Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.056exploits catalogados

35.925CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.640GitHub PoC 14.392VulnCheck XDB 8.755Nuclei 4.333Metasploit 3.478✓ só verificadosrecentes populares risco

24.458 exploits

Exploit-DB✓ VexDay Proof

Adobe Acrobat Reader (UNIX) 5.0 6 / Xpdf 0.9x Hyperlinks - Arbitrary Command Execution

CVE-2003-0434—remotelinux13 jun 2003

Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary comma

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Winmail Mail Server 2.3 Build 0402 - Remote Format String

CVE-2003-0391—remotewindows11 jun 2003

Format string vulnerability in Magic WinMail Server 2.3, and possibly other 2.x versions, allows remote attackers to cau

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

mnoGoSearch 3.1.20 - Remote Command Execution

CVE-2003-0437—remotelinux10 jun 2003

Buffer overflow in search.cgi for mnoGoSearch 3.2.10 allows remote attackers to execute arbitrary code via a long tmplt

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Atftpd 0.6 - 'atftpdx.c' Remote Command Execution

CVE-2003-0380—remotelinux10 jun 2003

Buffer overflow in atftp daemon (atftpd) 0.6.1 and earlier, and possibly later versions, allows remote attackers to caus

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MNOGoSearch 3.1.20 - 'search.cgi?UL' Remote Buffer Overflow (1)

CVE-2003-0436—remotecgi10 jun 2003

Buffer overflow in search.cgi for mnoGoSearch 3.1.20 allows remote attackers to execute arbitrary code via a long ul par

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MNOGoSearch 3.1.20 - 'search.cgi?UL' Remote Buffer Overflow (2)

CVE-2003-0436—remotecgi10 jun 2003

Buffer overflow in search.cgi for mnoGoSearch 3.1.20 allows remote attackers to execute arbitrary code via a long ul par

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Apache 2.0.45 - 'APR' Crash

CVE-2003-0245—doslinux08 jun 2003

Vulnerability in the apr_psprintf function in the Apache Portable Runtime (APR) library for Apache 2.0.37 through 2.0.45

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer - Object Tag (MS03-020)

CVE-2003-0344—remotewindows07 jun 2003

Buffer overflow in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code via

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Maxwebportal 1.30 - Remote Database Disclosure

CVE-2003-1213—webappsasp06 jun 2003

The default installation of MaxWebPortal 1.30 stores the portal database under the web document root with insecure acces

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Xaos 3.0 - Language Option Local Buffer Overflow

CVE-2003-0385—locallinux06 jun 2003

Buffer overflow in xaos 3.0-23 and earlier, when running setuid, allows local users to gain root privileges via a long -

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Sun JRE/SDK 1.x - Untrusted Applet Java Security Model Violation

CVE-2003-1123—localmultiple05 jun 2003

Sun Java Runtime Environment (JRE) and SDK 1.4.0_01 and earlier allows untrusted applets to access certain information w

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 5 - OBJECT Tag Buffer Overflow

CVE-2003-0344—remotewindows04 jun 2003

Buffer overflow in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code via

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

kon2 - Local Buffer Overflow (2)

CVE-2002-1155—locallinux03 jun 2003

Buffer overflow in KON kon2 0.3.9b and earlier allows local users to execute arbitrary code via a long -Coding command l

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

kon2 - Local Buffer Overflow (1)

CVE-2002-1155—locallinux03 jun 2003

Buffer overflow in KON kon2 0.3.9b and earlier allows local users to execute arbitrary code via a long -Coding command l

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Pi3Web 2.0.2 - SortName Buffer Overflow

CVE-2003-1032—doswindows02 jun 2003

Pi3Web web server 2.0.2 Beta 1, when the Directory Index is configured to use the "Name" column and sort using the colum

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows - WebDAV Remote Code Execution (2)

CVE-2003-0109—remotewindows01 jun 2003

Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Wind

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

IBM AIX 4.3.x/5.1 - 'LSMCODE' Environment Variable Local Buffer Overflow

CVE-2002-0747—localaix01 jun 2003

Buffer overflow in lsmcode in AIX 4.3.3.

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

WebCortex WebStores2000 - SQL Injection

CVE-2004-0304—webappsasp31 mai 2003

SQL injection vulnerability in browse_items.asp in WebCortex WebStores 2000 6.0 allows remote attackers to gain unauthor

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft IIS 5.0 < 5.1 - Remote Denial of Service

CVE-2003-0226—doswindows31 mai 2003

Microsoft Internet Information Services (IIS) 5.0 and 5.1 allows remote attackers to cause a denial of service via a lon

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP 4.x - Transparent Session ID Cross-Site Scripting

CVE-2003-0442—remotephp30 mai 2003

Cross-site scripting (XSS) vulnerability in the transparent SID support capability for PHP before 4.3.2 (session.use_tra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

GNU Make For IBM AIX 4.3.3 - CC Path Local Buffer Overflow

CVE-2004-2312—localaix30 mai 2003

Buffer overflow in GNU make for IBM AIX 4.3.3, when installed setgid, allows local users to gain privileges via a long C

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

AIX 4.3.3/5.x - Getlvcb Command Line Argument Buffer Overflow (1)

CVE-2004-0544—localaix30 mai 2003

Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the (1) putlvcb or (2) get

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

AIX 4.3.3/5.1 - Invscoutd Symbolic Link

CVE-2004-2697—localaix29 mai 2003

The Inventory Scout daemon (invscoutd) 1.3.0.0 and 2.0.2 for AIX 4.3.3 and 5.1 allows local users to gain privileges via

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft IIS 5.0 - WebDAV PROPFIND / SEARCH Method Denial of Service

CVE-2003-0226—doswindows28 mai 2003

Microsoft Internet Information Services (IIS) 5.0 and 5.1 allows remote attackers to cause a denial of service via a lon

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Bandmin 1.4 - Cross-Site Scripting

CVE-2003-0416—webappscgi28 mai 2003

Cross-site scripting (XSS) vulnerability in index.cgi for Bandmin 1.4 allows remote attackers to insert arbitrary HTML o

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Axis Network Camera 2.x - HTTP Authentication Bypass

CVE-2003-0240—remotehardware27 mai 2003

The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass acces

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Upclient 5.0 b7 - Command Line Argument Buffer Overflow

CVE-2003-0408—localfreebsd27 mai 2003

Buffer overflow in Uptime Client (UpClient) 5.0b7, and possibly other versions, allows local users to gain privileges vi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Sun ONE Application Server 7.0 - Source Disclosure

CVE-2003-0411—remotewindows27 mai 2003

Sun ONE Application Server 7.0 for Windows 2000/XP allows remote attackers to obtain JSP source code via a request that

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Sun ONE Application Server 7.0 - Error Message Cross-Site Scripting

CVE-2003-0413—remotewindows27 mai 2003

Cross-site scripting (XSS) vulnerability in the webapps-simple sample application for (1) Sun ONE Application Server 7.0

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Batalla Naval 1.0 4 - Remote Buffer Overflow (2)

CVE-2003-0407—remotelinux26 mai 2003

Buffer overflow in gbnserver for Gnome Batalla Naval 1.0.4 allows remote attackers to execute arbitrary code via a long

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.