Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.886exploits catalogados
32.153CVEs com exploração pública
1.932testados em laboratório
TodosExploit-DB 22.786Referência 19.978GitHub PoC 13.282VulnCheck XDB 8.176Nuclei 4.202Metasploit 3.462✓ só verificadosrecentespopularesrisco
3.462 exploits
Metasploit400
Apache Win32 Chunked Encoding
CVE-2002-0392—19 jun 2002
Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possi
60RISCO
abrir ↗
Metasploit400
Oracle 8i TNS Listener SERVICE_NAME Buffer Overflow
CVE-2002-0965—27 mai 2002
Buffer overflow in TNS Listener for Oracle 9i Database Server on Windows systems, and Oracle 8 on VM, allows local users
50RISCO
abrir ↗
Metasploit400
MS02-018 Microsoft IIS 4.0 .HTR Path Overflow
CVE-1999-0874—10 abr 2002
Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .
60RISCO
abrir ↗
Metasploit600
DistCC Daemon Command Execution
CVE-2004-2687—01 fev 2002
distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote at
60RISCO
abrir ↗
Metasploit600
Solaris in.telnetd TTYPROMPT Buffer Overflow
CVE-2001-0797—18 jan 2002
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary comman
60RISCO
abrir ↗
Metasploit400
System V Derived /bin/login Extraneous Arguments Buffer Overflow
CVE-2001-0797—12 dez 2001
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary comman
60RISCO
abrir ↗
Metasploit600
Irix LPD tagprinter Command Execution
CVE-2001-0800—01 set 2001
lpsched in IRIX 6.5.13f and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.
50RISCO
abrir ↗
Metasploit600
Solaris LPD Command Execution
CVE-2001-1583—31 ago 2001
lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request wit
60RISCO
abrir ↗
Metasploit400
Network Associates PGP KeyServer 7 LDAP Buffer Overflow
CVE-2001-1320—16 jul 2001
Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute a
50RISCO
abrir ↗
Metasploit400
Oracle 8i TNS Listener (ARGUMENTS) Buffer Overflow
CVE-2001-0499—28 jun 2001
Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers t
60RISCO
abrir ↗
Metasploit300
Cisco IOS HTTP Unauthorized Administrative Access
CVE-2001-0537—27 jun 2001
HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when lo
50RISCO
abrir ↗
Metasploit400
MS01-033 Microsoft IIS 5.0 IDQ Path Overflow
CVE-2001-0500—18 jun 2001
Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier a
60RISCO
abrir ↗
Metasploit600
MS01-026 Microsoft IIS/PWS CGI Filename Double Decode Command Execution
CVE-2001-0333—15 mai 2001
Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encodi
60RISCO
abrir ↗
Metasploit400
MS01-023 Microsoft IIS 5.0 Printer Host Header Overflow
CVE-2001-0241—01 mai 2001
Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via
60RISCO
abrir ↗
Metasploit400
NTP Daemon readvar Buffer Overflow
CVE-2001-0414—04 abr 2001
Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial o
60RISCO
abrir ↗
Metasploit600
MS08-068 Microsoft Windows SMB Relay Code Execution
CVE-2008-4037—31 mar 2001
Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 20
50RISCO
abrir ↗
Metasploit300
Windows Gather DynaZIP Saved Password Extraction
CVE-2001-0152—27 mar 2001
The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes password
18RISCO
abrir ↗
Metasploit600
HP OpenView OmniBack II Command Execution
CVE-2001-0311—28 fev 2001
Vulnerability in OmniBackII A.03.50 in HP 11.x and earlier allows attackers to gain unauthorized access to an OmniBack c
43RISCO
abrir ↗
Metasploit300
RealVNC 3.3.7 Client Buffer Overflow
CVE-2001-0167—29 jan 2001
Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute
50RISCO
abrir ↗
Metasploit200
WinVNC Web Server GET Overflow
CVE-2001-0168—29 jan 2001
Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute
60RISCO
abrir ↗
Metasploit400
MS00-094 Microsoft IIS Phone Book Service Overflow
CVE-2000-1089—04 dez 2000
Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Se
60RISCO
abrir ↗
Metasploit300
Cisco Device HTTP Device Manager Access
CVE-2000-0945—26 out 2000
The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands with
60RISCO
abrir ↗
Metasploit300
LPRng use_syslog Remote Format String Vulnerability
CVE-2000-0917—25 set 2000
Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary comman
60RISCO
abrir ↗
Metasploit200
GAMSoft TelSrv 1.5 Username Buffer Overflow
CVE-2000-0665—17 jul 2000
GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username.
50RISCO
abrir ↗
Metasploit300
UoW pop2d Remote File Retrieval Vulnerability
CVE-1999-0920—14 jul 2000
Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD com
50RISCO
abrir ↗
Metasploit500
WU-FTPD SITE EXEC/INDEX Format String Vulnerability
CVE-2000-0573—22 jun 2000
The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remo
60RISCO
abrir ↗
Metasploit600
Microsoft SQL Server Payload Execution
CVE-2000-0402—30 mai 2000
The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in pla
60RISCO
abrir ↗
Metasploit600
Microsoft SQL Server Payload Execution
CVE-2000-1209—30 mai 2000
The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3)
60RISCO
abrir ↗
Metasploit600
Microsoft SQL Server Payload Execution via SQL Injection
CVE-2000-0402—30 mai 2000
The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in pla
60RISCO
abrir ↗
Metasploit600
Microsoft SQL Server Payload Execution via SQL Injection
CVE-2000-1209—30 mai 2000
The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3)
60RISCO
abrir ↗
← anteriorpágina 106 / 116próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.