Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.853exploits catalogados

39.383CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.447Exploit-DB 24.485GitHub PoC 16.269VulnCheck XDB 9651Nuclei 4478Metasploit 3523✓ solo verificadosrecientes populares riesgo

16.269 exploits

GitHub PoC

HTTP/2 attack simulation & defense lab - Slowloris, Rapid Reset (CVE-2023-44487), HPACK Bomb attacks with 5 layered defenses. Built in pure Python with raw sockets and h2 library.

CVE-2023-44487HIGHbajo ataque06 jun 2026

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many

93RIESGO

GitHub PoC

Reproduction and patch verification of CVE-2021-3129 (Laravel Ignition RCE) in Docker. University project, Data Privacy and Security, LUISS.

CVE-2021-3129CRITICALbajo ataqueransomware06 jun 2026

Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra

100RIESGO

GitHub PoC★ 1

horrister/moveit-transfer-cve-2023-34362

CVE-2023-34362CRITICALbajo ataqueransomware06 jun 2026

In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023.

100RIESGO

GitHub PoC★ 1

Hippoo Mobile App for WooCommerce <= 1.9.4 - Unauthenticated Authentication Bypass to Administrator Account Takeover

CVE-2026-10580CRITICAL06 jun 2026

Hippoo Mobile App for WooCommerce <= 1.9.4 - Unauthenticated Authentication Bypass to Administrator Account Takeover via REST API

63RIESGO

GitHub PoC

CVE-2026-20245 - Cisco SD-WAN - Draft

CVE-2026-20245HIGHbajo ataque06 jun 2026

Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability

76RIESGO

GitHub PoC★ 18

0xEhab/FreePBX-CVE-2025-57819-RCE

CVE-2025-57819CRITICALbajo ataque06 jun 2026

FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE

100RIESGO

GitHub PoC

Controlled NGINX HTTP/2 frame injection lab for CVE-2026-42926 patch validation and defensive research

CVE-2026-42926MEDIUM06 jun 2026

NGINX ngx_http_proxy_v2_module vulnerability

33RIESGO

GitHub PoC

Apache ActiveMQ RCE via Jolokia vulnerability analysis and reproduction notes

CVE-2026-34197HIGHbajo ataque06 jun 2026

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans

91RIESGO

GitHub PoC★ 1

CVE-2026-76060 PoC for a ZoneMinder vulnerability leading to RCE

CVE-2026-76060HIGH06 jun 2026

OS Command Injection in PayRange API

41RIESGO

GitHub PoC

Redacted cPanel/WHM authentication bypass analysis and authorized checker

CVE-2026-41940CRITICALbajo ataqueransomware06 jun 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RIESGO

GitHub PoC★ 7

CVE-2025-57819 -> rce

CVE-2025-57819CRITICALbajo ataque06 jun 2026

FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE

100RIESGO

GitHub PoC★ 3

CVE-2026-42588 - Apache ActiveMQ Jolokia 远程代码执行漏洞利用 (RCE Exploit)

CVE-2026-42588HIGH06 jun 2026

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Remote Code Execution via Jolokia addNetworkConnector

41RIESGO

GitHub PoC

t1ckprivate/CVE-2022-0847-Dirty-Pipe

CVE-2022-0847HIGHbajo ataque06 jun 2026

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

GitHub PoC

CVE-2026-23744 Reverse shell

CVE-2026-23744CRITICAL06 jun 2026

REC in MCPJam inspector due to HTTP Endpoint exposes

75RIESGO

GitHub PoC

TechWithOrgito/CVE-2025-55182-Researching-process

CVE-2025-55182CRITICALbajo ataqueransomware06 jun 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RIESGO

GitHub PoC★ 3

Hunt-Benito/mediatek-wlan-heap-overflow-cve-2026-20452-filogic-router-rce

CVE-2026-20452HIGH06 jun 2026

In wlan AP driver, there is a possible memory corruption due to a heap buffer overflow. This could lead to remote (proxi

41RIESGO

GitHub PoC★ 8

CVE-2026-24061 - GNU inetutils-telnetd Auth Bypass Exploit - Full Control with CRLF injection via NEW_ENVIRON leads to auth bypass & instant root shell. Single/Mass exploitation, multi-threading, custom port/user, pipe mode, session keep-alive, colored output, retries, timeout support. Python & Bash versions. Critical CVSS 9.8.

CVE-2026-24061CRITICALbajo ataque06 jun 2026

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment

100RIESGO

GitHub PoC

cve-2026-23744 python exploit

CVE-2026-23744CRITICAL05 jun 2026

REC in MCPJam inspector due to HTTP Endpoint exposes

75RIESGO

GitHub PoC

Popcorn HTB write-up covering advanced directory fuzzing, file upload bypass via magic numbers/extension spoofing using Burp Suite, and privilege escalation via CVE-2010-0832 (PAM MOTD File Tampering).

CVE-2010-0832—05 jun 2026

pam_motd (aka the MOTD module) in libpam-modules before 1.1.0-2ubuntu1.1 in PAM on Ubuntu 9.10 and libpam-modules before

23RIESGO

GitHub PoC★ 1

Modern Events Calendar Lite <= 7.33.0 — Unauthenticated SQL Injection

CVE-2026-11349HIGH05 jun 2026

Modern Events Calendar (Lite & Pro) < 7.34.0 - Unauthenticated SQL Injection via mec_list_load_more

41RIESGO

GitHub PoC

yurahshell/CVE-2026-41940

CVE-2026-41940CRITICALbajo ataqueransomware05 jun 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RIESGO

GitHub PoC

CVE-2026-3300

CVE-2026-3300CRITICAL05 jun 2026

Everest Forms Pro <= 1.9.12 - Unauthenticated Remote Code Execution via Calculation Field

63RIESGO

GitHub PoC

adamshaikhma/CVE-2026-3300

CVE-2026-3300CRITICAL05 jun 2026

Everest Forms Pro <= 1.9.12 - Unauthenticated Remote Code Execution via Calculation Field

63RIESGO

GitHub PoC

seguridadentrerios/CVE-2026-33829

CVE-2026-33829MEDIUM05 jun 2026

Windows Snipping Tool Spoofing Vulnerability

33RIESGO

GitHub PoC

Dependency-free interactive Python exploit for the vsftpd 2.3.4 backdoor (CVE-2011-2523).

CVE-2011-2523—05 jun 2026

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

60RIESGO

GitHub PoC★ 1

CVE-2026-20230 - Cisco Unified CM

CVE-2026-20230HIGHbajo ataque05 jun 2026

Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability

93RIESGO

GitHub PoC★ 21

TheCyberGeek/CVE-2026-4480-PoC

CVE-2026-4480CRITICAL05 jun 2026

Samba: samba: remote code execution in printing subsystem via unescaped job description

68RIESGO

GitHub PoC

This Python proof-of-concept targets a vulnerable MCP (Model Context Protocol) service exposed by the target application. The vulnerability allows an attacker to supply arbitrary server configuration parameters through the /api/mcp/connect endpoint.

CVE-2026-23744CRITICAL05 jun 2026

REC in MCPJam inspector due to HTTP Endpoint exposes

75RIESGO

GitHub PoC

react2shell - CVE-2025-55182 (Next.js: CVE-2025-66478) - Unauthenticated RCE in React Server Components (Flight Protocol) - PoC Exploit

CVE-2025-55182CRITICALbajo ataqueransomware05 jun 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RIESGO

GitHub PoC

Technical writeup and penetration testing report for CVE-2010-2075, demonstrating UnrealIRCd backdoor exploitation and remediation.

CVE-2010-2075—05 jun 2026

UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally

60RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.