Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.056exploits catalogados

35.925CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.640GitHub PoC 14.392VulnCheck XDB 8.755Nuclei 4.333Metasploit 3.478✓ só verificadosrecentes populares risco

24.458 exploits

Exploit-DB✓ VexDay Proof

http commander 4.0 - Directory Traversal

CVE-2003-1166—webappsasp01 nov 2003

Directory traversal vulnerability in (1) Openfile.aspx and (2) Html.aspx in HTTP Commander 4.0 allows remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DATEV Nutzungskontrolle 2.1/2.2 - Unauthorized Access

CVE-2003-1169—localwindows01 nov 2003

DATEV Nutzungskontrolle 2.1 and 2.2 has insecure write permissions for critical registry keys, which allows local users

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Citrix Metaframe XP - Cross-Site Scripting

CVE-2003-1157—remotewindows31 out 2003

Cross-site scripting (XSS) vulnerability in login.asp in Citrix MetaFrame XP Server 1.0 allows remote attackers to injec

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Seyeon FlexWATCH Network Video Server 2.2 - Unauthorized Administrative Access

CVE-2003-1160—remotehardware31 out 2003

FlexWATCH Network video server 132 allows remote attackers to bypass authentication and gain administrative privileges v

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MLdonkey 2.5-4 - Cross-Site Scripting

CVE-2003-1164—remotemultiple31 out 2003

Cross-site scripting (XSS) vulnerability in Mldonkey 2.5-4 allows remote attackers to inject arbitrary web script or HTM

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Tritanium Scripts Tritanium Bulletin Board 1.2.3 - Unauthorized Access

CVE-2003-1162—webappsphp31 out 2003

index.php in Tritanium Bulletin Board 1.2.3 allows remote attackers to read and reply to arbitrary messages by modifying

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BEA WebLogic 6/7/8 - InteractiveQuery.jsp Cross-Site Scripting

CVE-2003-0624—webappsjsp31 out 2003

Cross-site scripting (XSS) vulnerability in InteractiveQuery.jsp for BEA WebLogic 8.1 and earlier allows remote attacker

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Ledscripts LedForums - Multiple HTML Injections

CVE-2003-1197—webappsphp30 out 2003

Cross-site scripting (XSS) vulnerability in index.php for Ledscripts.com LedForums Beta 1 allows remote attackers to inj

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BEA Tuxedo 6/7/8 and WebLogic Enterprise 4/5 - Input Validation

CVE-2003-0621—remotecgi30 out 2003

The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to determine the existence of files ou

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Serious Sam Engine 1.0.5 - Remote Denial of Service

CVE-2003-1143—dosmultiple30 out 2003

Croteam Serious Sam demo test 2 2.1a, Serious Sam: the First Encounter 1.05, and Serious Sam: the Second Encounter 1.05

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

E107 - 'Chatbox.php' Denial of Service

CVE-2003-1191—dosphp29 out 2003

chatbox.php in e107 0.554 and 0.603 allows remote attackers to cause a denial of service (pages fail to load) via HTML i

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Centrinity FirstClass HTTP Server 7.1 - Directory Disclosure

CVE-2003-1173—remotemultiple28 out 2003

Centrinity FirstClass 7.1 allows remote attackers to access sensitive information by appending search to the end of the

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

kpopup 0.9.x - Privileged Command Execution

CVE-2003-1167—locallinux28 out 2003

misc.cpp in KPopup 0.9.1 trusts the PATH variable when executing killall, which allows local users to elevate their priv

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Fastream NetFile 6.0.3.588 - Error Message Cross-Site Scripting

CVE-2003-1151—remotemultiple28 out 2003

Cross-site scripting (XSS) vulnerability in Fastream NETFile Server 6.0.3.588 allows remote attackers to inject arbitrar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

RedHat Apache 2.0.40 - Directory Index Default Configuration Error

CVE-2003-1138—remotelinux27 out 2003

The default configuration of Apache 2.0.40, as shipped with Red Hat Linux 9.0, allows remote attackers to list directory

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Solaris Runtime Linker (SPARC) - 'ld.so.1' Local Buffer Overflow

CVE-2003-0609—localsolaris27 out 2003

Stack-based buffer overflow in the runtime linker, ld.so.1, on Solaris 2.6 through 9 allows local users to gain root pri

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

thttpd 2.2x - 'defang' Remote Buffer Overflow

CVE-2003-0899—remotelinux27 out 2003

Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Musicqueue 0.9/1.0/1.1 - Multiple Buffer Overrun Vulnerabilities

CVE-2003-1140—locallinux27 out 2003

Buffer overflow in Musicqueue 1.2.0 allows local users to execute arbitrary code via a long language variable in the con

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Wireless Tools 26 (IWConfig) - ARGV Local Command Line Buffer Overflow (1)

CVE-2003-0947—locallinux27 out 2003

Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OUT environm

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SH-HTTPD 0.3/0.4 - Character Filtering Remote Information Disclosure

CVE-2003-1137—remotelinux27 out 2003

Charles Steinkuehler sh-httpd 0.3 and 0.4 allows remote attackers to read files or execute arbitrary CGI scripts via a G

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Wireless Tools 26 (IWConfig) - ARGV Local Command Line Buffer Overflow (3)

CVE-2003-0947—locallinux27 out 2003

Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OUT environm

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Les Visiteurs 2.0 - Remote File Inclusion

CVE-2003-1148—webappsphp27 out 2003

Multiple PHP remote file inclusion vulnerabilities in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Musicqueue 1.2 - SIGSEGV Signal Handler Insecure File Creation

CVE-2003-1139—locallinux27 out 2003

Musicqueue 1.2.0 allows local users to overwrite arbitrary files by triggering a segmentation fault and using a symlink

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Symantec Norton Internet Security 2003 6.0.4.34 - Error Message Cross-Site Scripting

CVE-2003-1149—remotecgi27 out 2003

Cross-site scripting (XSS) vulnerability in Symantec Norton Internet Security 2003 6.0.4.34 allows remote attackers to i

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Chi Kien Uong Guestbook 1.51 - Cross-Site Scripting

CVE-2003-1136—webappsphp27 out 2003

Cross-site scripting (XSS) vulnerability in Chi Kien Uong Guestbook 1.51 allows remote attackers to inject arbitrary web

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Yahoo! Messenger 5.6 - File Transfer Buffer Overrun

CVE-2003-1135—doswindows27 out 2003

Buffer overflow in Yahoo! Messenger 5.6 allows remote attackers to cause a denial of service (crash) via a file send req

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

thttpd 2.2x - 'defang' Remote Buffer Overflow (PoC)

CVE-2003-0899—doslinux27 out 2003

Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Sun Microsystems Java Virtual Machine 1.x - Security Manager Denial of Service

CVE-2003-1134—dosmultiple26 out 2003

Sun Java 1.3.1, 1.4.1, and 1.4.2 allows local users to cause a denial of service (JVM crash), possibly by calling the Cl

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows XP/2000 - Messenger Service Buffer Overrun (MS03-043)

CVE-2003-0717—remotewindows25 out 2003

The Messenger Service for Windows NT through Server 2003 does not properly verify the length of the message, which allow

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Apache cocoon 2.14/2.2 - Directory Traversal

CVE-2003-1172—remotemultiple24 out 2003

Directory traversal vulnerability in the view-source sample file in Apache Software Foundation Cocoon 2.1 and 2.2 allows

35RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.