Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

81.064exploits catalogados

37.667CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.482Referência 24.044GitHub PoC 15.521VulnCheck XDB 9080Nuclei 4432Metasploit 3505✓ solo verificadosrecientes populares riesgo

24.695 exploits

Exploit-DB✓ VexDay Proof

PoPToP < 1.1.3-b3/1.1.3-20030409 - Negative Read Overflow (Metasploit)

CVE-2003-0213—remotelinux09 abr 2003

ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length fie

60RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

PoPToP PPTP 1.0/1.1.x - Negative 'read()' Argument Remote Buffer Overflow

CVE-2003-0213—remotelinux09 abr 2003

ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length fie

60RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Apache 2.x - Memory Leak

CVE-2003-0132—doswindows09 abr 2003

A memory leak in Apache 2.0 through 2.0.44 allows remote attackers to cause a denial of service (memory consumption) via

45RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

SETI@home Clients - Remote Buffer Overflow

CVE-2003-1118—remotelinux08 abr 2003

Buffer overflow in the SETI@home client 3.03 and other versions allows remote attackers to cause a denial of service (cl

28RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Samba 2.2.x - Remote Buffer Overflow

CVE-2003-0201—remotelinux07 abr 2003

Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x vers

60RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Vignette StoryServer 4.1 - Sensitive Stack Memory Information Disclosure

CVE-2003-0400—remotemultiple07 abr 2003

Vignette StoryServer and Vignette V/5 does not properly calculate the size of text variables, which causes Vignette to r

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Samba 2.2.x - 'nttrans' Remote Overflow (Metasploit)

CVE-2003-0085—remotelinux07 abr 2003

Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon (smbd) in Samba before 2.2.8, and Samba-

45RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Samba 2.2.0 < 2.2.8 (OSX) - trans2open Overflow (Metasploit)

CVE-2003-0201—remoteosx07 abr 2003

Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x vers

60RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Samba 2.2.x - 'call_trans2open' Remote Buffer Overflow (4)

CVE-2003-0201—remoteunix07 abr 2003

Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x vers

60RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Samba 2.2.x - 'call_trans2open' Remote Buffer Overflow (2)

CVE-2003-0201—remoteunix07 abr 2003

Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x vers

60RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Basic Analysis and Security Engine (BASE) 1.2.4 - PrintFreshPage Cross-Site Scripting

CVE-2006-1590—webappsphp06 abr 2003

Cross-site scripting (XSS) vulnerability in the PrintFreshPage function in (1) Basic Analysis and Security Engine (BASE)

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Abyss Web Server 1.1.2 - Incomplete HTTP Request Denial of Service

CVE-2003-1364—doswindows05 abr 2003

Aprelium Technologies Abyss Web Server 1.1.2, and possibly other versions before 1.1.4, allows remote attackers to cause

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPSysInfo 2.0/2.1 - 'index.php' LNG File Disclosure

CVE-2003-0536—webappsphp04 abr 2003

Directory traversal vulnerability in phpSysInfo 2.1 and earlier allows attackers with write access to a local directory

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Linux Kernel 2.2.x/2.4.x - I/O System Call File Existence

CVE-2001-1287—locallinux04 abr 2003

Buffer overflow in Web Calendar in Ipswitch IMail 7.04 and earlier allows remote attackers to execute arbitrary code via

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Apache mod_ssl < 2.8.7 OpenSSL - 'OpenFuckV2.c' Remote Buffer Overflow (1)

CVE-2002-0082—remoteunix04 abr 2003

The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly

28RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft IIS 5.0 (Windows XP/2000/NT 4.0) - WebDAV 'ntdll.dll' Remote Buffer Overflow (3)

CVE-2003-0109—remotewindows04 abr 2003

Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Wind

60RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows 2000/NT 4 - RPC Locator Service Remote Overflow

CVE-2003-0003—remotewindows03 abr 2003

Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows

35RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

HP-UX 10/11 - NLSPATH Environment Variable Format String (2)

CVE-2003-0090—localhp-ux01 abr 2003

20RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

HP-UX 10/11 - NLSPATH Environment Variable Format String (1)

CVE-2003-0090—localhp-ux01 abr 2003

20RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Sun SUNWlldap Library Hostname - Local Buffer Overflow

CVE-2003-1055—localsolaris01 abr 2003

Buffer overflow in the nss_ldap.so.1 library for Sun Solaris 8 and 9 may allow local users to gain root access via a lon

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft IIS 5.0 (Windows XP/2000/NT 4.0) - WebDAV 'ntdll.dll' Remote Buffer Overflow (2)

CVE-2003-0109—remotewindows31 mar 2003

Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Wind

60RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

HP Instant TopTools 5.0 - Remote Denial of Service

CVE-2003-0169—doswindows31 mar 2003

hpnst.exe in the GoAhead-Webs webserver for HP Instant TopTools before 5.55 allows remote attackers to cause a denial of

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Linux Kernel 2.2.x/2.4.x (RedHat) - 'ptrace/kmod' Local Privilege Escalation

CVE-2003-0127—locallinux30 mar 2003

The kernel module loader in Linux kernel 2.2.x before 2.2.25, and 2.4.x before 2.4.21, allows local users to gain root p

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Sendmail 8.11.6 - Address Prescan Memory Corruption

CVE-2003-0161—localunix29 mar 2003

The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain co

35RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Justice Guestbook 1.3 - Full Path Disclosure

CVE-2003-1535—webappsphp29 mar 2003

Justice Guestbook 1.3 allows remote attackers to obtain the full installation path via a direct request to cfooter.php3,

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

ScozBook 1.1 - Full Path Disclosure

CVE-2003-1555—webappsphp29 mar 2003

ScozNet ScozBook 1.1 BETA allows remote attackers to obtain sensitive information via an invalid PG parameter in view.ph

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

GNOME Eye Of Gnome 1.0.x/1.1.x/2.2 - Format String

CVE-2003-0165—locallinux28 mar 2003

Format string vulnerability in Eye Of Gnome (EOG) allows attackers to execute arbitrary code via format string specifier

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

GlobalScape CuteFTP 5.0 - LIST Response Buffer Overflow

CVE-2003-1260—remotewindows26 mar 2003

Buffer overflow in CuteFTP 5.0 allows remote attackers to execute arbitrary code via a long response to a LIST command.

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP 4.x - 'socket_recvfrom()' Signed Integer Memory Corruption

CVE-2003-0166—dosphp26 mar 2003

Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service

28RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP 4.x - 'socket_recv()' Signed Integer Memory Corruption

CVE-2003-0166—dosphp26 mar 2003

Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service

28RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.