Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

84.002exploits catalogados

39.526CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.557Exploit-DB 24.485GitHub PoC 16.307VulnCheck XDB 9651Nuclei 4478Metasploit 3524✓ solo verificadosrecientes populares riesgo

16.307 exploits

GitHub PoC

The ACCSvc service creates a Named Pipe with a weak Security Descriptor that allows any authenticated user to connect and send messages. When a specially crafted message (message type 0x03) is sent to the pipe, the service crashes with exit code 1067 (ERROR_PROCESS_ABORTED).

CVE-2026-9490MEDIUM30 may 2026

Acer Care Center creates a Named Pipe with a weak Security Descriptor

33RIESGO

GitHub PoC

HAERIN-L/POC_CVE-2026-46716

CVE-2026-46716CRITICAL30 may 2026

Nezha Monitoring: RoleMember can run shell on every server (cross-tenant RCE) via POST /api/v1/cron

48RIESGO

GitHub PoC

jomjosh17/Log4Shell-CVE-2021-44228-

CVE-2021-44228CRITICALbajo ataqueransomware30 may 2026

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

GitHub PoC★ 7

CVE-2025-38352 kernel exploit for LG webOS Smart TVs (ARM64). Achieves persistent root on real consumer hardware with novel exploitation techniques. Responsibly disclosed to LG.

CVE-2025-38352HIGHbajo ataque30 may 2026

posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()

71RIESGO

GitHub PoC

CVE-2025-10162 Exploit

CVE-2025-10162HIGH30 may 2026

OrderConvo <= 15.1 - Unauthenticated Arbitrary File Read

56RIESGO

GitHub PoC

Auditoría de seguridad y análisis de vulnerabilidades (CVE-2014-3566 y CVE-2010-2333) en la infraestructura de red local y router residencial.

CVE-2010-2333—30 may 2026

LiteSpeed Technologies LiteSpeed Web Server 4.0.x before 4.0.15 allows remote attackers to read the source code of scrip

50RIESGO

GitHub PoC

YAMCS yamcs-core < 5.12.7 lacks rate limiting on POST /auth/token. An unauthenticated attacker can perform unlimited brute-force attempts against any account. Never returns HTTP 429. Fixed in 5.12.7.

CVE-2026-44596MEDIUM29 may 2026

Yamcs: No Rate Limiting on Authentication Endpoint

33RIESGO

GitHub PoC

vishvacyber/Detection-Tool-Kit-for-CVE-2026-31431

CVE-2026-31431HIGHbajo ataque29 may 2026

crypto: algif_aead - Revert to operating out-of-place

86RIESGO

GitHub PoC

An LDAP injection vulnerability exists in org.yamcs.security.LdapAuthModule. The username parameter is inserted directly into LDAP search filters without RFC 4515 escaping, allowing authentication bypass.

CVE-2026-42568MEDIUM29 may 2026

Yamcs Vulnerable to LDAP Injection in LdapAuthModule

33RIESGO

GitHub PoC★ 26

Proof-of-concept script to leverage the PAN-OS GlobalProtect authentication bypass CVE-2026-0257

CVE-2026-0257HIGHbajo ataqueransomware29 may 2026

PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities

100RIESGO

GitHub PoC

Technical report about CVE-2022-22947 in Spring Cloud Gateway and its exploitation through exposed Actuator endpoints.

CVE-2022-22947CRITICALbajo ataque29 may 2026

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

GitHub PoC★ 2

akashsingh0454/CVE-2026-0257-PoC

CVE-2026-0257HIGHbajo ataqueransomware29 may 2026

PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities

100RIESGO

GitHub PoC

LuizHenz/PoC-CVE-2025-55182

CVE-2025-55182CRITICALbajo ataqueransomware29 may 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RIESGO

GitHub PoC

Automated CVE-2022-26923 Exploitation (Certifried)

