Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.305exploits catalogados

36.465CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8883Nuclei 4361Metasploit 3493✓ solo verificadosrecientes populares riesgo

77.866 exploits

GitHub PoC

CVE-2021-44228 Log4Shell - Apache Log4j2 JNDI Injection RCE

CVE-2021-44228CRITICALbajo ataqueransomware24 jul 2026

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

abrir ↗

GitHub PoC

Security Advisory: Negative Chunk-Size Parsing Causes Memory Corruption in facil.io

CVE-2026-66731HIGH24 jul 2026

facil.io 0.7.5 - 0.7.6 HTTP/1.1 Chunked Transfer Encoding Parser Crash DoS

41RIESGO

abrir ↗

GitHub PoC★ 1

React2Shell is a proof-of-concept exploit for CVE-2025-55182 affecting vulnerable React Server Components (RSC) implementations in Next.js

CVE-2025-55182CRITICALbajo ataqueransomware24 jul 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RIESGO

abrir ↗

GitHub PoC

sbimoxa/cve-2021-43798-lab

CVE-2021-43798HIGHbajo ataque24 jul 2026

Grafana path traversal

100RIESGO

abrir ↗

GitHub PoC

risorse di ricerca per cve-2026-7228

CVE-2026-7228MEDIUM24 jul 2026

SourceCodester Pizzafy Ecommerce System ajax.php get_cart_count sql injection

33RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2026-41940

CVE-2026-41940CRITICALbajo ataqueransomware24 jul 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RIESGO

abrir ↗

GitHub PoC

Linux Kernel 3.13.0 < 3.19 (Ubuntu 12.04/14.04/14.10/15.04) - 'overlayfs' Local Privilege Escalation

CVE-2015-1328—24 jul 2026

The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does no

50RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-63030CRITICALbajo ataque24 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2025-55182CRITICALbajo ataqueransomware24 jul 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2021-44228CRITICALbajo ataqueransomware24 jul 2026

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-60137MEDIUMbajo ataque24 jul 2026

WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query

100RIESGO

abrir ↗

VulnCheck XDB

local

CVE-2015-1328—24 jul 2026

The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does no

50RIESGO

abrir ↗

GitHub PoC★ 1

Discuz! X5.0 Authentication Bypass Exploit Framework (CVE-2026-49952) - Critical vulnerability allowing unauthenticated database backup access via UC_KEY encryption oracle token reuse. CVSS 9.1. Full-featured tool with version detection, multi-payload attacks, interactive shell, and automated exploitation. Authorized testing only.

CVE-2026-49952CRITICAL24 jul 2026

Discuz! X5.0 Authentication Bypass via dbbak.php Encryption Oracle

63RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-63030CRITICALbajo ataque24 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2024-27198CRITICALbajo ataqueransomware24 jul 2026

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2016-10033CRITICALbajo ataque24 jul 2026

The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra para

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-60137MEDIUMbajo ataque24 jul 2026

WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-9198CRITICALbajo ataque24 jul 2026

Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation

98RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-9198CRITICALbajo ataque24 jul 2026

Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation

98RIESGO

abrir ↗

VulnCheck XDB

info-leak

CVE-2021-43798HIGHbajo ataque24 jul 2026

Grafana path traversal

100RIESGO

abrir ↗

GitHub PoC

Security Advisory: Infinite Loop DoS in facil.io MIME Parser (Partial Boundary)

CVE-2026-66730HIGH24 jul 2026

facil.io 0.6.0 - 0.7.6 Infinite Loop DoS via Multipart MIME Body Parser

41RIESGO

abrir ↗

GitHub PoC★ 1

最原始的

CVE-2026-43499HIGH24 jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RIESGO

abrir ↗

GitHub PoC

Giangdurian/CVE-2026-63030-CVE-2026-60137

CVE-2026-63030CRITICALbajo ataque24 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RIESGO

abrir ↗

GitHub PoC★ 1

PoC for CVE-2026-65650 - Elgg avatar upload DoS

CVE-2026-65650MEDIUM24 jul 2026

Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar upload.

33RIESGO

abrir ↗

GitHub PoC

ange-primiterra/CVE-2026-47761

CVE-2026-47761HIGH24 jul 2026

TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` injection

41RIESGO

abrir ↗

GitHub PoC

manfredgabriel/cve-2021-43798-lab

CVE-2021-43798HIGHbajo ataque24 jul 2026

Grafana path traversal

100RIESGO

abrir ↗

GitHub PoC

Reproduction of cve-2024-23897-jenkins_lfi_reproduction

CVE-2024-23897CRITICALbajo ataqueransomware24 jul 2026

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2021-41773 Apache

CVE-2021-41773HIGHbajo ataqueransomware23 jul 2026

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

abrir ↗

GitHub PoC

CVE Reproduction: cve-2025-2783-chrome_sandbox_escape_reproduction

CVE-2025-2783HIGHbajo ataque23 jul 2026

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allow

71RIESGO

abrir ↗

GitHub PoC

FernandoCassioDev/CVE-2015-1328

CVE-2015-1328—23 jul 2026

The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does no

50RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.