Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.958exploits catalogados

36.206CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.460Referência 22.832GitHub PoC 14.991VulnCheck XDB 8829Nuclei 4357Metasploit 3489✓ solo verificadosrecientes populares riesgo

24.458 exploits

Exploit-DB✓ VexDay Proof

FloosieTek FTGate PRO 1.22 - SMTP MAIL FROM Buffer Overflow

CVE-2003-0263—doswindows06 may 2003

Multiple buffer overflows in Floosietek FTGate Pro Mail Server (FTGatePro) 1.22 allow remote attackers to execute arbitr

28RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

FloosieTek FTGate PRO 1.22 - SMTP RCPT TO Buffer Overflow

CVE-2003-0263—doswindows06 may 2003

Multiple buffer overflows in Floosietek FTGate Pro Mail Server (FTGatePro) 1.22 allow remote attackers to execute arbitr

28RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Youbin 2.5/3.0/3.4 - 'HOME' Buffer Overflow

CVE-2003-0269—localfreebsd06 may 2003

Buffer overflow in youbin allows local users to gain privileges via a long HOME environment variable.

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Leksbot 1.2 - Multiple Vulnerabilities

CVE-2003-0262—locallinux06 may 2003

leksbot 1.2.3 in Debian GNU/Linux installs the KATAXWR as setuid root, which allows local users to gain root privileges

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

IkonBoard 3.1 - Lang Cookie Arbitrary Command Execution (2)

CVE-2003-0770—webappscgi05 may 2003

FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains i

28RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

CommuniGate Pro Webmail 4.0.6 - Session Hijacking

CVE-2003-1481—remotelinux05 may 2003

CommuniGate Pro 3.1 through 4.0.6 sends the session ID in the referer field for an HTTP request for an image, which allo

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

MySQL 3.x/4.0.x - Weak Password Encryption

CVE-2003-1480—locallinux05 may 2003

MySQL 3.20 through 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for attackers to decrypt the

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

KDE Konqueror 3.0.3 - Malformed HTML Page Denial of Service

CVE-2003-1478—doslinux02 may 2003

Konqueror in KDE 3.0.3 allows remote attackers to cause a denial of service (core dump) via a web page that begins with

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

OpenSSH/PAM 3.6.1p1 - 'gossh.sh' Remote Users Ident

CVE-2003-0190—remotelinux02 may 2003

OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user d

60RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

HP-UX 11 RWrite - Buffer Overflow

CVE-2003-1461—doshp-ux02 may 2003

Buffer overflow in rwrite for HP-UX 11.0 could allow local users to execute arbitrary code via a long argument. NOTE: t

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft BizTalk Server 2002 - HTTP Receiver Buffer Overflow

CVE-2003-0117—doswindows30 abr 2003

Buffer overflow in the HTTP receiver function (BizTalkHTTPReceive.dll ISAPI) of Microsoft BizTalk Server 2002 allows att

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Kerio Personal Firewall 2.1.x - Remote Authentication Packet Buffer Overflow (2)

CVE-2003-0220—remotewindows30 abr 2003

Buffer overflow in the administrator authentication process for Kerio Personal Firewall (KPF) 2.1.4 and earlier allows r

50RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Sendmail 8.12.8 (BSD) - 'Prescan()' Remote Command Execution

CVE-2003-0161—remotelinux30 abr 2003

The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain co

35RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

RealServer < 8.0.2 (Windows Platforms) - Remote Overflow

CVE-2002-1643—remotewindows30 abr 2003

Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbit

60RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft BizTalk Server 2000/2002 DTA - 'rawdocdata.asp' SQL Injection

CVE-2003-0118—webappsasp30 abr 2003

SQL injection vulnerability in the Document Tracking and Administration (DTA) website of Microsoft BizTalk Server 2000 a

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft BizTalk Server 2000/2002 DTA - 'RawCustomSearchField.asp' SQL Injection

CVE-2003-0118—webappsasp30 abr 2003

SQL injection vulnerability in the Document Tracking and Administration (DTA) website of Microsoft BizTalk Server 2000 a

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

OpenSSH/PAM 3.6.1p1 - Remote Users Discovery Tool

CVE-2003-0190—remotelinux30 abr 2003

OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user d

60RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Pi3Web 2.0.1 - Denial of Service (PoC)

CVE-2003-0276—doswindows29 abr 2003

Buffer overflow in Pi3Web 2.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitr

28RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Qpopper 4.0.x - 'poppassd' Privilege Escalation

CVE-2003-1452—locallinux29 abr 2003

Untrusted search path vulnerability in Qualcomm qpopper 4.0 through 4.05 allows local users to execute arbitrary code by

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

HP-UX 10.x/11.x - RExec Remote 'Username' Flag Local Buffer Overrun

CVE-2003-1097—doshp-ux29 abr 2003

Buffer overflow in rexec on HP-UX B.10.20, B.11.00, and B.11.04, when setuid root, may allow local users to gain privile

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Opera 6.0.x/7.0 - Long File Name Remote Heap Corruption

CVE-2003-1396—doswindows28 abr 2003

Heap-based buffer overflow in Opera 6.05 through 7.10 allows remote attackers to cause a denial of service (crash) and p

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Kerio Personal Firewall 2.1.x - Remote Authentication Packet Buffer Overflow (1)

CVE-2003-0220—doswindows28 abr 2003

Buffer overflow in the administrator authentication process for Kerio Personal Firewall (KPF) 2.1.4 and earlier allows r

50RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

3D-FTP Client 4.0 - Buffer Overflow

CVE-2003-1472—doswindows28 abr 2003

Buffer overflow in 3D-FTP client 4.0 allows remote FTP servers to cause a denial of service (crash) and possibly execute

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Pi3Web 2.0.1 - GET Denial of Service

CVE-2003-0276—doswindows26 abr 2003

Buffer overflow in Pi3Web 2.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitr

28RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Mike Bobbitt Album.PL 0.61 - Remote Command Execution

CVE-2003-1456—webappscgi26 abr 2003

Album.pl 6.1 allows remote attackers to execute arbitrary commands, when an alternative configuration file is used, via

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Macromedia ColdFusion MX 6.0 - Error Message Full Path Disclosure

CVE-2003-1469—webappscfm26 abr 2003

The default configuration of ColdFusion MX has the "Enable Robust Exception Information" option selected, which allows r

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Xoops 1.3.x/2.0 MyTextSanitizer - HTML Injection

CVE-2003-1453—webappsphp25 abr 2003

Cross-site scripting (XSS) vulnerability in the MytextSanitizer function in XOOPS 1.3.5 through 1.3.9 and XOOPS 2.0 thro

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

PoPToP PPTP 1.1.4-b3 - 'poptop-sane.c' Remote Command Execution

CVE-2003-0213—remotelinux25 abr 2003

ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length fie

60RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Alt-N WebAdmin 2.0.x - Remote File Viewing

CVE-2003-1463—remotecgi25 abr 2003

Absolute path traversal vulnerability in Alt-N Technologies WebAdmin 2.0.0 through 2.0.2 allows remote attackers with ad

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows 2000/XP - SMB Authentication Remote Overflow

CVE-2008-4037—remotewindows25 abr 2003

Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 20

50RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.