Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

84.139exploits catalogados

39.601CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.624Exploit-DB 24.485GitHub PoC 16.337VulnCheck XDB 9680Nuclei 4488Metasploit 3525✓ solo verificadosrecientes populares riesgo

16.337 exploits

GitHub PoC

This repository contains an academic and technical analysis of CVE-2023-34362, a critical SQL injection vulnerability affecting the MOVEit Transfer application, a widely used enterprise Managed File Transfer (MFT) platform. The project was developed as part of the CYB625 – Ethical Hacking & Penetration Testing course at Pace University.

CVE-2023-34362CRITICALbajo ataqueransomware06 may 2026

In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023.

100RIESGO

GitHub PoC

CVE-2011-1249 (MS11-046) AFD privilege escalation — MinGW cross-compilation fix + custom command support

CVE-2011-1249—06 may 2026

The Ancillary Function Driver (AFD) in afd.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vis

23RIESGO

GitHub PoC★ 1

Zimbra Path Traversal (CVE-2025-68645) - Unauthenticated file read vulnerability in Zimbra Collaboration Suite

CVE-2025-68645HIGHbajo ataque06 may 2026

A Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra Collaboration (ZCS) 10.0 and 10.1

98RIESGO

GitHub PoC★ 8

PoC for CVE-2026-41940: WHM/cPanel authentication bypass chain (Python 2.7). For authorized security research and testing only.

CVE-2026-41940CRITICALbajo ataqueransomware06 may 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RIESGO

GitHub PoC

Pentesting caja negra: Shellshock (CVE-2014-6271) + Log4Shell (CVE-2021-44228). Escalada a root. Informe ejecutivo y técnico

CVE-2014-6271CRITICALbajo ataque05 may 2026

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RIESGO

GitHub PoC

Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.

CVE-2026-31431HIGHbajo ataque05 may 2026

crypto: algif_aead - Revert to operating out-of-place

86RIESGO

GitHub PoC★ 23

LPE due to integer truncation in vskrnlintvsp.sys

CVE-2025-21333HIGHbajo ataque05 may 2026

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

71RIESGO

GitHub PoC★ 6

Elite reconnaissance script for auditing Apache's HTTP/2 stack against memory corruption (CVE-2026-23918). Features ALPN protocol forcing and monochrome dashboard intelligence. Built for Blue Teams and Security Researchers.

CVE-2026-23918HIGH05 may 2026

Apache HTTP Server: http2: double free and possible RCE on early reset

53RIESGO

GitHub PoC★ 4

This repository contains a Proof of Concept (PoC) demonstrating the Double Free vulnerability (CVE-2026-23918) in Apache HTTP Server 2.4.66 `mod_http2`.

CVE-2026-23918HIGH05 may 2026

Apache HTTP Server: http2: double free and possible RCE on early reset

53RIESGO

GitHub PoC

Upgrade to Apache 2.4.67 to fix CVE-2026-23918 vulneribility

CVE-2026-23918HIGH05 may 2026

Apache HTTP Server: http2: double free and possible RCE on early reset

53RIESGO

GitHub PoC

Passive HTTP metadata auditor for CVE-2026-23918 exposure triage

CVE-2026-23918HIGH05 may 2026

Apache HTTP Server: http2: double free and possible RCE on early reset

53RIESGO

GitHub PoC

Analysis of CVE-2026-24072

CVE-2026-24072HIGH05 may 2026

Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr

21RIESGO

GitHub PoC

Pentesting caja negra: Shellshock (CVE-2014-6271) + Log4Shell (CVE-2021-44228). Escalada a root. Informe ejecutivo y técnico

CVE-2021-44228CRITICALbajo ataqueransomware05 may 2026

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

GitHub PoC

Simple exploit

CVE-2022-22963CRITICALbajo ataque05 may 2026

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po

100RIESGO

GitHub PoC★ 1

Утилита для Linux, которая проверяет доступность `AF_ALG`/`algif_aead` и помогает оценить риск по `CVE-2026-31431`.

CVE-2026-31431HIGHbajo ataque05 may 2026

crypto: algif_aead - Revert to operating out-of-place

86RIESGO

GitHub PoC

cPanel/WHM CVE-2026-41940 CRLF injection auth bypass exploit

CVE-2026-41940CRITICALbajo ataqueransomware05 may 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RIESGO

GitHub PoC

One IPv6 ND option with length zero. One missing check. Daemon walks backward and lives in the loop. Reported to OpenBSD, fixed, CVE assigned.

CVE-2026-41285MEDIUM05 may 2026

In OpenBSD through 7.8, the slaacd and rad daemons have an infinite loop when they receive a crafted ICMPv6 Neighbor Dis

13RIESGO

GitHub PoC

ZildanZ/CVE-2026-41940

CVE-2026-41940CRITICALbajo ataqueransomware05 may 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RIESGO

GitHub PoC

Simple exploit

CVE-2022-22963CRITICALbajo ataque05 may 2026

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po

100RIESGO

GitHub PoC

6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284

CVE-2026-31431HIGHbajo ataque05 may 2026

crypto: algif_aead - Revert to operating out-of-place

86RIESGO

GitHub PoC★ 1

Detection signatures for CVE-2026-41940 and shemas for cPanel logs

CVE-2026-41940CRITICALbajo ataqueransomware05 may 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RIESGO

GitHub PoC

LetsDefend SOC336 case study on CVE-2025-21298

CVE-2025-21298CRITICAL04 may 2026

Windows OLE Remote Code Execution Vulnerability

70RIESGO

GitHub PoC

kaleth4/CVE-2025-60751

CVE-2025-60751HIGH04 may 2026

GeographicLib 2.5 is vulnerable to Buffer Overflow in GeoConvert DMS::InternalDecode.

41RIESGO

GitHub PoC

kaleth4/CVE-2025-40271

CVE-2025-40271HIGH04 may 2026

fs/proc: fix uaf in proc_readdir_de()

41RIESGO

GitHub PoC★ 6

Sorry ransomware (.sorry) IOCs, YARA rules and forensic analysis - CVE-2026-41940 cPanel campaign

CVE-2026-41940CRITICALbajo ataqueransomware04 may 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RIESGO

GitHub PoC

cPanel-WHM-CVE-2026-41940-AuthBypass

CVE-2026-41940CRITICALbajo ataqueransomware04 may 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RIESGO

GitHub PoC★ 1

CVE-2026-41940: detect and exploit cpanel vuln

CVE-2026-41940CRITICALbajo ataqueransomware04 may 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RIESGO

GitHub PoC

Exploit CVE-2026-41940 auto exploit

CVE-2026-41940CRITICALbajo ataqueransomware04 may 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RIESGO

GitHub PoC

Mrhudson69/cve-2026-31431

CVE-2026-31431HIGHbajo ataque04 may 2026

crypto: algif_aead - Revert to operating out-of-place

86RIESGO

GitHub PoC

Controlled virtual attack & defense lab — CVE-2011-2523 exploitation, Nmap recon, Nikto scanning, UFW hardening on Metasploitable 2

CVE-2011-2523—04 may 2026

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

60RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.