Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

71.114exploits catalogados
31.649CVEs con explotación pública
0probados en laboratorio
8069 exploits
VulnCheck XDB
initial-access
CVE-2025-64155CRITICAL13 ene 2026
An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet
60RIESGO
abrir
VulnCheck XDB
initial-access
CVE-2024-0692HIGH13 ene 2026
SolarWinds Security Event Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability
78RIESGO
abrir
VulnCheck XDB
initial-access
CVE-2023-4220HIGH13 ene 2026
Chamilo LMS Unauthenticated Big Upload File Remote Code Execution
78RIESGO
abrir
VulnCheck XDB
info-leak
CVE-2025-14847HIGHbajo ataque13 ene 2026
Zlib compressed protocol header length confusion may allow memory read
100RIESGO
abrir
VulnCheck XDB
info-leak
CVE-2025-14847HIGHbajo ataque12 ene 2026
Zlib compressed protocol header length confusion may allow memory read
100RIESGO
abrir
VulnCheck XDB
initial-access
CVE-2025-11953CRITICALbajo ataque12 ene 2026
Command injection in React Native Community CLI allows remote attackers to perform remote code execution by sending HTTP requests
90RIESGO
abrir
VulnCheck XDB
initial-access
CVE-2009-226512 ene 2026
Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable fil
60RIESGO
abrir
VulnCheck XDB
info-leak
CVE-2025-14847HIGHbajo ataque11 ene 2026
Zlib compressed protocol header length confusion may allow memory read
100RIESGO
abrir
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALbajo ataqueransomware11 ene 2026
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
VulnCheck XDB
remote-with-credentials
CVE-2025-52691CRITICALbajo ataqueransomware11 ene 2026
Upload Arbitrary Files
100RIESGO
abrir
VulnCheck XDB
initial-access
CVE-2025-31161CRITICALbajo ataqueransomware11 ene 2026
CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unle
100RIESGO
abrir
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALbajo ataqueransomware10 ene 2026
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
VulnCheck XDB
initial-access
CVE-2025-24893CRITICALbajo ataque09 ene 2026
Remote code execution as guest via SolrSearchMacros request in xwiki
100RIESGO
abrir
VulnCheck XDB
info-leak
CVE-2025-14847HIGHbajo ataque09 ene 2026
Zlib compressed protocol header length confusion may allow memory read
100RIESGO
abrir
VulnCheck XDB
remote-with-credentials
CVE-2023-23397CRITICALbajo ataque09 ene 2026
Microsoft Outlook Elevation of Privilege Vulnerability
100RIESGO
abrir
VulnCheck XDB
info-leak
CVE-2025-14847HIGHbajo ataque08 ene 2026
Zlib compressed protocol header length confusion may allow memory read
100RIESGO
abrir
VulnCheck XDB
remote-with-credentials
CVE-2025-54068CRITICALbajo ataque08 ene 2026
Livewire vulnerable to remote command execution during property update hydration
100RIESGO
abrir
VulnCheck XDB
initial-access
CVE-2025-52691CRITICALbajo ataqueransomware08 ene 2026
Upload Arbitrary Files
100RIESGO
abrir
VulnCheck XDB
local
CVE-2022-0847HIGHbajo ataque07 ene 2026
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RIESGO
abrir
VulnCheck XDB
remote-with-credentials
CVE-2025-68613CRITICALbajo ataque07 ene 2026
n8n Vulnerable to Remote Code Execution via Expression Injection
100RIESGO
abrir
VulnCheck XDB
info-leak
CVE-2025-14847HIGHbajo ataque07 ene 2026
Zlib compressed protocol header length confusion may allow memory read
100RIESGO
abrir
VulnCheck XDB
initial-access
CVE-2026-21858CRITICAL07 ene 2026
n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling
85RIESGO
abrir
VulnCheck XDB
local
CVE-2025-32463CRITICALbajo ataque07 ene 2026
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RIESGO
abrir
VulnCheck XDB
initial-access
CVE-2018-2628CRITICALbajo ataque07 ene 2026
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S
100RIESGO
abrir
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALbajo ataqueransomware06 ene 2026
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
VulnCheck XDB
info-leak
CVE-2025-14847HIGHbajo ataque06 ene 2026
Zlib compressed protocol header length confusion may allow memory read
100RIESGO
abrir
VulnCheck XDB
initial-access
CVE-2025-37164CRITICALbajo ataque06 ene 2026
A remote code execution issue exists in HPE OneView.
100RIESGO
abrir
VulnCheck XDB
initial-access
CVE-2023-42793CRITICALbajo ataqueransomware06 ene 2026
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
100RIESGO
abrir
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALbajo ataqueransomware06 ene 2026
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALbajo ataqueransomware06 ene 2026
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.