Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

71.957exploits catalogados

32.195CVEs con explotación pública

1932probados en laboratorio

Todos Exploit-DB 22.786Referência 20.003GitHub PoC 13.307VulnCheck XDB 8182Nuclei 4217Metasploit 3462✓ solo verificadosrecientes populares riesgo

71.957 exploits

GitHub PoC★ 2

A PoC for CVE-2023-46604 written as part of SPS class for the Advanced Cyber Security master's at UPB.

CVE-2023-46604CRITICALbajo ataqueransomware04 ene 2026

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

GitHub PoC

Ermensonx/CVE-2025-14857-MongoBleed

CVE-2025-14857MEDIUM04 ene 2026

Semtech LR11xx Memory Write Access Control Bypass

33RIESGO

VulnCheck XDB

client-side

CVE-2025-55182CRITICALbajo ataqueransomware04 ene 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RIESGO

GitHub PoC★ 8

PoC CVE-2023-28205: Apple WebKit Use-After-Free Vulnerability

CVE-2023-28205HIGHbajo ataque04 ene 2026

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 a

76RIESGO

VulnCheck XDB

client-side

CVE-2025-14174HIGHbajo ataque04 ene 2026

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perfor

76RIESGO

VulnCheck XDB

denial-of-service

CVE-2023-28205HIGHbajo ataque04 ene 2026

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 a

76RIESGO

VulnCheck XDB

initial-access

CVE-2019-14206—04 ene 2026

An Arbitrary File Deletion vulnerability in the Nevma Adaptive Images plugin before 0.6.67 for WordPress allows remote a

38RIESGO

GitHub PoC

🔍 Discover and scan vulnerable Next.js instances to protect your infrastructure from critical RCE vulnerabilities like CVE-2025-55182.

CVE-2025-55182CRITICALbajo ataqueransomware04 ene 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RIESGO

GitHub PoC

Mongobleed Detector CVE-2025-14847

CVE-2025-14847HIGHbajo ataque04 ene 2026

Zlib compressed protocol header length confusion may allow memory read

100RIESGO

GitHub PoC★ 1

abdulsaabir/CVE-2007-2447

CVE-2007-2447—04 ene 2026

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands

50RIESGO

GitHub PoC★ 7

React2Shell CVE-2025-55182: unauthenticated unsafe deserialization in React Server Components leading to reliable remote code execution via the Flight protocol.

CVE-2025-55182CRITICALbajo ataqueransomware04 ene 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RIESGO

GitHub PoC★ 1

Analysis and PoC for CVE-2025-14174 - ANGLE Metal OOB write (iOS Safari, macOS Chrome)

CVE-2025-14174HIGHbajo ataque04 ene 2026

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perfor

76RIESGO

GitHub PoC

joaovicdev/EXPLOIT-CVE-2025-55182

CVE-2025-55182CRITICALbajo ataqueransomware04 ene 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RIESGO

GitHub PoC

🧱 CVE-2024-25600 WordPress Bricks Builder RCE Exploit + TryHackMe Bricks Heist CTF Write-up

CVE-2024-25600CRITICAL04 ene 2026

WordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability

85RIESGO

GitHub PoC★ 10

CVE-2025-68926 - RustFS Hardcoded gRPC Authentication Token Exploit

CVE-2025-68926CRITICAL04 ene 2026

RustFS has a gRPC Hardcoded Token Authentication Bypass

53RIESGO

GitHub PoC

一个容器逃逸漏洞POC

CVE-2025-9074CRITICAL04 ene 2026

Docker Desktop allows unauthenticated access to Docker Engine API from containers

48RIESGO

VulnCheck XDB

initial-access

CVE-2025-6440CRITICAL03 ene 2026

WooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File Upload

60RIESGO

VulnCheck XDB

remote-with-credentials

CVE-2025-68613CRITICALbajo ataque03 ene 2026

n8n Vulnerable to Remote Code Execution via Expression Injection

100RIESGO

GitHub PoC

nuclei tamplate to CVE-2025-6440

CVE-2025-6440CRITICAL03 ene 2026

WooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File Upload

60RIESGO

VulnCheck XDB

initial-access

CVE-2025-55182CRITICALbajo ataqueransomware03 ene 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RIESGO

GitHub PoC★ 1

CVE-2025-55182 漏洞检测与利用工具（GUI版）

CVE-2025-55182CRITICALbajo ataqueransomware03 ene 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RIESGO

GitHub PoC★ 1

rahuulmiishra/react2shell-CVE-2025-55182

CVE-2025-55182CRITICALbajo ataqueransomware03 ene 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RIESGO

GitHub PoC

n8n RCE (CVE-2025-68613)

CVE-2025-68613CRITICALbajo ataque03 ene 2026

n8n Vulnerable to Remote Code Execution via Expression Injection

100RIESGO

GitHub PoC

hyunnna/NextChat_SSRF_CVE-2023-49785

CVE-2023-49785CRITICAL03 ene 2026

NextChat vulnerable to Server-Side Request Forgery and Cross-site Scripting

85RIESGO

GitHub PoC

Expression injection payloads for n8n CVE-2025-68613 RCE

CVE-2025-68613CRITICALbajo ataque03 ene 2026

n8n Vulnerable to Remote Code Execution via Expression Injection

100RIESGO

VulnCheck XDB

denial-of-service

CVE-2025-38352HIGHbajo ataque03 ene 2026

posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()

71RIESGO

VulnCheck XDB

local

CVE-2025-14174HIGHbajo ataque02 ene 2026

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perfor

76RIESGO

VulnCheck XDB

initial-access

CVE-2022-42889—02 ene 2026

Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults

60RIESGO

GitHub PoC

MongoBleed (CVE-2025-14847) Lab & PoC : A complete educational environment to reproduce the critical unauthenticated memory leak in MongoDB. Includes a vulnerable Docker container with multi-database seeding (PII, API keys) and a Python exploit to demonstrate data extraction. Ideal for security research and awareness. 1-day analysis.

CVE-2025-14847HIGHbajo ataque02 ene 2026

Zlib compressed protocol header length confusion may allow memory read

100RIESGO

GitHub PoC

CVE-2025-55182 - Tool React2Shell

CVE-2025-55182CRITICALbajo ataqueransomware02 ene 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.