Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.795exploits catalogados
40.763CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.463Exploit-DB 24.489GitHub PoC 18.220VulnCheck XDB 10.507Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
24.489 exploits
Exploit-DB✓ VexDay Proof
WMMon 1.0 b2 - Memory Character File Open File Descriptor Read
CVE-2002-1125—localfreebsd16 sep 2002
FreeBSD port programs that use libkvm for FreeBSD 4.6.2-RELEASE and earlier, including (1) asmon, (2) ascpu, (3) bubblem
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WMNet2 1.0 6 - Kernel Memory File Descriptor Leakage
CVE-2002-1125—localfreebsd16 sep 2002
FreeBSD port programs that use libkvm for FreeBSD 4.6.2-RELEASE and earlier, including (1) asmon, (2) ascpu, (3) bubblem
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
BubbleMon 1.x Kernel - Memory File Descriptor Leakage
CVE-2002-1125—localunix16 sep 2002
FreeBSD port programs that use libkvm for FreeBSD 4.6.2-RELEASE and earlier, including (1) asmon, (2) ascpu, (3) bubblem
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ASCPU 0.60 Kernel - Memory File Descriptor Leakage
CVE-2002-1125—localunix16 sep 2002
FreeBSD port programs that use libkvm for FreeBSD 4.6.2-RELEASE and earlier, including (1) asmon, (2) ascpu, (3) bubblem
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PlanetWeb 1.14 - GET Buffer Overflow
CVE-2002-1489—doswindows16 sep 2002
Buffer overflow in PlanetDNS PlanetWeb 1.14 and earlier allows remote attackers to execute arbitrary code via (1) an HTT
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Savant Web Server 3.1 - File Disclosure
CVE-2002-2145—remotewindows13 sep 2002
Savant Web Server 3.1 and earlier allows remote attackers to bypass authentication for password protected user folders v
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Enterasys SSR8000 SmartSwitch - Port Scan Denial of Service
CVE-2002-1501—doshardware13 sep 2002
The MPS functionality in Enterasys SSR8000 (Smart Switch Router) before firmware 8.3.0.10 allows remote attackers to cau
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Savant Web Server 3.1 - Malformed Content-Length Denial of Service
CVE-2002-1828—doswindows13 sep 2002
Savant Webserver 3.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request with a negativ
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
BRU 17.0 - XBRU Insecure Temporary File
CVE-2002-1512—locallinux13 sep 2002
xbru in BRU Workstation 17.0 allows local users to overwrite arbitrary files and gain root privileges via a symlink atta
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHPGB 1.1/1.2 - PHP Code Injection
CVE-2002-1481—webappsphp09 sep 2002
savesettings.php in phpGB 1.20 and earlier does not require authentication, which allows remote attackers to cause a den
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WoltLab Burning Board 2.0 - SQL Injection
CVE-2002-1505—webappsphp09 sep 2002
SQL injection vulnerability in board.php for WoltLab Burning Board (wBB) 2.0 RC 1 and earlier allows remote attackers to
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Alleged Outlook Express 5/6 Link - Denial of Service
CVE-2002-2164—doswindows09 sep 2002
Buffer overflow in Microsoft Outlook Express 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (cra
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Netris 0.3/0.4/0.5 - Remote Memory Corruption
CVE-2002-1566—remotelinux09 sep 2002
netris 0.5, and possibly other versions before 0.52, when running with the -w (wait) option, allows remote attackers to
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpGB 1.x - SQL Injection
CVE-2002-1482—webappsphp09 sep 2002
SQL injection vulnerability in login.php for phpGB 1.20 and earlier, when magic_quotes_gpc is not enabled, allows remote
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5 - IFrame/Frame Cross-Site/Zone Script Execution
CVE-2002-1187—remotewindows09 sep 2002
Cross-site scripting vulnerability (XSS) in Internet Explorer 5.01 through 6.0 allows remote attackers to read and execu
