Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.958exploits catalogados
36.206CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.460Referência 22.832GitHub PoC 14.991VulnCheck XDB 8829Nuclei 4357Metasploit 3489✓ solo verificadosrecientespopularesriesgo
24.458 exploits
Exploit-DB✓ VexDay Proof
Mollensoft Software Enceladus Server Suite 3.9 - 'FTP' Buffer Overflow
CVE-2002-2232—doswindows09 dic 2002
Buffer overflow in Enceladus Server Suite 3.9 allows remote attackers to execute arbitrary code via a long CD (CWD) comm
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Cobalt RaQ4 - Administrative Interface Command Execution
CVE-2002-1361—remotelinux05 dic 2002
overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP (Security Hardening Patch) installed allows remote attackers to
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Exim Internet Mailer 3.35/3.36/4.10 - Format String
CVE-2002-1381—locallinux04 dic 2002
Format string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative user
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apache 1.3.x + Tomcat 4.0.x/4.1.x mod_jk - Chunked Encoding Denial of Service
CVE-2002-2272—dosunix04 dic 2002
Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a de
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
SAP DB 7.3.00 - Symbolic Link
CVE-2002-1576—localunix04 dic 2002
lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpBB 2.0.3 - 'search.php' Cross-Site Scripting
CVE-2002-2255—webappsphp03 dic 2002
Cross-site scripting (XSS) vulnerability in search.php in phpBB 2.0.3 and possibly earlier versions allows remote attack
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Cyrus IMAPD 1.4/1.5.19/2.0.12/2.0.16/2.1.9/2.1.10 - Pre-Login Heap Corruption
CVE-2002-1580—doslinux02 dic 2002
Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code v
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
3Com SuperStack 3 NBX 4.0/4.1 - FTPD Denial of Service
CVE-2002-2300—doshardware02 dic 2002
Buffer overflow in ftpd 5.4 in 3Com NBX 4.0.17 or ftpd 5.4.2 in 3Com NBX 4.1.4 allows remote attackers to cause a denial
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Pserv 2.0 - HTTP Version Specifier Buffer Overflow
CVE-2002-2295—doslinux30 nov 2002
Buffer overflow in Pico Server (pServ) 2.0 beta 1 through beta 5 allows remote attackers to cause a denial of service (c
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Moby NetSuite 1.0/1.2 - POST Handler Buffer Overflow
CVE-2002-2258—dosmultiple29 nov 2002
Moby NetSuite allows remote attackers to cause a denial of service (crash) via an HTTP POST request with a (1) large int
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
YaBB 1 Gold SP 1 - 'YaBB.pl' Cross-Site Scripting
CVE-2002-2296—webappscgi28 nov 2002
Cross-site scripting (XSS) vulnerability in YaBB.pl in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 allows remote attac
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Lib CGI 0.1 - Include Buffer Overflow
CVE-2002-2251—remoteunix27 nov 2002
Buffer overflow in the changevalue function in libcgi.h for Marcos Luiz Onisto Lib CGI 0.1 allows remote attackers to ex
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
BizDesign ImageFolio 2.x/3.0.1 - 'imageFolio.cgi?direct' Cross-Site Scripting
CVE-2002-1334—webappscgi27 nov 2002
Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arb
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
BizDesign ImageFolio 2.x/3.0.1 - 'nph-build.cgi' Cross-Site Scripting
CVE-2002-1334—webappscgi27 nov 2002
Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arb
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
News Evolution 1.0/2.0 - Include Undefined Variable Command Execution
CVE-2002-2249—webappsphp26 nov 2002
PHP remote file inclusion vulnerability in News Evolution 2.0 allows remote attackers to execute arbitrary PHP commands
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
vBulletin 2.0.x/2.2.x - 'members2.php' Cross-Site Scripting
CVE-2002-2235—webappsphp25 nov 2002
member2.php in vBulletin 2.2.9 and earlier does not properly restrict the $perpage variable to be an integer, which caus
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
XFree86 X11R6 3.3.x - Font Server Remote Buffer Overrun
CVE-2002-1317—remoteunix25 nov 2002
Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers t
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
acFTP 1.4 - Invalid Password Weak Authentication
CVE-2002-2417—remotewindows25 nov 2002
acFTP 1.4 does not properly handle when an invalid password is provided by the user during authentication, which allows
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Zeroo HTTP Server 1.5 - Directory Traversal (1)
CVE-2002-2416—remotelinux22 nov 2002
Directory traversal vulnerability in Zeroo web server 1.5 allows remote attackers to read arbitrary files via a .. (dot
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
vBulletin 2.0/2.2.x - 'memberlist.php' Cross-Site Scripting
CVE-2004-1824—webappsphp22 nov 2002
Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin before 3.0 allows remote attackers to inject arbitrary web
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Rational ClearCase 4.1 - Portscan Denial of Service
CVE-2002-1322—dosunix22 nov 2002
Rational ClearCase 4.1, 2002.05, and possibly other versions allows remote attackers to cause a denial of service (crash
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Zeroo HTTP Server 1.5 - Directory Traversal (2)
CVE-2002-2416—remotelinux22 nov 2002
Directory traversal vulnerability in Zeroo web server 1.5 allows remote attackers to read arbitrary files via a .. (dot
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Java Virtual Machine 3802 Series - Bytecode Verifier
CVE-2003-0111—remotewindows21 nov 2002
The ByteCode Verifier component of Microsoft Virtual Machine (VM) build 5.0.3809 and earlier, as used in Windows and Int
35RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Symantec Java! JustInTime Compiler 210.65 - Command Execution
CVE-2002-2281—remotewindows21 nov 2002
Symantec Java! JIT (Just-In-Time) Compiler for Netscape Communicator 4.0 through 4.8 allows remote attackers to execute
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
TFTPD32 2.50 - 'Filename' Remote Buffer Overflow
CVE-2002-2226—remotewindows19 nov 2002
Buffer overflow in tftpd of TFTP32 2.21 and earlier allows remote attackers to execute arbitrary code via a long filenam
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Mhonarc 2.5.x - Mail Header HTML Injection
CVE-2002-1307—remotelinux19 nov 2002
Cross-site scripting vulnerability (XSS) in MHonArc 2.5.12 and earlier allows remote attackers to insert script or HTML
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
MailEnable 1.501x - Email Server Buffer Overflow
CVE-2002-2357—remotewindows18 nov 2002
MailEnable 1.5 015 through 1.5 018 allows remote attackers to cause a denial of service (crash) via a long USER string,
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
TFTPD32 2.50 - Arbitrary File Download/Upload
CVE-2002-2353—remotewindows18 nov 2002
tftpd32 2.50 and 2.50.2 allows remote attackers to read or write arbitrary files via a full pathname in GET and PUT requ
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Lonerunner Zeroo HTTP Server 1.5 - Remote Buffer Overflow
CVE-2002-1823—remotelinux16 nov 2002
Buffer overflow in the HttpGetRequest function in Zeroo HTTP server 1.5 allows remote attackers to execute arbitrary cod
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Perception LiteServe 2.0 - CGI Source Disclosure
CVE-2002-1986—remotemultiple14 nov 2002
Perception LiteServe 2.0 through 2.0.1 allows remote attackers to obtain the source code of CGI scripts via an HTTP requ
23RIESGO
abrir ↗
← anteriorpágina 740 / 816siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.