Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

80.324exploits catalogados

37.130CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.476Referência 23.614GitHub PoC 15.330VulnCheck XDB 9001Nuclei 4401Metasploit 3502✓ solo verificadosrecientes populares riesgo

80.184 exploits

GitHub PoC

Blinky-Keys/CVE-2026-48060

CVE-2026-48060HIGH19 may 2026

Litestar: HTML Injection Through CSRF Token

41RIESGO

abrir ↗

GitHub PoC

Xmyronn/CVE-2026-11344-RCE

CVE-2026-11344MEDIUM19 may 2026

code-projects Vehicle Management System New Driver Registration Form newdriver.php unrestricted upload

33RIESGO

abrir ↗

VulnCheck XDB

local

CVE-2026-43284HIGH19 may 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

78RIESGO

abrir ↗

VulnCheck XDB

denial-of-service

CVE-2026-42945CRITICAL19 may 2026

NGINX ngx_http_rewrite_module vulnerability

60RIESGO

abrir ↗

GitHub PoC

The code for personally reproducing the corresponding vulnerability

CVE-2026-35029HIGH19 may 2026

LiteLLM affected by privilege escalation via unrestricted proxy configuration endpoint

61RIESGO

abrir ↗

VulnCheck XDB

remote-with-credentials

CVE-2026-40217HIGH19 may 2026

LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/t

61RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-42945CRITICAL19 may 2026

NGINX ngx_http_rewrite_module vulnerability

60RIESGO

abrir ↗

GitHub PoC

Shell scanner for CVE-2026-31431 "Copy Fail" — a local privilege escalation via Linux kernel page cache corruption (algif_aead/AF_ALG). Checks kernel version, patch status, module state, setuid exposure and mitigations. Supports Debian 11–13 and Ubuntu 20.04–25.10. CI/CD-ready (exit codes + JSON output).

CVE-2026-31431HIGHbajo ataque19 may 2026

crypto: algif_aead - Revert to operating out-of-place

100RIESGO

abrir ↗

GitHub PoC

CVE-2025-55182 Exploit | by infrar3d

CVE-2025-55182CRITICALbajo ataqueransomware19 may 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RIESGO

abrir ↗

GitHub PoC

The code for personally reproducing the corresponding vulnerability

CVE-2026-35030CRITICAL19 may 2026

LiteLLM has an authentication bypass via OIDC userinfo cache key collision

48RIESGO

abrir ↗

GitHub PoC

imSre9/CVE-2026-42945

CVE-2026-42945CRITICAL19 may 2026

NGINX ngx_http_rewrite_module vulnerability

60RIESGO

abrir ↗

GitHub PoC

CVE-2026-30691: Stored Cross-Site Scripting (XSS) in @cyntler/react-doc-viewer

CVE-2026-30691MEDIUM19 may 2026

Cross-Site Scripting (XSS) vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote attackers to execute arbitra

33RIESGO

abrir ↗

GitHub PoC

Exploit code for CVE-2026-42096 and CVE-2026-42097 allowing for arbitrary SQL command execution without authentication.

CVE-2026-42096HIGH19 may 2026

Broken Access Control in Sparx Pro Cloud Server

41RIESGO

abrir ↗

GitHub PoC

This repository contains information about the CVE-2026-36438

CVE-2026-36438MEDIUM18 may 2026

An issue in Intelbras VIP-1230-D-G4 Version V2.800.00IB00C.0.T allows a remote attacker to obtain sensitive information

33RIESGO

abrir ↗

GitHub PoC★ 3

暂无

CVE-2026-39636MEDIUM18 may 2026

WordPress Livemesh Addons for Elementor plugin <= 9.0 - Cross Site Scripting (XSS) vulnerability

33RIESGO

abrir ↗

GitHub PoC

Ne0zer01/CVE-2024-27198_LAB

CVE-2024-27198CRITICALbajo ataqueransomware18 may 2026

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

100RIESGO

abrir ↗

GitHub PoC★ 4

IKEv2, ikeext.dll, CVE-2026-33824, double free, heap grooming, ROP, SKF fragmentation, Windows exploit, anti-debug, obfuscation, API hooking, shellcode, reverse shell

CVE-2026-33824CRITICALbajo ataque18 may 2026

Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 3

CVE-2026-33825

CVE-2026-33825HIGHbajo ataqueransomware18 may 2026

Microsoft Defender Elevation of Privilege Vulnerability

71RIESGO

abrir ↗

VulnCheck XDB

local

CVE-2026-31431HIGHbajo ataque18 may 2026

crypto: algif_aead - Revert to operating out-of-place

100RIESGO

abrir ↗

VulnCheck XDB

local

CVE-2026-31431HIGHbajo ataque18 may 2026

crypto: algif_aead - Revert to operating out-of-place

100RIESGO

abrir ↗

GitHub PoC

Attack and Defense course project focused on CVE-2017-5638 analysis, exploitation, and mitigation.

CVE-2017-5638CRITICALbajo ataqueransomware18 may 2026

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RIESGO

abrir ↗

GitHub PoC

Lab for the CVE-2024-27198

CVE-2024-27198CRITICALbajo ataqueransomware18 may 2026

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

100RIESGO

abrir ↗

GitHub PoC

cj667113/OCI-Ansible-Fix-CVE-2026-31431

CVE-2026-31431HIGHbajo ataque18 may 2026

crypto: algif_aead - Revert to operating out-of-place

100RIESGO

abrir ↗

GitHub PoC★ 1

This repository provides proof of concept (PoC) for the CVE-2021-4034

CVE-2021-4034HIGHbajo ataqueransomware18 may 2026

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

GitHub PoC

A lightweight Python-based security assessment tool for detecting dangerous Cross-Origin Resource Sharing (CORS) misconfigurations - CVE-2025-34291.

CVE-2025-34291CRITICALbajo ataque18 may 2026

Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE

100RIESGO

abrir ↗

GitHub PoC

Local Privilege Escalation. Flips the running user's UID to 0 in /etc/passwd's page cache, then invokes su for a root shell.

CVE-2026-31431HIGHbajo ataque18 may 2026

crypto: algif_aead - Revert to operating out-of-place

100RIESGO

abrir ↗

GitHub PoC★ 6

Research artifacts, PoC scripts, and lab assets for the Copy Fail Linux local privilege escalation writeup on https://4xura.com/binex/kernel/copy-fail

CVE-2026-31431HIGHbajo ataque18 may 2026

crypto: algif_aead - Revert to operating out-of-place

100RIESGO

abrir ↗

GitHub PoC

Detection and mitigation tooling for CVE-2026-31431 (Copy Fail) on Linux kernels. Includes Phalanx-CCS and Silent4Labs scripts plus an Ansible playbook to apply temporary mitigation (block algif_aead module or boot parameter) across servers.

CVE-2026-31431HIGHbajo ataque18 may 2026

crypto: algif_aead - Revert to operating out-of-place

100RIESGO

abrir ↗

GitHub PoC

CVE-2026-46300 / CVE-2026-43500 / CVE-2026-31431 / CVE-2026-43284 golang hotfix

CVE-2026-46300HIGH18 may 2026

net: skbuff: preserve shared-frag marker during coalescing

56RIESGO

abrir ↗

GitHub PoC

Laboratorio automatizado Plug & Play en Docker para auditar y estudiar la vulnerabilidad Log4Shell (CVE-2021-44228)

CVE-2021-44228CRITICALbajo ataqueransomware18 may 2026

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.