Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

71.062exploits catalogados

31.617CVEs con explotación pública

0probados en laboratorio

Todos Exploit-DB 22.467Referência 19.791GitHub PoC 13.086VulnCheck XDB 8069Nuclei 4187Metasploit 3462✓ solo verificadosrecientes populares riesgo

71.062 exploits

VulnCheck XDB

initial-access

CVE-2025-58034MEDIUMbajo ataque24 jun 2026

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vul

90RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2021-42013CRITICALbajo ataqueransomware24 jun 2026

Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

100RIESGO

abrir ↗

GitHub PoC

CVE-2026-31431 getroot from a Turkish Cryptominer

CVE-2026-31431HIGHbajo ataque24 jun 2026

crypto: algif_aead - Revert to operating out-of-place

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2025-57819CRITICALbajo ataque24 jun 2026

FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE

100RIESGO

abrir ↗

GitHub PoC

CVE-2026-49777, CVE-2026-10735 - Draft

CVE-2026-49777CRITICAL24 jun 2026

WordPress Product Slider Pro for WooCommerce plugin < 3.5.4 - Backdoor vulnerability

63RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2021-22205CRITICALbajo ataqueransomware24 jun 2026

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati

100RIESGO

abrir ↗

GitHub PoC★ 1

Proof of concept for CVE-2026-56111, an out-of-bounds write in the M421 G-code handler of Marlin Firmware

CVE-2026-56111HIGH24 jun 2026

Marlin Firmware 2.1.2.7 Out-of-Bounds Write via M421 G-code Handler

41RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2026-48908

CVE-2026-48908CRITICAL24 jun 2026

Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2

48RIESGO

abrir ↗

GitHub PoC★ 13

Y5neKO/CVE-2026-8461-EXP

CVE-2026-8461HIGH24 jun 2026

Heap out-of-bounds write via odd slice_height in FFmpeg MagicYUV decoder

41RIESGO

abrir ↗

GitHub PoC

Unauthenticated RCE PoC for CVE-2026-48908 SP Page Builder (Joomla) arbitrary file upload and remote code execution exploit with mass scaning support.

CVE-2026-48908CRITICAL24 jun 2026

Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2

48RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2025-55182CRITICALbajo ataqueransomware24 jun 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RIESGO

abrir ↗

GitHub PoC★ 1

Unauthenticated Account Takeover via Weak Password Reset Validation via 'reset_user_id' Parameter | Unauthenticated Privilege Escalation via Weak Password Reset Validation via 'reset_activation_code' Leading to Account Takeover

CVE-2026-12416CRITICAL24 jun 2026

Invoice Generator <= 1.0.0 - Unauthenticated Account Takeover via Weak Password Reset Validation via 'reset_user_id' Parameter

48RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2026-8461 - Draft

CVE-2026-8461HIGH24 jun 2026

Heap out-of-bounds write via odd slice_height in FFmpeg MagicYUV decoder

41RIESGO

abrir ↗

GitHub PoC

CVE-2026-48908 - SP Page Builder Joomla Unauthenticated RCE

CVE-2026-48908CRITICAL24 jun 2026

Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2

48RIESGO

abrir ↗

GitHub PoC

Proof of Concept of CVE-2026-38526 in Krayin CRM <= v2.2.x. Arbitrary File Upload leading to Remote Code Execution

CVE-2026-38526CRITICAL24 jun 2026

An authenticated arbitrary file upload vulnerability in the /admin/tinymce/upload endpoint of Webkul Krayin CRM v2.2.x a

48RIESGO

abrir ↗

GitHub PoC★ 7

anyanything/CVE-2026-8461-PoC

CVE-2026-8461HIGH23 jun 2026

Heap out-of-bounds write via odd slice_height in FFmpeg MagicYUV decoder

41RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2020-11651CRITICALbajo ataque23 jun 2026

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs cla

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2026-11837: local privilege escalation in the ansible.posix authorized_key module via symlink-following chown. Technical writeup; sibling of CVE-2024-9902.

CVE-2026-11837HIGH23 jun 2026

Ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown

41RIESGO

abrir ↗

VulnCheck XDB

local

CVE-2019-2215HIGHbajo ataque23 jun 2026

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

100RIESGO

abrir ↗

GitHub PoC

CVE-2026-40369本地权限提升漏洞exp

CVE-2026-40369HIGH23 jun 2026

Windows Kernel Elevation of Privilege Vulnerability

41RIESGO

abrir ↗

GitHub PoC

Apache Tomcat CGI Servlet RCE (Windows) — Educational PoC

CVE-2019-0232—23 jun 2026

When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0

60RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2021-41773HIGHbajo ataqueransomware23 jun 2026

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

abrir ↗

GitHub PoC★ 2

This repository contains the Proof of Concept (PoC) exploit script for CVE-2026-45156

CVE-2026-45156HIGH23 jun 2026

Nextcloud: Authentication Bypass in ID4me handling via Missing JWT Signature Verification in User OIDC

41RIESGO

abrir ↗

GitHub PoC

mythicaltree/CVE-2019-2215

CVE-2019-2215HIGHbajo ataque23 jun 2026

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

100RIESGO

abrir ↗

GitHub PoC

s1lentf00thold/CVE-2020-11651-Poc

CVE-2020-11651CRITICALbajo ataque23 jun 2026

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs cla

100RIESGO

abrir ↗

GitHub PoC

eliHiHo/portfolio-drupal-cve-2026-9082

CVE-2026-9082CRITICALbajo ataque23 jun 2026

Drupal core - Highly critical - SQL injection - SA-CORE-2026-004

100RIESGO

abrir ↗

GitHub PoC

Public advisory for CVE-2026-39253, addressing an insecure deserialisation in Pivotal CRM 6.6.04.08 allowing remote code execution via unsafe BinaryFormatter usage in Smart Client and PBS components. Includes vulnerability details, affected versions, and remediation guidance.

CVE-2026-39253HIGH23 jun 2026

An issue in Pivotal CRM v.6.6.04.08 allows a remote attacker to execute arbitrary code via the Pivotal.Core.Common.dll a

41RIESGO

abrir ↗

GitHub PoC

fuchiuebusi-lab/nginx-ui-CVE-2026-42221-CVE-2026-42238-

CVE-2026-42221HIGH23 jun 2026

nginx-ui: Unauthenticated First-Run Installer Allows Remote Initial Admin Claim

41RIESGO

abrir ↗

GitHub PoC★ 3

Proof of Concept (PoC) for the TP-Link DHCP Option 66 Unauthenticated RCE (CVE-2026-11834)

CVE-2026-11834HIGH23 jun 2026

Unauthenticated Command Injection via DHCP Option Handling in Multiple TP-Link Routers

41RIESGO

abrir ↗

GitHub PoC★ 1

A minimal PoC for CVE-2026-21018, demonstrating how it works

CVE-2026-21018MEDIUM23 jun 2026

Out-of-bounds write in SveService prior to SMR May-2026 Release 1 allows local privileged attackers to execute arbitrary

33RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.