Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.137exploits catalogados
35.961CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8.773Nuclei 4.340Metasploit 3.485✓ só verificadosrecentespopularesrisco
24.458 exploits
Exploit-DB✓ VexDay Proof
NOCC 0.9.x - Webmail Script Injection
CVE-2002-2343—webappsphp14 mai 2002
Cross-site scripting (XSS) vulnerability in NOCC 0.9 through 0.9.5 allows remote attackers to inject arbitrary web scrip
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Critical Path InJoin Directory Server 4.0 - Cross-Site Scripting
CVE-2002-0787—remotemultiple10 mai 2002
Cross-site scripting vulnerabilities in iCon administrative web server for Critical Path inJoin Directory Server 4.0 all
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WU-IMAPd 2000/2001 - Partial Mailbox Attribute Remote Buffer Overflow (2)
CVE-2002-0379—remotelinux10 mai 2002
Buffer overflow in University of Washington imap server (uw-imapd) imap-2001 (imapd 2001.315) and imap-2001a (imapd 2001
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WU-IMAPd 2000/2001 - Partial Mailbox Attribute Remote Buffer Overflow (1)
CVE-2002-0379—remotelinux10 mai 2002
Buffer overflow in University of Washington imap server (uw-imapd) imap-2001 (imapd 2001.315) and imap-2001a (imapd 2001
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Critical Path InJoin Directory Server 4.0 - File Disclosure
CVE-2002-0786—remotemultiple10 mai 2002
iCon administrative web server for Critical Path inJoin Directory Server 4.0 allows authenticated inJoin administrators
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Cisco ATA-186 - HTTP Device Configuration Disclosure
CVE-2002-0769—remotehardware09 mai 2002
The web-based configuration interface for the Cisco ATA 186 Analog Telephone Adaptor allows remote attackers to bypass a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ISC DHCPD 2.0/3.0.1 - NSUPDATE Remote Format String
CVE-2002-0702—remotebsd08 mai 2002
Format string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.0
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WorldClient 5.0.x - Arbitrary File Deletion
CVE-2002-1741—remotewindows07 mai 2002
Directory traversal vulnerability in WorldClient.cgi in WorldClient for Alt-N Technologies MDaemon 5.0.5.0 and earlier a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MDaemon WorldClient 5.0.x - Folder Creation Buffer Overflow
CVE-2002-1740—remotewindows07 mai 2002
Buffer overflow in WorldClient.cgi in WorldClient in Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users t
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
B2 0.6 - 'b2edit.showposts.php?b2inc' Remote File Inclusion
CVE-2002-0734—webappsphp06 mai 2002
b2edit.showposts.php in B2 2.0.6pre2 and earlier does not properly load the b2config.php file in some configurations, wh
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
askSam 4.0 Web Publisher - Cross-Site Scripting
CVE-2002-1727—webappscgi05 mai 2002
Cross-site scripting vulnerability (XSS) in (1) as_web.exe and (2) as_web4.exe in askSam Web Publisher 1 and 4 allows re
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Outfront Spooky 2.x - Login SQL Query Manipulation Password
CVE-2002-1720—webappsasp02 mai 2002
SQL injection vulnerability in Spooky Login 2.0 through 2.5 allows remote attackers to bypass authentication and gain pr
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
SSH (x2) - Remote Command Execution
CVE-2001-0144—remotemultiple01 mai 2002
CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MyGuestbook 1.0 - Script Injection
CVE-2002-0732—webappscgi30 abr 2002
Cross-site scripting vulnerability in MyGuestbook 1.0 allows remote attackers to execute arbitrary script or inject HTML
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
BEA Systems WebLogic Server and Express 7.0 - Null Character Denial of Service
CVE-2002-0106—doswindows30 abr 2002
BEA Systems Weblogic Server 6.1 allows remote attackers to cause a denial of service via a series of requests to .JSP fi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Blahz-DNS 0.2 - Direct Script Call Authentication Bypass
CVE-2002-0599—webappsphp28 abr 2002
Blahz-DNS 0.2 and earlier allows remote attackers to bypass authentication and modify configuration by directly requesti
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
DNSTools 2.0 - Authentication Bypass
CVE-2002-0613—webappsphp28 abr 2002
dnstools.php for DNSTools 2.0 beta 4 and earlier allows remote attackers to bypass authentication and gain privileges by
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ACME Labs thttpd 2.20 - Cross-Site Scripting
CVE-2002-0733—remotelinux25 abr 2002
Cross-site scripting vulnerability in thttpd 2.20 and earlier allows remote attackers to execute arbitrary script via a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHProjekt 2.x/3.x - Authentication Bypass
CVE-2002-1757—webappsphp25 abr 2002
PHProjekt 2.0 through 3.1 relies on the $PHP_SELF variable for authentication, which allows remote attackers to bypass a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 - Chunked Encoding Transfer Heap Overflow (4)
CVE-2002-0079—remotewindows24 abr 2002
Buffer overflow in the chunked encoding transfer mechanism in Internet Information Server (IIS) 4.0 and 5.0 Active Serve
45RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
CGIScript.net - csMailto Hidden Form Field Remote Command Execution
CVE-2002-0749—remotecgi23 abr 2002
CGIscript.net csMailto.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the form-at
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.x / FreeBSD 4.x / OpenBSD 2.x / Solaris 2.5/2.6/7.0/8 - 'exec C Library' Standard I/O File Descriptor Closure
CVE-2002-0572—localbsd23 abr 2002
FreeBSD 4.5 and earlier, and possibly other BSD-based operating systems, allows local users to write to or read from res
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Matu FTP 1.74 - Client Buffer Overflow
CVE-2002-0608—remotewindows23 abr 2002
Buffer overflow in Matu FTP client 1.74 allows remote FTP servers to execute arbitrary code via a long "220" banner.
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
GNU Screen 3.9.x Braille Module - Local Buffer Overflow
CVE-2002-1602—localunix23 abr 2002
Buffer overflow in the Braille module for GNU screen 3.9.11, when HAVE_BRAILLE is defined, allows local users to execute
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apache Tomcat 4.0/4.1 - Servlet Full Path Disclosure
CVE-2002-2006—remoteunix23 abr 2002
The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the in
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
SLRNPull 0.9.6 - Spool Directory Command Line Parameter Buffer Overflow
CVE-2002-0740—localunix22 abr 2002
Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
psyBNC 2.3 - Oversized Passwords Denial of Service
CVE-2002-0741—dosunix22 abr 2002
psyBNC 2.3 allows remote attackers to cause a denial of service (CPU consumption and resource exhaustion) by sending a P
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Philip Chinery's Guestbook 1.1 - Script Injection
CVE-2002-0730—webappscgi21 abr 2002
Cross-site scripting vulnerability in guestbook.pl for Philip Chinery's Guestbook 1.1 allows remote attackers to execute
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
vqServer 1.9.x - CGI Demo Program Script Injection
CVE-2002-0731—webappscgi21 abr 2002
Cross-site scripting vulnerability in demonstration scripts for vqServer allows remote attackers to execute arbitrary sc
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Jon Howell Faq-O-Matic 2.7 - Cross-Site Scripting
CVE-2002-2011—webappscgi20 abr 2002
Cross-site scripting (XSS) vulnerability in the fom CGI program (fom.cgi) in Faq-O-Matic 2.711 and 2.712 allows remote a
23RISCO
abrir ↗
← anteriorpágina 756 / 816próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.