Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.305exploits catalogados

36.465CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8883Nuclei 4361Metasploit 3493✓ solo verificadosrecientes populares riesgo

77.866 exploits

GitHub PoC

Security analysis and report of CVE-2024-6387 OpenSSH vulnerability, including vulnerability details, CVSS evaluation, and mitigation recommendations.

CVE-2024-6387HIGH23 jul 2026

Openssh: regresshion - race condition in ssh allows rce/dos

63RIESGO

GitHub PoC

Proof-of-concept and offensive security research analyzing CVE-2026-23744 (MCPJam Inspector Unauthenticated RCE, Patched in v1.4.3+).

CVE-2026-23744CRITICAL23 jul 2026

REC in MCPJam inspector due to HTTP Endpoint exposes

75RIESGO

GitHub PoC

CVE Reproduction: cve-2024-4577-phpcgi_rce_reproduction

CVE-2024-4577CRITICALbajo ataqueransomware23 jul 2026

Argument Injection in PHP-CGI

100RIESGO

GitHub PoC★ 318

Certighost POC

CVE-2026-54121HIGH23 jul 2026

Active Directory Certificate Services Elevation of Privilege Vulnerability

41RIESGO

VulnCheck XDB

initial-access

CVE-2026-23744CRITICAL23 jul 2026

REC in MCPJam inspector due to HTTP Endpoint exposes

75RIESGO

VulnCheck XDB

info-leak

CVE-2024-43451MEDIUMbajo ataque23 jul 2026

NTLM Hash Disclosure Spoofing Vulnerability

85RIESGO

GitHub PoC

finding by nvth

CVE-2026-59880HIGH23 jul 2026

Immutable.js: Hash-collision algorithmic complexity denial of service in Immutable.Map/Set

21RIESGO

GitHub PoC

Metabase CVE-2026-59827 Vulnerability Scanner

CVE-2026-59827CRITICAL23 jul 2026

Metabase: Unsafe Deserialization of H2 Query Results

48RIESGO

VulnCheck XDB

initial-access

CVE-2024-0012CRITICALbajo ataqueransomware23 jul 2026

PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)

100RIESGO

GitHub PoC

FernandoCassioDev/CVE-2015-1328

CVE-2015-1328—23 jul 2026

The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does no

50RIESGO

GitHub PoC★ 1

CVE Reproduction: cve-2026-41940-cpanel_authbypass_reproduction

CVE-2026-41940CRITICALbajo ataqueransomware23 jul 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RIESGO

GitHub PoC

CVE Reproduction: cve-2025-2783-chrome_sandbox_escape_reproduction

CVE-2025-2783HIGHbajo ataque23 jul 2026

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allow

71RIESGO

GitHub PoC

CVE Reproduction: cve-2025-55182-react2shell_reproduction

CVE-2025-55182CRITICALbajo ataqueransomware23 jul 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RIESGO

GitHub PoC

theeomega/CVE-2025-32432-POC

CVE-2025-32432CRITICALbajo ataque23 jul 2026

Craft CMS Allows Remote Code Execution

100RIESGO

GitHub PoC

Dynamo2k1/CVE-2026-33017

CVE-2026-33017CRITICALbajo ataque23 jul 2026

Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint

100RIESGO

GitHub PoC

CVE Reproduction: cve-2025-5777-citrixbleed2_reproduction

CVE-2025-5777CRITICALbajo ataqueransomware23 jul 2026

NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread

100RIESGO

GitHub PoC

CVE-2026-66374: Knot Resolver 6.3.0 DNS-over-QUIC heap overflow (RCE)

CVE-2026-66374HIGH23 jul 2026

Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ (DNS-over-QUIC) rece

41RIESGO

GitHub PoC

Tproot es una máquina de nivel Muy Fácil de DockerLabs centrada en la explotación manual del servicio vsftpd 2.3.4 (CVE-2011-2523).

CVE-2011-2523—23 jul 2026

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

60RIESGO

GitHub PoC

Initialized & connected PostgreSQL to Metasploit. Reconnoitered 10.1.16.0/24 with Nmap and imported results. Enumerated hosts/services using SYN, SMB & LDAP scanners. Exploited DC10 via ZeroLogon (CVE-2020-1472), dumped AD NTLM hashes with Impacket, performed Pass-the-Hash, then gained a Meterpreter reverse shell.

CVE-2020-1472MEDIUMbajo ataqueransomware23 jul 2026

Netlogon Elevation of Privilege Vulnerability

100RIESGO

GitHub PoC

CVE Reproduction: cve-2026-0770-langflow_rce_reproduction

CVE-2026-0770CRITICALbajo ataque23 jul 2026

Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 1

CVE-2021-41773 Apache

CVE-2021-41773HIGHbajo ataqueransomware23 jul 2026

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

GitHub PoC

CVE-2026-64600 - Draft - Check todo

CVE-2026-64600HIGH23 jul 2026

xfs: resample the data fork mapping after cycling ILOCK

41RIESGO

GitHub PoC

Legacy HPE iMC vuln

CVE-2019-5392—23 jul 2026

A disclosure of information vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than ve

23RIESGO

GitHub PoC★ 5

soralis0912/CVE-2026-43499-aristotle-apk

CVE-2026-43499HIGH23 jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RIESGO

VulnCheck XDB

initial-access

CVE-2026-63030CRITICALbajo ataque23 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RIESGO

VulnCheck XDB

initial-access

CVE-2025-32432CRITICALbajo ataque23 jul 2026

Craft CMS Allows Remote Code Execution

100RIESGO

VulnCheck XDB

initial-access

CVE-2026-33017CRITICALbajo ataque23 jul 2026

Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint

100RIESGO

GitHub PoC

CVE Reproduction: cve-2026-63030_60137-wordpress_rce_reproduction

CVE-2026-63030CRITICALbajo ataque23 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RIESGO

VulnCheck XDB

initial-access

CVE-2021-41773HIGHbajo ataqueransomware23 jul 2026

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

GitHub PoC★ 11

DavidCarliez/CVE-2026-66804-CrossDevice-LPE

CVE-2026-66804HIGH23 jul 2026

Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

41RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.