Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.853exploits catalogados

39.383CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.447Exploit-DB 24.485GitHub PoC 16.269VulnCheck XDB 9651Nuclei 4478Metasploit 3523✓ solo verificadosrecientes populares riesgo

16.269 exploits

GitHub PoC

PoC educacional do CVE-2021-4034, o PwnKit, LPE via pkexec do polkit. Uso autorizado apenas.

CVE-2021-4034HIGHbajo ataqueransomware13 jun 2026

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

GitHub PoC

J1nKsC/CVE-2024-4367_test

CVE-2024-4367MEDIUM13 jun 2026

A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js c

55RIESGO

abrir ↗

GitHub PoC★ 1

HTTP/2 Bomb: HPACK indexed-reference amplification + flow-control stall. A high school student's full protocol analysis (LaTeX). CVE-2026-49975, CVE-2026-47774.

CVE-2026-49975HIGH13 jun 2026

Apache HTTP Server: mod_http2 denial of service

41RIESGO

abrir ↗

GitHub PoC★ 3

HTTP/2 Bomb (CVE-2026-49975) non-destructive vulnerability detector for Nginx / Apache httpd. Zero-dependency Python.

CVE-2026-49975HIGH13 jun 2026

Apache HTTP Server: mod_http2 denial of service

41RIESGO

abrir ↗

GitHub PoC

Technical writeup and Proof of Concept (PoC) for CVE-2026-11417: OS Command Injection / Remote Code Execution (RCE) in AWS CDK's NodejsFunction.

CVE-2026-11417HIGH13 jun 2026

OS Command Injection in NodejsFunction Bundling in aws-cdk-lib

41RIESGO

abrir ↗

GitHub PoC

AISec Plus Week 1 threat write-up — EchoLeak (CVE-2025-32711), zero-click indirect prompt injection in Microsoft 365 Copilot.

CVE-2025-32711CRITICAL13 jun 2026

M365 Copilot Information Disclosure Vulnerability

48RIESGO

abrir ↗

GitHub PoC★ 1

(phpBB authentication bypass)

CVE-2026-48611CRITICAL13 jun 2026

Improper authentication checks in the OAuth implementation allow account hijacking even when OAuth is not configured or

63RIESGO

abrir ↗

GitHub PoC★ 2

razureink/cve-2026-49975-http2bomb_reproduction

CVE-2026-49975HIGH13 jun 2026

Apache HTTP Server: mod_http2 denial of service

41RIESGO

abrir ↗

GitHub PoC

CyruxSec/CVE-2026-4524

CVE-2026-4524MEDIUM13 jun 2026

Authentication Bypass Using an Alternate Path or Channel in GitLab

33RIESGO

abrir ↗

GitHub PoC

A lightweight stdio-based MCP server for local file system operations — read, write, edit, search, exec for AI assistants. Specially optimized for Chatbox: bat-bypass for exec (CVE-2026-6130), b64 encoding to eliminate escaping issues, and multi-pattern regex for precise code block targeting.

CVE-2026-6130MEDIUM13 jun 2026

chatboxai chatbox Model Context Protocol Server Management System ipc-stdio-transport.ts StdioClientTransport os command injection

33RIESGO

abrir ↗

GitHub PoC

Remote Code Execution in DbGate via functionName injection in the loadReader endpoint — CVSS 8.8

CVE-2026-48017HIGH13 jun 2026

DbGate: Remote Code Execution via functionName injection in loadReader endpoint

41RIESGO

abrir ↗

GitHub PoC

CVE-2026-0273 - Draft

CVE-2026-0273MEDIUM12 jun 2026

PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI

33RIESGO

abrir ↗

GitHub PoC★ 3

CVE-2026-25089

CVE-2026-25089CRITICALbajo ataque12 jun 2026

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet F

100RIESGO

abrir ↗

GitHub PoC

Advanced Custom Fields: Extended <= 0.9.2.5 - Unauthenticated Privilege Escalation via Validation Bypass to '_acf_post_id' Parameter

CVE-2026-8809CRITICAL12 jun 2026

Advanced Custom Fields: Extended <= 0.9.2.5 - Unauthenticated Privilege Escalation via Validation Bypass to '_acf_post_id' Parameter

