Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.305exploits catalogados

36.465CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8883Nuclei 4361Metasploit 3493✓ solo verificadosrecientes populares riesgo

77.866 exploits

VulnCheck XDB

initial-access

CVE-2026-63030CRITICALbajo ataque19 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-63030CRITICALbajo ataque19 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-63030CRITICALbajo ataque19 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-63030CRITICALbajo ataque19 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RIESGO

abrir ↗

VulnCheck XDB

info-leak

CVE-2026-63030CRITICALbajo ataque19 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RIESGO

abrir ↗

GitHub PoC★ 1

Unauthenticated Remote Code Execution (RCE) vulnerability in the JCE (Joomla Content Editor) extension for Joomla

CVE-2026-48907CRITICALbajo ataque19 jul 2026

Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5

100RIESGO

abrir ↗

GitHub PoC

Security vulnerability research writeups. CVE-2026-50402: Windows NTFS Elevation of Privilege (CVSS 7.8)

CVE-2026-50402HIGH19 jul 2026

NTFS Elevation of Privilege Vulnerability

41RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-60137MEDIUMbajo ataque19 jul 2026

WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-60137MEDIUMbajo ataque19 jul 2026

WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-63030CRITICALbajo ataque19 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-63030CRITICALbajo ataque19 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-63030CRITICALbajo ataque19 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RIESGO

abrir ↗

GitHub PoC★ 17

Yellowkey bitlocker CVE-2026-45585 provides an open-source utility manager to extract, backup, and organize BitLocker recovery keys on Windows drives. Automate volume decryption logs, manage drive encryption states via command-line tools, and export secure configuration files directly to GitHub.

CVE-2026-45585MEDIUM19 jul 2026

Windows BitLocker Security Feature Bypass Vulnerability

33RIESGO

abrir ↗

GitHub PoC

CVE-2026-43499-cloudflare-gate签名授权计算

CVE-2026-43499HIGH19 jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RIESGO

abrir ↗

GitHub PoC

Validation target: minimal WordPress core slice reproducing the wp2shell (CVE-2026-63030 + CVE-2026-60137) REST-to-SQLi chain

CVE-2026-63030CRITICALbajo ataque19 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RIESGO

abrir ↗

GitHub PoC

The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.

CVE-2026-56290CRITICAL19 jul 2026

Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0

85RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-60137MEDIUMbajo ataque19 jul 2026

WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query

100RIESGO

abrir ↗

GitHub PoC★ 5

CVE-2026-46215 DRM GEM UAF Exploit for Linux 7.0 - The first working PoC for linux kernel 7 use after free- by Antonius (sw0rdm4n, w1sdom, ev1lut10n)

CVE-2026-46215HIGH19 jul 2026

drm: Set old handle to NULL before prime swap in change_handle

41RIESGO

abrir ↗

GitHub PoC

0xh7ml/CVE-2026-63030

CVE-2026-63030CRITICALbajo ataque19 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RIESGO

abrir ↗

GitHub PoC

Exploit POC for Wp2Shell, CVE-2026-63030 + CVE-2026-63137

CVE-2026-63030CRITICALbajo ataque19 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RIESGO

abrir ↗

GitHub PoC★ 8

CVE-2026-63030 / CVE-2026-60137 - WordPress pre-auth RCE scanner

CVE-2026-63030CRITICALbajo ataque19 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RIESGO

abrir ↗

GitHub PoC

Defensive Windows security application providing compensating controls for CVE-2017-0144 (EternalBlue/MS17-010) through SMB monitoring, attack detection, automated firewall response, configuration auditing, and security reporting for legacy and unsupported systems.

CVE-2017-0144HIGHbajo ataqueransomware19 jul 2026

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-33017CRITICALbajo ataque19 jul 2026

Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-60137MEDIUMbajo ataque19 jul 2026

WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query

100RIESGO

abrir ↗

GitHub PoC

Non-intrusive exposure checker for the WordPress wp2shell pre-auth RCE chain (CVE-2026-63030 / CVE-2026-60137).

CVE-2026-63030CRITICALbajo ataque19 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RIESGO

abrir ↗

VulnCheck XDB

local

CVE-2019-2215HIGHbajo ataque19 jul 2026

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

98RIESGO

abrir ↗

GitHub PoC

This tool was created solely for educational purposes, not for criminal activities or anything of the sort. Do not misuse this tool. Good luck trying it out.

CVE-2026-3891CRITICAL19 jul 2026

Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload

68RIESGO

abrir ↗

GitHub PoC★ 2

CVE-2026-63030 / wp2shell

CVE-2026-63030CRITICALbajo ataque19 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RIESGO

abrir ↗

GitHub PoC

Het-Kalariya/CVE-2026-20253

CVE-2026-20253CRITICALbajo ataque18 jul 2026

Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise

100RIESGO

abrir ↗

GitHub PoC★ 12

WordPress 未授权RCE EXP | CVE-2026-63030

CVE-2026-63030CRITICALbajo ataque18 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.