Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

71.886exploits catalogados

32.153CVEs con explotación pública

1932probados en laboratorio

Todos Exploit-DB 22.786Referência 19.978GitHub PoC 13.282VulnCheck XDB 8176Nuclei 4202Metasploit 3462✓ solo verificadosrecientes populares riesgo

71.886 exploits

Metasploit600

Xerte Online Toolkits Arbitrary File Upload - Unauthenticated Media Upload

CVE-2026-41459MEDIUM22 abr 2026

Xerte Online Toolkits Path Disclosure via /setup

48RIESGO

abrir ↗

Metasploit600

Xerte Online Toolkits Arbitrary File Upload - Unauthenticated Media Upload

CVE-2026-34415CRITICAL22 abr 2026

Xerte Online Toolkits File Upload RCE via elfinder Connector

63RIESGO

abrir ↗

GitHub PoC

End-to-end simulation of detecting a root-less Android Drop Device (Casper) using Wazuh SIEM to capture Layer 7 attacks like Shellshock (CVE-2014-6271).

CVE-2014-6271CRITICALbajo ataque22 abr 2026

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RIESGO

abrir ↗

GitHub PoC

Security toolkit for CVE-2025-55182 (React2Shell) — scan, detect, correlate, and test React Server Components RCE vulnerability

CVE-2025-55182CRITICALbajo ataqueransomware22 abr 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RIESGO

abrir ↗

GitHub PoC

Cybersecurity lab demonstrating exploitation of CVE-2017-0144 (EternalBlue) using Metasploit against a vulnerable Windows 7 VM, achieving SYSTEM-level access via Meterpreter. Includes full attack chain, post exploitation, and mitigation via MS17-010 patching, tested in an isolated ethical lab environment.

CVE-2017-0144HIGHbajo ataqueransomware22 abr 2026

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RIESGO

abrir ↗

GitHub PoC

CVE-2019-15107 Webmin RCE (unauthenticated) exploit

CVE-2019-15107CRITICALbajo ataqueransomware22 abr 2026

An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera

100RIESGO

abrir ↗

GitHub PoC

jpselva/CVE-2023-4863

CVE-2023-4863HIGHbajo ataque22 abr 2026

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to

93RIESGO

abrir ↗

GitHub PoC

Multi-Stage Attack Modeling and Detection of Log4Shell for CVE-2021-44228

CVE-2021-44228CRITICALbajo ataqueransomware22 abr 2026

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2019-15107CRITICALbajo ataqueransomware22 abr 2026

An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera

100RIESGO

abrir ↗

VulnCheck XDB

info-leak

CVE-2022-1026HIGH22 abr 2026

Kyocera Net View Address Book Exposure

61RIESGO

abrir ↗

GitHub PoC★ 2

Hack The Box - Silentium machine writeup | CVE-2025-58434, CVE-2025-59528, CVE-2025-8110

CVE-2025-58434CRITICAL22 abr 2026

Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover

75RIESGO

abrir ↗

GitHub PoC★ 2

Full exploit for the Android vulnerability Bad Binder found in early Google Pixel phones.

CVE-2019-2215HIGHbajo ataque22 abr 2026

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

100RIESGO

abrir ↗

Exploit-DB

Throttlestop Kernel Driver - Kernel Out-of-Bounds Write Privilege Escalation

CVE-2025-7771HIGH22 abr 2026

Code Execution / Escalation of Privileges in ThrottleStop

41RIESGO

abrir ↗

GitHub PoC

ClaraSto/CVE-2024-1086_Ausarbeitung

CVE-2024-1086HIGHbajo ataqueransomware21 abr 2026

Use-after-free in Linux kernel's netfilter: nf_tables component

76RIESGO

abrir ↗

VulnCheck XDB

local

CVE-2021-3493HIGHbajo ataque20 abr 2026

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o

98RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-33017CRITICALbajo ataque20 abr 2026

Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint

100RIESGO

abrir ↗

GitHub PoC★ 77

Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)

CVE-2023-46604CRITICALbajo ataqueransomware20 abr 2026

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

abrir ↗

GitHub PoC★ 1

Jorrit-VM/CVE-2026-33017

CVE-2026-33017CRITICALbajo ataque20 abr 2026

Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint

100RIESGO

abrir ↗

GitHub PoC

Type Local Privilege Escalation exploit for CVE-2021-3493(Ubuntu Kernel vulnerability) documrnted during TryHackme Lab

CVE-2021-3493HIGHbajo ataque20 abr 2026

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o

98RIESGO

abrir ↗

GitHub PoC

Black-box test whether an LLM chatbot is vulnerable to markdown/HTML exfil (CVE-2025-32711 class). Spins up a sink, sends payloads, renders in headless Chromium, correlates via network.

CVE-2025-32711CRITICAL20 abr 2026

M365 Copilot Information Disclosure Vulnerability

48RIESGO

abrir ↗

GitHub PoC

micheaol/distccd_rce_CVE-2004-2687

CVE-2004-2687—20 abr 2026

distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote at

60RIESGO

abrir ↗

GitHub PoC

The forgot-password endpoint in Flowise returns sensitive information including a valid password reset tempToken without authentication or verification. This enables any attacker to generate a reset token for arbitrary users and directly reset their password, leading to a complete account takeover (ATO).

CVE-2025-58434CRITICAL20 abr 2026

Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover

75RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-34197HIGHbajo ataque20 abr 2026

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2024-3400CRITICALbajo ataqueransomware20 abr 2026

PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2025-2563HIGH20 abr 2026

User Registration & Membership < 4.1.2- Unauthenticated Privilege Escalation

68RIESGO

abrir ↗

GitHub PoC★ 79

Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)

CVE-2026-34197HIGHbajo ataque20 abr 2026

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans

100RIESGO

abrir ↗

VulnCheck XDB

info-leak

CVE-2026-35616CRITICALbajo ataque20 abr 2026

A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated atta

100RIESGO

abrir ↗

Metasploit300

BerriAI LiteLLM Proxy Pre-Auth SQL Injection Scanner

CVE-2026-42208CRITICALbajo ataque20 abr 2026

LiteLLM: SQL injection in Proxy API key verification

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2025-31161

CVE-2025-31161CRITICALbajo ataqueransomware20 abr 2026

CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unle

100RIESGO

abrir ↗

GitHub PoC

Professional vulnerability assessment of a multi-VLAN enterprise network (student21.local). Confirmed Stored XSS on WebGoat (HIGH, 16) via OWASP ZAP fuzzer, absent XSS on Magento via server sanitization, and CVE-2017-0144 EternalBlue on Metasploitable 3 (CRITICAL, 25) via Nessus + Wireshark PCAP validation.

CVE-2017-0144HIGHbajo ataqueransomware20 abr 2026

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.