CVE-2022-26923HIGHbajo ataque29 may 2026

Active Directory Domain Services Elevation of Privilege Vulnerability

100RIESGO

GitHub PoC★ 1

writeup

CVE-2026-8697HIGH29 may 2026

Improper Authentication Rate Limiting on TP-Link's Archer C64

41RIESGO

GitHub PoC

NocoDB Shared-Base Links Could Invite Real Base Members and Survive Share Revocation

CVE-2026-46552MEDIUM29 may 2026

NocoDB: Shared-base link access can invite arbitrary users as persistent base members

33RIESGO

GitHub PoC

Dungsocool/CVE-2017-12635_36

CVE-2017-12635—29 may 2026

Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache CouchDB be

60RIESGO

GitHub PoC★ 1

Safely detect whether a UniFi Network Application controller is vulnerable to CVE-2026-22557

CVE-2026-22557CRITICAL29 may 2026

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network App

68RIESGO

GitHub PoC

Oracle REST Data Services (ORDS) Unauthenticated RCE (CVE-2026-46840)

CVE-2026-46840CRITICAL29 may 2026

Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). Supported versions that are affected are

28RIESGO

GitHub PoC

Exploit de Execução Remota de Código (RCE) no XWiki

CVE-2025-24893CRITICALbajo ataque29 may 2026

Remote code execution as guest via SolrSearchMacros request in xwiki

100RIESGO

GitHub PoC

Professional TryHackMe Simple CTF walkthrough covering enumeration, CMS Made Simple SQL Injection (CVE-2019-9053), credential recovery, SSH access, privilege escalation via Vim, and root compromise.

CVE-2019-9053—29 may 2026

An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve

35RIESGO

GitHub PoC

CVE-2026-46376 - FreePBX Unauthenticated UCP Access via Hard-Coded Credentials

CVE-2026-46376CRITICAL29 may 2026

FreePBX: Unauthenticated Use of Hard-Coded Credentials Vulnerability in FreePBX UCP Interface

48RIESGO

GitHub PoC

# CVE-2026-44595 YAMCS Unauthorized User Enumeration via IAM API

CVE-2026-44595MEDIUM29 may 2026

Yamcs: Unauthorized user enumeration via IAM API endpoints

33RIESGO

GitHub PoC

P1 W8 S22 - Metasploit Samba CVE-2007-2447 Exploitation

CVE-2007-2447—29 may 2026

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands

50RIESGO

GitHub PoC

CVE-2026-40564: SSRF via FlinkSessionJob jarURI in apache/flink-kubernetes-operator. Self-contained reproducer that runs on a local kind cluster with one make command.

CVE-2026-40564MEDIUM29 may 2026

Apache Flink Kubernetes Operator: Server-Side Request Forgery and local file access in Kubernetes Operator

33RIESGO

GitHub PoC

rootdirective-sec/CVE-2026-47100-Analysis-Lab

CVE-2026-47100HIGH28 may 2026

Funnel Builder for WooCommerce Checkout < 3.15.0.3 Missing Authorization via AJAX

41RIESGO

GitHub PoC

EXPLOIT CVE-2026-8832

CVE-2026-8832HIGH28 may 2026

WPCode <= 2.3.5 - Authenticated (Author+) Remote Code Execution via CPT Capability Bypass via XML-RPC wp.newPost

41RIESGO

GitHub PoC★ 2

W5M1n9/NGINX-ngx_http_rewrite_module-heap-buffer-overflow-CVE-2026-9256

CVE-2026-9256CRITICAL28 may 2026

NGINX ngx_http_rewrite_module vulnerability

48RIESGO

GitHub PoC★ 6

Proof-of-concept scripts for three vulnerabilities in Notepad++ <= 8.9.6, patched in v8.9.6.1 (2026-05-26) CVE-2026-48770 / CVE-2026-48778 / CVE-2026-48800

CVE-2026-48770MEDIUM28 may 2026

Notepad++ WM_COPYDATA COPYDATA_FULL_CMDLINE local DoS crash

33RIESGO

GitHub PoC★ 1

Detection scanner for CVE-2026-48710 - Host-header auth bypass in Starlette/FastAPI

CVE-2026-48710MEDIUMbajo ataque28 may 2026

Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks

78RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.