48RIESGO

abrir ↗

GitHub PoC★ 4

CVE-2026-35273

CVE-2026-35273CRITICALbajo ataqueransomware12 jun 2026

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mana

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2026-50751 — Check Point IKEv1 Authentication Bypass

CVE-2026-50751CRITICALbajo ataqueransomware12 jun 2026

User Authentication Bypass in VPN Remote Access and Mobile Access

100RIESGO

abrir ↗

GitHub PoC★ 2

CVE-2026-35273

CVE-2026-35273CRITICALbajo ataqueransomware12 jun 2026

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mana

100RIESGO

abrir ↗

GitHub PoC

Chains CVE-2025-57819 (stacked query SQL injection) and CVE-2025-61678 (authenticated file upload in FreePBX Endpoint Manager) to achieve Remote Code Execution (RCE). For educational use only.

CVE-2025-57819CRITICALbajo ataque12 jun 2026

FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE

100RIESGO

abrir ↗

GitHub PoC★ 3

CVE-2026-48907

CVE-2026-48907CRITICALbajo ataque12 jun 2026

Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5

98RIESGO

abrir ↗

GitHub PoC★ 4

Toolkit for CVE-2025-55182, also known as React2Shell.

CVE-2025-55182CRITICALbajo ataqueransomware12 jun 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RIESGO

abrir ↗

GitHub PoC

rootdirective-sec/CVE-2026-46645-Analysis-Lab

CVE-2026-46645MEDIUM12 jun 2026

SQLAdmin: Authorization Bypass on `ajax_lookup`

33RIESGO

abrir ↗

GitHub PoC★ 13

watchtowrlabs/watchTowr-vs-Splunk-CVE-2026-20253

CVE-2026-20253CRITICALbajo ataque12 jun 2026

Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise

100RIESGO

abrir ↗

GitHub PoC

CVE-2026-49777 - ShapedPlugin Product Slider Pro for WooCommerce Backdoor RCE

CVE-2026-49777CRITICAL12 jun 2026

WordPress Product Slider Pro for WooCommerce plugin < 3.5.4 - Backdoor vulnerability

63RIESGO

abrir ↗

GitHub PoC★ 11

An offensive security researcher + an AI vs. a fresh n-day: building the first public PoC for CVE-2026-53435 in one Friday night. Raw 8h20m log inside.

CVE-2026-53435HIGH12 jun 2026

In Jenkins 2.567 and earlier, LTS 2.555.2 and earlier, it is possible for attackers to have Jenkins deserialize arbitrar

41RIESGO

abrir ↗

GitHub PoC

cardosource/cve-2026-3180

CVE-2026-3180HIGH12 jun 2026

Contest Gallery <= 28.1.4 - Unauthenticated SQL Injection

41RIESGO

abrir ↗

GitHub PoC★ 1

FOSSBilling CVE-2026-53647 & CVE-2026-53646 PoC — Unauthenticated API key disclosure & password reset token reuse

CVE-2026-53647MEDIUM12 jun 2026

FOSSBilling vulnerable to unauthenticated API key configuration disclosure via guest Serviceapikey get_info endpoint

33RIESGO

abrir ↗

GitHub PoC

Cisco Unified Communications Manager (Unified CM) deployments affected by CVE-2026-20230.

CVE-2026-20230HIGHbajo ataque12 jun 2026

Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability

93RIESGO

abrir ↗

GitHub PoC★ 1

Safely detect whether a SolarWinds Serv-U host is vulnerable to CVE-2026-28318

CVE-2026-28318HIGHbajo ataque12 jun 2026

SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability

71RIESGO

abrir ↗

GitHub PoC

This project simulates a real-world attack-and-defend scenario across two virtual machines. You will exploit a critical pre-authentication RCE vulnerability (CVE-2025-32433) in an Erlang/OTP SSH server, crack extracted password hashes, and then harden the victim machine with firewall rules and patching.

CVE-2025-32433CRITICALbajo ataque12 jun 2026

Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

100RIESGO

abrir ↗

GitHub PoC

CVE-2026-5027 - Draft

CVE-2026-5027HIGH11 jun 2026

Langflow - Path Traversal Arbitrary File Write via upload_user_file

56RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.