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpGB 1.1 - HTML Injection
CVE-2002-1480—webappsphp09 sep 2002
Cross-site scripting (XSS) vulnerability in phpGB before 1.20 allows remote attackers to inject arbitrary HTML or script
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Trillian Instant Messaging 0.x - Credential Encryption
CVE-2002-2162—localwindows09 sep 2002
Cerulean Studios Trillian 0.73 and earlier use weak encrypttion (XOR) for storing user passwords in .ini files in the Tr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
AFD 1.2.x - Working Directory Local Buffer Overflow / Local Privilege Escalation
CVE-2002-1503—localunix04 sep 2002
Buffer overflow in Automatic File Distributor (AFD) 1.2.14 and earlier allows local users to gain privileges via a long
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Super Site Searcher - Remote Command Execution
CVE-2002-2420—webappscgi03 sep 2002
site_searcher.cgi in Super Site Searcher allows remote attackers to execute arbitrary commands via shell metacharacters
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Cisco VPN 3000 Series Concentrator Client - Authentication Denial of Service
CVE-2002-1101—doshardware03 sep 2002
Cisco VPN 3000 Concentrator 2.2.x, 3.6(Rel), and 3.x before 3.5.5, allows remote attackers to cause a denial of service
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Aestiva HTML/OS 2.4 - Cross-Site Scripting
CVE-2002-1494—webappscgi03 sep 2002
Cross-site scripting (XSS) vulnerabilities in Aestiva HTML/OS allows remote attackers to insert arbitrary HTML or script
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
SWS Simple Web Server 0.0.3/0.0.4/0.1 - New Line Denial of Service
CVE-2002-2370—doslinux02 sep 2002
SWS web server 0.0.4, 0.0.3 and 0.1.0 allows remote attackers to cause a denial of service (crash) via a URL request tha
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
NullLogic Null HTTPd 0.5 - Error Page Cross-Site Scripting
CVE-2002-1497—remotemultiple02 sep 2002
Cross-site scripting (XSS) vulnerability in Null HTTP Server 0.5.0 and earlier allows remote attackers to insert arbitra
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FactoSystem Weblog 0.9/1.0/1.1 - Multiple SQL Injections
CVE-2002-1499—webappsasp31 ago 2002
Multiple SQL injection vulnerabilities in FactoSystem CMS allows remote attackers to perform unauthorized database actio
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
HP-UX LPD 10.20/11.00/11.11 - Command Execution (Metasploit)
CVE-2002-1473—remotehp-ux28 ago 2002
Multiple buffer overflows in lp subsystem for HP-UX 10.20 through 11.11 (11i) allow local users to cause a denial of ser
38RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Linuxconf 1.1.x/1.2.x - Local Environment Variable Buffer Overflow (1)
CVE-2002-1506—locallinux28 ago 2002
Buffer overflow in Linuxconf before 1.28r4 allows local users to execute arbitrary code via a long LINUXCONF_LANG enviro
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Linuxconf 1.1.x/1.2.x - Local Environment Variable Buffer Overflow (2)
CVE-2002-1506—locallinux28 ago 2002
Buffer overflow in Linuxconf before 1.28r4 allows local users to execute arbitrary code via a long LINUXCONF_LANG enviro
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Webmin 0.x - 'RPC' Privilege Escalation
CVE-2002-2360—remotelinux28 ago 2002
The RPC module in Webmin 0.21 through 0.99, when installed without root or admin privileges, allows remote attackers to
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Linuxconf 1.1.x/1.2.x - Local Environment Variable Buffer Overflow (3)
CVE-2002-1506—locallinux28 ago 2002
Buffer overflow in Linuxconf before 1.28r4 allows local users to execute arbitrary code via a long LINUXCONF_LANG enviro
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
mIRC 6.0 - Scripting ASCTime Buffer Overflow
CVE-2002-1456—remotewindows27 ago 2002
Buffer overflow in mIRC 6.0.2 and earlier allows remote attackers to execute arbitrary code via a long $asctime value.
28RIESGO
abrir ↗
← anteriorpágina 747 / 817siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.