Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.056exploits catalogados

35.925CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.640GitHub PoC 14.392VulnCheck XDB 8.755Nuclei 4.333Metasploit 3.478✓ só verificadosrecentes populares risco

24.458 exploits

Exploit-DB✓ VexDay Proof

OpenSSL - ASN.1 Parsing

CVE-2002-0659—remotemultiple09 out 2003

The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial o

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows - 'RPC2' Universal / Denial of Service (RPC3) (MS03-039)

CVE-2003-0605—remotewindows09 out 2003

The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and loc

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

OpenSSL ASN.1 < 0.9.6j/0.9.7b - Brute Forcer for Parsing Bugs

CVE-2003-0543—dosmultiple09 out 2003

Integer overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service (crash) via an SSL clie

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

HP-UX 11 CDE DTPrintInfo - Display Environment Variable Buffer Overflow

CVE-2003-0840—doshp-ux08 out 2003

Buffer overflow in dtprintinfo on HP-UX 11.00, and possibly other operating systems, allows local users to gain root pri

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

JBoss 3.0.8/3.2.1 - HSQLDB Remote Command Injection

CVE-2003-0845—remotemultiple06 out 2003

Unknown vulnerability in the HSQLDB component in JBoss 3.2.1 and 3.0.8 on Java 1.4.x platforms, when running in the defa

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SLocate 2.6 - User-Supplied Database Heap Overflow

CVE-2003-0848—locallinux06 out 2003

Heap-based buffer overflow in main.c of slocate 2.6, and possibly other versions, may allow local users to gain privileg

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SuSE Linux Professional 8.2 - SuSEWM Configuration File Insecure Temporary File

CVE-2003-0847—locallinux06 out 2003

SuSEconfig.susewm in the susewm package on SuSE Linux 8.2Pro allows local users to overwrite arbitrary files via a symli

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ProFTPd 1.2.9 rc2 - '.ASCII' File Remote Code Execution (1)

CVE-2003-0831—remotelinux04 out 2003

ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate newline characters when transferring files in ASCII mode, whi

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

EternalMart Mailing List Manager 1.32 - Remote File Inclusion

CVE-2003-1313—webappsphp04 out 2003

Multiple PHP remote file inclusion vulnerabilities in EternalMart Mailing List Manager (EMLM) 1.32 allow remote attacker

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Cisco LEAP - Password Disclosure

CVE-2003-1096—remotehardware03 out 2003

The Cisco LEAP challenge/response authentication mechanism uses passwords in a way that is susceptible to dictionary att

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

WebFS 1.x - 'Pathname' Buffer Overrun

CVE-2003-0833—remotelinux29 set 2003

Stack-based buffer overflow in webfs before 1.20 allows attackers to execute arbitrary code by creating directories that

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

IBM DB2 - Universal Database 7.2 'db2licm' Local Overflow

CVE-2003-0759—locallinux27 set 2003

Buffer overflow in db2licm in IBM DB2 Universal Data Base 7.2 before Fixpak 10a allows local users to gain root privileg

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

GNU CFEngine 2.-2.0.3 - Remote Stack Overflow

CVE-2003-0849—remotebsd27 set 2003

Buffer overflow in net.c for cfengine 2.x before 2.0.8 allows remote attackers to execute arbitrary code via certain pac

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

marbles 1.0.1 - Local Home Environment Variable Buffer Overflow

CVE-2003-0830—locallinux26 set 2003

Buffer overflow in marbles 1.0.2 and earlier allows local users to gain privileges via a long HOME environment variable.

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MPlayer 0.9/1.0 - Streaming ASX Header Parsing Buffer Overrun

CVE-2003-0835—remotelinux25 set 2003

Multiple buffer overflows in asf_http_request of MPlayer before 0.92 allows remote attackers to execute arbitrary code v

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

GNU CFEngine 2.0.x - CFServD Transaction Packet Buffer Overrun (1)

CVE-2003-0849—remotelinux25 set 2003

Buffer overflow in net.c for cfengine 2.x before 2.0.8 allows remote attackers to execute arbitrary code via certain pac

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MPG123 0.59 - Remote File Play Heap Corruption

CVE-2003-0865—remotelinux23 set 2003

Heap-based buffer overflow in readstring of httpget.c for mpg123 0.59r and 0.59s allows remote attackers to execute arbi

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ProFTPd 1.2.7/1.2.8 - '.ASCII' File Transfer Buffer Overrun

CVE-2003-0831—doslinux23 set 2003

ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate newline characters when transferring files in ASCII mode, whi

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

hztty 2.0 (RedHat 9.0) - Local Privilege Escalation

CVE-2003-0783—locallinux21 set 2003

Multiple buffer overflows in hztty 2.0 allow local users to gain root privileges.

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Plug And Play Web Server 1.0 002c - FTP Service Command Handler Buffer Overflow

CVE-2003-1158—doswindows21 set 2003

Multiple buffer overflows in the FTP service in Plug and Play Web Server 1.0002c allow remote attackers to cause a denia

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows - 'RPC DCOM2' Remote (MS03-039)

CVE-2003-0605—remotewindows20 set 2003

The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and loc

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Knox Arkeia Pro 5.1.12 - Backup Remote Code Execution

CVE-2005-0491—remotelinux20 set 2003

Stack-based buffer overflow in Knox Arkeia Server Backup 5.3.x allows remote attackers to execute arbitrary code via a l

50RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

LSH 1.x - Remote Buffer Overflow (1)

CVE-2003-0826—remotelinux19 set 2003

lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2) channel_commands.c, or (3) cli

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Solaris Sadmind - Default Configuration Remote Code Execution

CVE-2003-0722—remotesolaris19 set 2003

The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attack

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

LSH 1.x - Remote Buffer Overflow (2)

CVE-2003-0826—remotelinux19 set 2003

lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2) channel_commands.c, or (3) cli

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

IBM DB2 db2dart - Buffer Overflow

CVE-2003-0758—doslinux18 set 2003

Buffer overflow in db2dart in IBM DB2 Universal Data Base 7.2 before Fixpak 10 allows local users to gain root privilege

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Sendmail 8.12.9 - 'Prescan()' Variant Remote Buffer Overrun

CVE-2003-0681—remotelinux17 set 2003

A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Pine 4.56 - Remote Buffer Overflow

CVE-2003-0720—remotelinux16 set 2003

Buffer overflow in PINE before 4.58 allows remote attackers to execute arbitrary code via a malformed message/external-b

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows - 'RPC DCOM' Long Filename Overflow (MS03-026)

CVE-2003-0352—remotewindows16 set 2003

Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Nokia Electronic Documentation 5.0 - Cross-Site Scripting

CVE-2003-0801—remotewindows15 set 2003

Cross-site scripting (XSS) vulnerability in Nokia Electronic Documentation (NED) 5.0 allows remote attackers to execute

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.