Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
71.957exploits catalogados
32.195CVEs con explotación pública
1932probados en laboratorio
TodosExploit-DB 22.786Referência 20.003GitHub PoC 13.307VulnCheck XDB 8182Nuclei 4217Metasploit 3462✓ solo verificadosrecientespopularesriesgo
13.307 exploits
GitHub PoC
A Python-based Exploit Script for CVE-2016-3088
The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitr
100RIESGO
abrir ↗GitHub PoC★ 4
SolarWinds Serv-U 15.4.2 HF1 - Directory Traversal
SolarWinds Serv-U L Directory Transversal Vulnerability
100RIESGO
abrir ↗GitHub PoC★ 2
CrushFTP 11.3.1 - Authentication Bypass
CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unle
100RIESGO
abrir ↗GitHub PoC★ 2
Fortra GoAnywhere MFT 7.4.1 - Authentication Bypass
Authentication Bypass in GoAnywhere MFT
85RIESGO
abrir ↗GitHub PoC★ 8
This project is a research-oriented and educational simulation designed to demonstrate the concept of a sandbox escape vulnerability within Google Chrome (version 134.0.6998.177), leveraging improper handle , validation via Mojo IPC.
Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allow
71RIESGO
abrir ↗GitHub PoC
Exerrdev/CVE-2024-9264-Fixed
Grafana SQL Expressions allow for remote code execution
85RIESGO
abrir ↗GitHub PoC★ 3
CVE-2023-1698 exploit with golang
WAGO: WBM Command Injection in multiple products
85RIESGO
abrir ↗GitHub PoC★ 2
Checks if your Chrome version is vulnerable to CVE-2025-5419, from the browser
Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially expl
71RIESGO
abrir ↗GitHub PoC★ 1
grass341/CVE-2022-37969
Windows Common Log File System Driver Elevation of Privilege Vulnerability
76RIESGO
abrir ↗GitHub PoC
maqeel-git/CVE-2020-0796
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir ↗GitHub PoC★ 1
This Python script checks for the presence of CVE-2024-40898, a critical vulnerability in Apache HTTP Server that may allow SSL/TLS certificate verification bypass under certain misconfigurations. It initiates an SSL connection to the target server and sends a HEAD request.
Apache HTTP Server: SSRF with mod_rewrite in server/vhost context on Windows
48RIESGO
abrir ↗GitHub PoC
MAHABUB122003/Atlassian-CVE-2022-26134
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RIESGO
abrir ↗GitHub PoC★ 1
LipeOzyy/CVE-2010-1872-BlazeDVD-SEH-Exploit
Cross-site scripting (XSS) vulnerability in cPlayer.php in FlashCard 2.6.5 and 3.0.1 allows remote attackers to inject a
23RIESGO
abrir ↗GitHub PoC
CVE-2014-6271(RCE) poc Exploit
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RIESGO
abrir ↗GitHub PoC★ 705
PoC Exploit for the NTLM reflection SMB flaw.
Windows SMB Client Elevation of Privilege Vulnerability
93RIESGO
abrir ↗GitHub PoC★ 1
CVE-2025-24071: NTLMv2 Hash Disclosure via .library-ms File
Microsoft Windows File Explorer Spoofing Vulnerability
38RIESGO
abrir ↗GitHub PoC
Privilege Escalation on HTB "Poison" using PwnKit (CVE-2021-4034)
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RIESGO
abrir ↗GitHub PoC
CVE-2017-8291 CTF with docker and examples
Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion
100RIESGO
abrir ↗GitHub PoC
Stored XSS in Nagios Log Server 2024R1.3.1
Cross Site Scripting vulnerability in Nagios Log Server v.2024R1.3.1 allows a remote attacker to execute arbitrary code
41RIESGO
abrir ↗GitHub PoC
CVE-2025-31650
Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame
53RIESGO
abrir ↗GitHub PoC
CVE-2025-31650
Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame
53RIESGO
abrir ↗GitHub PoC
PoC for CVE-2021-29447
WordPress Authenticated XXE attack when installation is running PHP 8
63RIESGO
abrir ↗GitHub PoC
In this lab I walked through an end-to-end intrusion that began with an external RDP break-in, used a brand-new CLFS privilege-escalation exploit (CVE-2024–49138), and ended with SYSTEM-level cloud credential harvesting. Below is the story, the evidence, and the lessons I drew from it.
Windows Common Log File System Driver Elevation of Privilege Vulnerability
76RIESGO
abrir ↗GitHub PoC★ 64
CVE-2025-33053 Proof Of Concept (PoC)
Internet Shortcut Files Remote Code Execution Vulnerability
100RIESGO
abrir ↗GitHub PoC
Gigamon Unauth RCE (CVE-2026-36848)
Gigamon GVOS v5.16.1 and below is vulnerable to Directory Traversal in the GVOS H-VUE subsystem.
41RIESGO
abrir ↗GitHub PoC
Hands-on lab on detecting and mitigating web app threats using OWASP ZAP, Burp Suite, and ModSecurity WAF (with OWASP CRS). Case study: Spring4Shell (CVE-2022-22965). Local Docker-based setup.
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RIESGO
abrir ↗GitHub PoC
KimJuhyeong95/cve-2025-24514
ingress-nginx controller - configuration injection via unsanitized auth-url annotation
68RIESGO
abrir ↗GitHub PoC
Exploiting the vulnerability called "Dirty_Sock" (CVE-2019-7304) in the REST API for Canonical's snapd daemon.
Local privilege escalation via snapd socket
53RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.