0979—10 oct 2000
File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file
60RIESGO
abrir ↗
Metasploit300
LPRng use_syslog Remote Format String Vulnerability
CVE-2000-0917—25 sep 2000
Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary comman
60RIESGO
abrir ↗
Metasploit200
GAMSoft TelSrv 1.5 Username Buffer Overflow
CVE-2000-0665—17 jul 2000
GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username.
50RIESGO
abrir ↗
Metasploit300
UoW pop2d Remote File Retrieval Vulnerability
CVE-1999-0920—14 jul 2000
Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD com
50RIESGO
abrir ↗
Metasploit500
WU-FTPD SITE EXEC/INDEX Format String Vulnerability
CVE-2000-0573—22 jun 2000
The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remo
60RIESGO
abrir ↗
Metasploit600
Microsoft SQL Server Payload Execution via SQL Injection
CVE-2000-1209—30 may 2000
The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3)
60RIESGO
abrir ↗
Metasploit600
Microsoft SQL Server Payload Execution via SQL Injection
CVE-2000-0402—30 may 2000
The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in pla
60RIESGO
abrir ↗
Metasploit600
Microsoft SQL Server Payload Execution
CVE-2000-1209—30 may 2000
The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3)
60RIESGO
abrir ↗
Metasploit600
Microsoft SQL Server Payload Execution
CVE-2000-0402—30 may 2000
The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in pla
60RIESGO
abrir ↗
Metasploit300
Cisco IOS HTTP GET /%% Request Denial of Service
CVE-2000-0380—26 abr 2000
The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a deni
50RIESGO
abrir ↗
← anteriorpágina 108 / 118siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.