Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

71.180exploits catalogados

31.691CVEs con explotación pública

0probados en laboratorio

Todos Exploit-DB 22.469Referência 19.841GitHub PoC 13.140VulnCheck XDB 8078Nuclei 4190Metasploit 3462✓ solo verificadosrecientes populares riesgo

13.140 exploits

GitHub PoC★ 10

Safe detection tooling for CVE-2026-31431 "Copy Fail" and CVE-2026-43284 "Dirty Frag" — a local privilege escalation in the Linux kernel's algif_aead module affecting all major distributions since 2017.

CVE-2026-31431HIGHbajo ataque04 may 2026

crypto: algif_aead - Revert to operating out-of-place

100RIESGO

GitHub PoC

LetsDefend SOC336 case study on CVE-2025-21298

CVE-2025-21298CRITICAL04 may 2026

Windows OLE Remote Code Execution Vulnerability

70RIESGO

GitHub PoC

Controlled virtual attack & defense lab — CVE-2011-2523 exploitation, Nmap recon, Nikto scanning, UFW hardening on Metasploitable 2

CVE-2011-2523—04 may 2026

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

60RIESGO

GitHub PoC

kaleth4/CVE-2025-69985

CVE-2025-69985CRITICAL04 may 2026

FUXA 1.2.8 and prior contains an Authentication Bypass vulnerability leading to Remote Code Execution (RCE). The vulnera

48RIESGO

GitHub PoC

kaleth4/CVE-2025-60751

CVE-2025-60751HIGH04 may 2026

GeographicLib 2.5 is vulnerable to Buffer Overflow in GeoConvert DMS::InternalDecode.

41RIESGO

GitHub PoC★ 4

Read-only Bash checker for the Copy Fail Linux kernel vulnerability (CVE-2026-31431)

CVE-2026-31431HIGHbajo ataque04 may 2026

crypto: algif_aead - Revert to operating out-of-place

100RIESGO

GitHub PoC

kaleth4/CVE-2025-47987

CVE-2025-47987HIGH04 may 2026

Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability

41RIESGO

GitHub PoC

Privilege Escalation Vulnerability in PackageKit (TOCTOU Race Condition)

CVE-2026-41651HIGH03 may 2026

PackageKit vulnerable to TOCTOU Race on Transaction Flags leads to arbitrary package installation as root

41RIESGO

GitHub PoC

CVE-2026-31431 merupakan celah keamanan yang terjadi akibat kegagalan dalam proses penyalinan data (copy operation failure). Kerentanan ini muncul ketika sistem tidak melakukan validasi atau penanganan error dengan benar saat melakukan proses copy data dari satu buffer ke buffer lain

CVE-2026-31431HIGHbajo ataque03 may 2026

crypto: algif_aead - Revert to operating out-of-place

100RIESGO

GitHub PoC★ 1

CVE-2020-11022

CVE-2020-11022MEDIUM03 may 2026

jQuery has a potential XSS vulnerability

55RIESGO

GitHub PoC★ 2

Fast, auditable Linux mitigation for CVE-2026-31431 Copy Fail: algif_aead block, verification, and AF_ALG seccomp hardening.

CVE-2026-31431HIGHbajo ataque03 may 2026

crypto: algif_aead - Revert to operating out-of-place

100RIESGO

GitHub PoC

Tracking CVE-2026-31431

CVE-2026-31431HIGHbajo ataque02 may 2026

crypto: algif_aead - Revert to operating out-of-place

100RIESGO

GitHub PoC

IDS/IPS lab for detecting and preventing Apache ActiveMQ RCE (CVE-2023-46604) using GVM, Nmap, Snort, iptables, and UFW.

CVE-2023-46604CRITICALbajo ataqueransomware02 may 2026

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

GitHub PoC★ 1

CVE-2026-41940 Direct Shell Acess

CVE-2026-41940CRITICALbajo ataqueransomware02 may 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RIESGO

GitHub PoC

this is a repo who is facing a escalation issue in their linux system and a news regarding problem of "Dirty pipeline"

CVE-2022-0847HIGHbajo ataque02 may 2026

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

GitHub PoC★ 2

CVE-2016-6210/Openssh 7.2p2 side channel info disclosure POC

CVE-2016-6210MEDIUM02 may 2026

sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static

70RIESGO

GitHub PoC

Log4Shell (CVE-2021-44228)

CVE-2021-44228CRITICALbajo ataqueransomware02 may 2026

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

GitHub PoC

Hunt-Benito/cve-2026-41200-stig-manager-oidc-reflected-xss

CVE-2026-41200HIGH02 may 2026

STIG Manager has reflected XSS vulnerability in the Web App

41RIESGO

GitHub PoC

Proof of concept exploit for CVE-2024-53677 - Apache Struts file upload path traversal vulnerability leading to Remote Code Execution

CVE-2024-53677CRITICAL02 may 2026

Apache Struts: Mixing setters for uploaded files and normal fields can allow bypass file upload checks

70RIESGO

GitHub PoC

Linux Kernel LPE PoC (CVE-2026-31431)

CVE-2026-31431HIGHbajo ataque02 may 2026

crypto: algif_aead - Revert to operating out-of-place

100RIESGO

GitHub PoC

CRAReady SBOM test fixture — Java/Maven app with Log4Shell (CVE-2021-44228), Spring4Shell, Text4Shell, and other critical CVEs

CVE-2021-44228CRITICALbajo ataqueransomware02 may 2026

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

GitHub PoC

SSH posture helper for CVE-2026-31431 (Copy Fail): kernel and algif_aead inventory

CVE-2026-31431HIGHbajo ataque01 may 2026

crypto: algif_aead - Revert to operating out-of-place

100RIESGO

GitHub PoC★ 2

cPanel CVE-2026-41940 nuclear.x86 Security Audit & Cleanup Script

CVE-2026-41940CRITICALbajo ataqueransomware01 may 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RIESGO

GitHub PoC★ 10

cPanel/WHM Authentication Bypass (Zero-Day Vulnerability)

CVE-2026-41940CRITICALbajo ataqueransomware01 may 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RIESGO

GitHub PoC★ 4

Bulk scanner and mass exploitation tool for CVE-2026-41940 on cPanel/WHM, built for automated target validation and high-speed multi-threaded execution.

CVE-2026-41940CRITICALbajo ataqueransomware01 may 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RIESGO

GitHub PoC★ 1

CVE-2025-59528 Proof of Concept

CVE-2025-59528CRITICAL01 may 2026

Flowise has Remote Code Execution vulnerability

85RIESGO

GitHub PoC

simantchaudhari/CVE-2025-24054-PoC

CVE-2025-24054MEDIUMbajo ataque01 may 2026

NTLM Hash Disclosure Spoofing Vulnerability

75RIESGO

GitHub PoC

Exploitation of CVE-2023-44604. Using a Kali Linux VM (attacker) and a Debian 11 server VM (victim)

CVE-2023-46604CRITICALbajo ataqueransomware01 may 2026

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

GitHub PoC★ 20

CVE-2026-31431 (Copy Fail) PoC - Linux kernel page cache corruption via authencesn AF_ALG + splice()

CVE-2026-31431HIGHbajo ataque01 may 2026

crypto: algif_aead - Revert to operating out-of-place

100RIESGO

GitHub PoC

CVE-2026-31431 mitigation (Copy Fail)

CVE-2026-31431HIGHbajo ataque01 may 2026

crypto: algif_aead - Revert to operating out-of-place

100RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.