Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

81.003exploits catalogados
37.620CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.482Referência 24.011GitHub PoC 15.501VulnCheck XDB 9077Nuclei 4427Metasploit 3505✓ solo verificadosrecientespopularesriesgo
24.695 exploits
Exploit-DB✓ VexDay Proof
Software602 602Pro LAN Suite - Web Mail Cross-Site Scripting
CVE-2004-0337—remotewindows01 mar 2004
Cross-site scripting (XSS) vulnerability in LAN SUITE Web Mail 602Pro allows remote attackers to execute arbitrary scrip
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
YaBB SE 1.5.x - Multiple SQL Injections
CVE-2004-0343—webappsphp01 mar 2004
Multiple SQL injection vulnerabilities in YaBB SE 1.5.4 through 1.5.5b allow remote attackers to execute arbitrary SQL v
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
GNU Anubis 3.6.x/3.9.x - Multiple Format String Vulnerabilities
CVE-2004-0354—remotelinux01 mar 2004
Multiple format string vulnerabilities in GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to ex
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Squid Proxy 2.4/2.5 - NULL URL Character Unauthorized Access
CVE-2004-0189—remotelinux01 mar 2004
The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a U
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
YaBB SE 1.5.x - Arbitrary File Deletion
CVE-2004-0344—webappsphp01 mar 2004
Directory traversal vulnerability in ModifyMessage.php in YaBB SE 1.5.4 through 1.5.5b allows remote attackers to delete
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WFTPD Server 3.21 - Remote Buffer Overflow
CVE-2004-0340—remotewindows29 feb 2004
Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Se
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IPSwitch IMail LDAP Daemon/Service - Remote Buffer Overflow
CVE-2004-0297—remotewindows27 feb 2004
Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Serve
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
RhinoSoft Serv-U FTPd Server 3.x/4.x/5.x - 'MDTM' Remote Overflow
CVE-2004-0330—remotewindows27 feb 2004
Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5/6 - Cross-Domain Event Leakage
CVE-2004-2383—remotewindows27 feb 2004
Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to bypass cross-frame scripting restrictions and cap
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ArGoSoft FTP Server 1.0/1.2/1.4 - Multiple Vulnerabilities
CVE-2004-2675—doswindows27 feb 2004
ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to cause a denial of service (crash) via a SITE PAS
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PSOProxy 0.91 (Windows 2000/XP) - Remote Buffer Overflow
CVE-2004-0313—remotewindows26 feb 2004
Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary cod
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
RhinoSoft Serv-U FTPd Server 3/4/5 - 'MDTM' Time Argument Buffer Overflow (3)
CVE-2004-0330—doswindows26 feb 2004
Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Symantec Gateway Security 5400 Series 2.0 - Error Page Cross-Site Scripting
CVE-2004-0192—remotehardware26 feb 2004
Cross-site scripting (XSS) vulnerability in the Management Service for Symantec Gateway Security 2.0 allows remote attac
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
RhinoSoft Serv-U FTPd Server 3/4/5 - 'MDTM' Time Argument Buffer Overflow (2)
CVE-2004-0330—doswindows26 feb 2004
Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Proxy-Pro Professional GateKeeper Pro 4.7 - Web proxy Remote Buffer Overflow
CVE-2004-0326—remotewindows26 feb 2004
Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GET
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
RhinoSoft Serv-U FTPd Server 3/4/5 - MDTM Command Time Argument Buffer Overflow (4)
CVE-2004-0330—remotewindows26 feb 2004
Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
RhinoSoft Serv-U FTPd Server 3/4/5 - 'MDTM' Time Argument Buffer Overflow (1)
CVE-2004-0330—doswindows26 feb 2004
Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
MTools 3.9.x - 'MFormat' Local Privilege Escalation
CVE-2004-2303—locallinux25 feb 2004
MTools Mformat before 3.9.9, when installed setuid root, creates files with world-readable and world-writable permission
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
RedStorm Ghost Recon Game Engine - Remote Denial of Service
CVE-2004-2371—dosmultiple24 feb 2004
Multiple Red Storm web-based games, including Ghost Recon 1.4 and earlier, Desert Siege, and The Sum of all Fears 1.1.1.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apache Cygwin 1.3.x/2.0.x - Directory Traversal
CVE-2004-0173—remotewindows24 feb 2004
Directory traversal vulnerability in Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier, when running on Cygwin, a
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Working Resources BadBlue Server 2.40 - 'PHPtest.php' Full Path Disclosure
CVE-2004-2374—webappsphp24 feb 2004
BadBlue 2.4 allows remote attackers to obtain the location of the server installation path via a request for phptest.php
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
RobotFTP Server 1.0/2.0 - Remote Denial of Service
CVE-2004-2368—dosphp24 feb 2004
PHP remote file inclusion vulnerability in header.php in Opt-X 0.7.2 allows remote attackers to execute arbitrary PHP co
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
GWeb HTTP Server 0.5/0.6 - Directory Traversal
CVE-2004-0349—remotewindows24 feb 2004
Directory traversal vulnerability in GWeb HTTP Server 0.6 allows remote attackers to view arbitrary files via a .. (dot
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
XMB Forum 1.8 - 'u2uadmin.php?uid' Cross-Site Scripting
CVE-2004-0322—webappsphp23 feb 2004
Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary scr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Proxy-Pro Professional GateKeeper 4.7 Web Proxy - Buffer Overrun
CVE-2004-0326—remotewindows23 feb 2004
Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GET
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
XMB Forum 1.8 - 'editprofile.php?user' Cross-Site Scripting
CVE-2004-0322—webappsphp23 feb 2004
Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary scr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Samhain Labs 1.x - HSFTP Remote Format String
CVE-2004-0159—remotelinux23 feb 2004
Format string vulnerability in hsftp 1.11 allows remote authenticated users to cause a denial of service and possibly ex
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
EZBoard 7.3 - Font Tag HTML Injection
CVE-2004-0319—webappsphp23 feb 2004
Cross-site scripting (XSS) vulnerability in the font tag in ezBoard 7.3u allows remote attackers to execute arbitrary sc
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpNewsManager 1.36 - functions Script File Disclosure
CVE-2004-0327—webappsphp23 feb 2004
Directory traversal vulnerability in functions.php in PhpNewsManager 1.46 allows remote attackers to retrieve arbitrary
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
XMB Forum 1.8 - 'forumdisplay.php' Multiple SQL Injections
CVE-2004-0323—webappsphp23 feb 2004
Multiple SQL injection vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to inject arbitrary SQL and gain priv
23RIESGO
abrir ↗
← anteriorpágina 532 / 824siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.