Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.137exploits catalogados
35.961CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8.773Nuclei 4.340Metasploit 3.485✓ só verificadosrecentespopularesrisco
24.458 exploits
Exploit-DB✓ VexDay Proof
Sendmail 8.9.x/8.10.x/8.11.x/8.12.x - File Locking Denial of Service (2)
CVE-2002-1827—doslinux24 mai 2002
Sendmail 8.9.0 through 8.12.3 allows local users to cause a denial of service by obtaining an exclusive lock on the (1)
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
OpenBB 1.0 - Unauthorized Moderator Access
CVE-2002-1830—webappsphp24 mai 2002
Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attackers to bypass authentication and access modifier options via
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
LocalWEB2000 2.1.0 Standard - File Disclosure
CVE-2002-0897—remotewindows24 mai 2002
LocalWEB2000 2.1.0 web server allows remote attackers to bypass access restrictions for restricted files via a URL that
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
OpenBB 1.0.0 RC3 - BBCode Cross Agent HTML Injection
CVE-2002-0330—webappsphp24 mai 2002
Cross-site scripting vulnerability in codeparse.php of Open Bulletin Board (OpenBB) 1.0.0 allows remote attackers to exe
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ViewCVS 0.9.2 - Cross-Site Scripting
CVE-2002-0771—webappscgi24 mai 2002
Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 allows remote attackers to inject script and steal c
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft MSN Messenger 1 < 4 - Malformed Invite Request Denial of Service
CVE-2002-1831—doswindows24 mai 2002
Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via an invi
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
OpenBB 1.0.0 RC3 - BBCode Cross Agent HTML Injection
CVE-2002-1829—webappsphp24 mai 2002
Cross-site scripting (XSS) vulnerability in codeparse.php in Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attack
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Cisco CBOS 2.x - Broadband Operating System TCP/IP Stack Denial of Service
CVE-2002-0886—doshardware23 mai 2002
Cisco DSL CPE devices running CBOS 2.4.4 and earlier allows remote attackers to cause a denial of service (hang or memor
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NewAtlanta ServletExec/ISAPI 4.1 - File Disclosure
CVE-2002-0893—remotewindows22 mai 2002
Directory traversal vulnerability in NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to read arbitrary files vi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NewAtlanta ServletExec/ISAPI 4.1 - Full Path Disclosure
CVE-2002-0892—remotewindows22 mai 2002
The default configuration of NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to determine the path of the web r
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NewAtlanta ServletExec/ISAPI 4.1 JSPServlet - Denial of Service
CVE-2002-0894—doswindows22 mai 2002
NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to cause a denial of service (crash) via (1) a request for a lo
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Matu FTP Server 1.13 - Remote Buffer Overflow
CVE-2002-0895—remotewindows22 mai 2002
Buffer overflow in MatuFtpServer 1.1.3.0 (1.1.3) allows remote attackers to cause a denial of service and possibly execu
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Cisco IOS 11.x/12.0 - ICMP Redirect Denial of Service
CVE-2002-2315—doshardware21 mai 2002
Cisco IOS 11.2.x and 12.0.x does not limit the size of its redirect table, which allows remote attackers to cause a deni
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Youngzsoft CMailServer 3.30/4.0 - Remote Buffer Overflow (2)
CVE-2002-0799—remotewindows21 mai 2002
Buffer overflow in YoungZSoft CMailServer 3.30 allows remote attackers to execute arbitrary code via a long USER argumen
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Youngzsoft CMailServer 3.30/4.0 - Remote Buffer Overflow (1)
CVE-2002-0799—remotewindows20 mai 2002
Buffer overflow in YoungZSoft CMailServer 3.30 allows remote attackers to execute arbitrary code via a long USER argumen
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
GNU Mailman 2.0.x - Admin Login Cross-Site Scripting
CVE-2002-0388—webappscgi20 mai 2002
Cross-site scripting vulnerabilities in Mailman before 2.0.11 allow remote attackers to execute script via (1) the admin
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Hosting Controller 1.x - 'Browse.asp' File Disclosure
CVE-2002-0775—webappsasp19 mai 2002
browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
psyBNC 2.3 - Denial of Service
CVE-2002-0741—dosmultiple19 mai 2002
psyBNC 2.3 allows remote attackers to cause a denial of service (CPU consumption and resource exhaustion) by sending a P
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Phorum 3.3.2a - Remote Command Execution
CVE-2002-0764—webappsphp17 mai 2002
Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.php
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Hosting Controller 1.x - DSNManager Directory Traversal
CVE-2002-0772—webappsasp17 mai 2002
Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary fil
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Hosting Controller 1.4 - Import Root Directory Command Execution
CVE-2002-0773—webappsasp17 mai 2002
imp_rootdir.asp for Hosting Controller allows remote attackers to copy or delete arbitrary files and directories via a d
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Grsecurity Kernel Patch 1.9.4 (Linux Kernel) - Memory Protection
CVE-2002-1826—locallinux17 mai 2002
grsecurity 1.9.4 for Linux kernel 2.4.18 allows local users to bypass read-only permissions by using mmap to directly ma
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
SonicWALL SOHO3 6.3 - Content Blocking Script Injection
CVE-2002-2341—remotemultiple17 mai 2002
Cross-site scripting (XSS) vulnerability in content blocking in SonicWALL SOHO3 6.3.0.0 allows remote attackers to injec
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Cisco IDS Device Manager 3.1.1 - Arbitrary File Read Access
CVE-2002-0908—remotehardware17 mai 2002
Directory traversal vulnerability in the web server for Cisco IDS Device Manager before 3.1.2 allows remote attackers to
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5.0.1/6.0 - Content-Disposition Handling File Execution
CVE-2002-0193—remotewindows15 mai 2002
Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposit
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5.0.1/6.0 - Content-Disposition Handling File Execution
CVE-2002-0192—remotewindows15 mai 2002
20RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
id Software Quake II Server 3.20/3.21 - Remote Information Disclosure
CVE-2002-0770—remotemultiple15 mai 2002
Quake 2 (Q2) server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar variables, obtain directory li
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Opera 5.12/6.0 - Frame Location Same Origin Policy Circumvention
CVE-2002-0783—remotewindows15 mai 2002
Opera 6.01, 6.0, and 5.12 allows remote attackers to execute arbitrary JavaScript in the security context of other sites
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Squid 2.4.1 - Remote Buffer Overflow
CVE-2002-0163—remotelinux14 mai 2002
Heap-based buffer overflow in Squid before 2.4 STABLE4, and Squid 2.5 and 2.6 until March 12, 2002 distributions, allows
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NOCC 0.9.x - Webmail Script Injection
CVE-2002-2343—webappsphp14 mai 2002
Cross-site scripting (XSS) vulnerability in NOCC 0.9 through 0.9.5 allows remote attackers to inject arbitrary web scrip
23RISCO
abrir ↗
← anteriorpágina 755 / 816próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.