Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

71.957exploits catalogados

32.195CVEs con explotación pública

1932probados en laboratorio

Todos Exploit-DB 22.786Referência 20.003GitHub PoC 13.307VulnCheck XDB 8182Nuclei 4217Metasploit 3462✓ solo verificadosrecientes populares riesgo

71.957 exploits

GitHub PoC

🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.

CVE-2025-14847HIGHbajo ataque14 ene 2026

Zlib compressed protocol header length confusion may allow memory read

100RIESGO

GitHub PoC

encikayelwhitehat-glitch/CVE-2024-3094

CVE-2024-3094CRITICAL14 ene 2026

Xz: malicious code in distributed source

70RIESGO

GitHub PoC

Implementation of the CVE-2023-22809

CVE-2023-22809HIGH14 ene 2026

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environmen

68RIESGO

GitHub PoC

CVE-2025-9501

CVE-2025-9501CRITICAL14 ene 2026

W3 Total Cache < 2.8.13 - Unauthenticated Command Injection

53RIESGO

GitHub PoC

🛡️ Detect vulnerable MongoDB instances with the high-performance MongoBleed scanner for CVE-2025-14847, ensuring network security and data protection.

CVE-2025-14847HIGHbajo ataque14 ene 2026

Zlib compressed protocol header length confusion may allow memory read

100RIESGO

VulnCheck XDB

initial-access

CVE-2025-9501CRITICAL14 ene 2026

W3 Total Cache < 2.8.13 - Unauthenticated Command Injection

53RIESGO

GitHub PoC

Asset-wide detection tool for identifying jsPDF usage related to CVE-2025-68428 Detection only — no exploitation

CVE-2025-68428CRITICAL14 ene 2026

jsPDF has Local File Inclusion/Path Traversal vulnerability

48RIESGO

GitHub PoC

A comprehensive Security Operations Centre (SOC) incident response simulation demonstrating threat detection, triage, analysis, and mitigation of the Spring4Shell vulnerability (CVE-2022-22965).

CVE-2022-22965CRITICALbajo ataque14 ene 2026

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RIESGO

GitHub PoC

**Log4Shell PoC is a high-fidelity exploitation environment designed to replicate the CVE-2021-44228 vulnerability.** It provides a containerized sandbox to demonstrate JNDI injection, LDAP/RMI referral redirection, and remote code execution (RCE) via the Log4j 2 library.

CVE-2021-44228CRITICALbajo ataqueransomware14 ene 2026

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

GitHub PoC★ 100

Analysis of CVE-2025-43529 (WebKit UAF) + CVE-2025-14174 (ANGLE OOB) exploit chain - iOS Safari

CVE-2025-43529HIGHbajo ataque13 ene 2026

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and

71RIESGO

GitHub PoC

POC for the CVE-2025-32462 and CVE-2025-32463 vulnerabilities

CVE-2025-32462LOW13 ene 2026

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allo

28RIESGO

Metasploit300

osTicket Arbitrary File Read via PHP Filter Chains in mPDF

CVE-2026-22200HIGH13 ene 2026

osTicket (1.18.x < 1.18.3, 1.17.x < 1.17.7) PDF Export Arbitrary File Read

58RIESGO

GitHub PoC

Remote code execution for React Server Components 19.0.0 - 19.2.0

CVE-2025-55182CRITICALbajo ataqueransomware13 ene 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RIESGO

VulnCheck XDB

initial-access

CVE-2023-4220HIGH13 ene 2026

Chamilo LMS Unauthenticated Big Upload File Remote Code Execution

78RIESGO

VulnCheck XDB

initial-access

CVE-2024-0692HIGH13 ene 2026

SolarWinds Security Event Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability

78RIESGO

VulnCheck XDB

info-leak

CVE-2025-14847HIGHbajo ataque13 ene 2026

Zlib compressed protocol header length confusion may allow memory read

100RIESGO

GitHub PoC

0x13-ByteZer0/CVE-2024-21762

CVE-2024-21762CRITICALbajo ataqueransomware13 ene 2026

A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0

100RIESGO

GitHub PoC★ 2

alexcyberx/CVE-2025-14847_Expolit

CVE-2025-14847HIGHbajo ataque13 ene 2026

Zlib compressed protocol header length confusion may allow memory read

100RIESGO

GitHub PoC

Unauthenticated file upload for Chamilo 1.11.24 and lower

CVE-2023-4220HIGH13 ene 2026

Chamilo LMS Unauthenticated Big Upload File Remote Code Execution

78RIESGO

GitHub PoC★ 1

Local Priviledge Escalation for Druva

CVE-2020-5752—13 ene 2026

Relative path traversal in Druva inSync Windows Client 6.6.3 allows a local, unauthenticated attacker to execute arbitra

38RIESGO

GitHub PoC★ 11

A simple PoC demonstrating the vulnerability in the ThrottleStop.sys driver, showcasing arbitrary physical memory read and write capabilities, as well as virtual-to-physical address translation using Superfetch.

CVE-2025-7771HIGH13 ene 2026

Code Execution / Escalation of Privileges in ThrottleStop

41RIESGO

VulnCheck XDB

local

CVE-2025-7771HIGH13 ene 2026

Code Execution / Escalation of Privileges in ThrottleStop

41RIESGO

VulnCheck XDB

initial-access

CVE-2024-21762CRITICALbajo ataqueransomware13 ene 2026

A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0

100RIESGO

VulnCheck XDB

initial-access

CVE-2025-64155CRITICAL13 ene 2026

An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet

60RIESGO

VulnCheck XDB

initial-access

CVE-2025-55182CRITICALbajo ataqueransomware13 ene 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RIESGO

GitHub PoC

posix sh poc for CVE-2009-2265 (deps: curl,msfvenom,uuidgen,tr)

CVE-2009-2265—12 ene 2026

Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable fil

60RIESGO

GitHub PoC★ 3

CVE-2025-52694 Critical SQL Injection in Advantech IoTSuite/SaaS-Composer

CVE-2025-52694CRITICAL12 ene 2026

Execution of arbitrary SQL commands

75RIESGO

GitHub PoC

Mr-In4inci3le/CVE-2025-11953-POC-

CVE-2025-11953CRITICALbajo ataque12 ene 2026

Command injection in React Native Community CLI allows remote attackers to perform remote code execution by sending HTTP requests

90RIESGO

GitHub PoC★ 2

CVE-2025-14847 | MongoBleed vulnerability proof of concept project

CVE-2025-14847HIGHbajo ataque12 ene 2026

Zlib compressed protocol header length confusion may allow memory read

100RIESGO

VulnCheck XDB

initial-access

CVE-2025-11953CRITICALbajo ataque12 ene 2026

Command injection in React Native Community CLI allows remote attackers to perform remote code execution by sending HTTP requests

90RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.