Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados

40.804CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientes populares riesgo

88.056 exploits

GitHub PoC★ 3

Technical analysis, root cause breakdown, and non-destructive detection methodology for CVE-2026-63030.

CVE-2026-63030CRITICALbajo ataque25 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

98RIESGO

abrir ↗

GitHub PoC

Security Advisory for CVE-2026-51565

CVE-2026-51565MEDIUM25 jul 2026

Cross-site scripting (XSS) vulnerability in Modules/Docs/DocsController.php in Milk admin <=0.9.8 allows remote attacker

33RIESGO

abrir ↗

GitHub PoC★ 2

CVE-2026-54121

CVE-2026-54121HIGH25 jul 2026

Active Directory Certificate Services Elevation of Privilege Vulnerability

41RIESGO

abrir ↗

GitHub PoC

Manage BitLocker encrypted drives on Windows 10 and 11. Extract recovery keys, check encryption status, and apply security mitigations for CVE-2026-45585.

CVE-2026-45585MEDIUM25 jul 2026

Windows BitLocker Security Feature Bypass Vulnerability

33RIESGO

abrir ↗

GitHub PoC

Security Advisory for CVE-2026-51564

CVE-2026-51564MEDIUM25 jul 2026

An issue in the redirect parameter in Milk admin <=0.9.8 allows remote attackers to redirect users to arbitrary external

33RIESGO

abrir ↗

GitHub PoC★ 1

PoC for CVE-2026-65694 — Microweber CMS (<=2.0.20) unauthenticated path traversal → arbitrary file read (.env / secrets)

CVE-2026-65694HIGH25 jul 2026

Microweber CMS 2.0.20 Path Traversal via ServeStaticFileController

56RIESGO

abrir ↗

GitHub PoC★ 1

Technical analysis and Proof-of-Concept for CVE-2026-60206, a critical Oracle WebLogic Server SAML authentication bypass vulnerability.

CVE-2026-60206CRITICAL25 jul 2026

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

48RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2026-16723

CVE-2026-16723CRITICAL25 jul 2026

Remote Code Execution in fastjson 1.2.68–1.2.83

48RIESGO

abrir ↗

GitHub PoC★ 17

（CVE-2026-43499）内核漏洞利用程序，适用于未解锁 Bootloader 的一加15T.

CVE-2026-43499HIGH25 jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RIESGO

abrir ↗

GitHub PoC★ 30

CVE-2026-54121 - CertiGhost AD CS Multi-Exploit Framework | Rogue DC + LDAP spoofing, certificate abuse, PKINIT hash extraction, auto DCSync. Safe Checker + full exploit, multi-threaded mass scan, Shodan integration, JSON/CSV/JSONL output. CVSS 8.8 High. Use Ethically, Stay Legal :v

CVE-2026-54121HIGH25 jul 2026

Active Directory Certificate Services Elevation of Privilege Vulnerability

41RIESGO

abrir ↗

GitHub PoC

Manage BitLocker encrypted drives on Windows. Extract recovery keys, check encryption status, and apply security mitigations for CVE-2026-45585.

CVE-2026-45585MEDIUM25 jul 2026

Windows BitLocker Security Feature Bypass Vulnerability

33RIESGO

abrir ↗

GitHub PoC★ 5

CVE-2026-43499 per-boot root exploit — core logic (arm64 Android GKI 6.6)

CVE-2026-43499HIGH25 jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RIESGO

abrir ↗

GitHub PoC

CVE-2026-12960 - Improper Export of Android Application Components in the ASUS Router app (com.asus.aihome). PoC, exploit APK, video, and vendor report. Fixed in 1.0.0.9.74.

CVE-2026-12960MEDIUM25 jul 2026

An Improper Export of Android Application Components vulnerability in ASUS Router App allows a third-party application o

33RIESGO

abrir ↗

GitHub PoC★ 43

CVE-2026-50522 PoC

CVE-2026-50522CRITICALbajo ataque25 jul 2026

Microsoft SharePoint Remote Code Execution Vulnerability

78RIESGO

abrir ↗

GitHub PoC★ 3

7-Zip XZ Decoder Heap Buffer Overflow - Full analysis, root cause, PoC, and RCE exploitation roadmap

CVE-2026-14266HIGH25 jul 2026

7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability

41RIESGO

abrir ↗

GitHub PoC

Auth Bypass in inetutils-telnetd

CVE-2026-24061CRITICALbajo ataque25 jul 2026

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment

100RIESGO

abrir ↗

GitHub PoC

kxom9ks/CVE-2024-27198

CVE-2024-27198CRITICALbajo ataqueransomware24 jul 2026

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

100RIESGO

abrir ↗

GitHub PoC★ 2

CVE-2026-60206

CVE-2026-60206CRITICAL24 jul 2026

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

48RIESGO

abrir ↗

GitHub PoC★ 35

cve cve-2026-60206 weblogic saml exploit poc vulnerability oracle scanner security

CVE-2026-60206CRITICAL24 jul 2026

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

48RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2016-10033CRITICALbajo ataque24 jul 2026

The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra para

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-63030CRITICALbajo ataque24 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

98RIESGO

abrir ↗

GitHub PoC

risorse di ricerca per cve-2026-7228

CVE-2026-7228MEDIUM24 jul 2026

SourceCodester Pizzafy Ecommerce System ajax.php get_cart_count sql injection

33RIESGO

abrir ↗

GitHub PoC

Security Advisory: Negative Chunk-Size Parsing Causes Memory Corruption in facil.io

CVE-2026-66731HIGH24 jul 2026

facil.io 0.7.5 - 0.7.6 HTTP/1.1 Chunked Transfer Encoding Parser Crash DoS

41RIESGO

abrir ↗

GitHub PoC

Pedit COW – Linux Kernel Local Privilege Escalation (CVE-2026-46331)

CVE-2026-46331HIGH24 jul 2026

net/sched: fix pedit partial COW leading to page cache corruption

41RIESGO

abrir ↗

GitHub PoC

is an advanced security research framework designed to model, analyze, and demonstrate Local Privilege Escalation (LPE) mechanics associated with kernel-level race conditions and filesystem structure vulnerabilities (CVE-2026-64600 / RefluXFS)

CVE-2026-64600HIGH24 jul 2026

xfs: resample the data fork mapping after cycling ILOCK

41RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2026-41940

CVE-2026-41940CRITICALbajo ataqueransomware24 jul 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RIESGO

abrir ↗

GitHub PoC

WordPress Core Pre-Auth RCE via REST Batch Route Confusion + SQLi (CVE-2026-63030 + CVE-2026-60137)

CVE-2026-63030CRITICALbajo ataque24 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

98RIESGO

abrir ↗

GitHub PoC★ 1

Security Advisory: Out-of-Bounds Read in facil.io MIME Parser leads to Server crash

CVE-2026-66729HIGH24 jul 2026

facil.io 0.6.0 - 0.7.6 Integer Underflow DoS via Multipart MIME Body Parser

41RIESGO

abrir ↗

GitHub PoC

Security Advisory: Infinite Loop DoS in facil.io MIME Parser (Partial Boundary)

CVE-2026-66730HIGH24 jul 2026

facil.io 0.6.0 - 0.7.6 Infinite Loop DoS via Multipart MIME Body Parser

41RIESGO

abrir ↗

GitHub PoC★ 1

PoC for CVE-2026-65650 - Elgg avatar upload DoS

CVE-2026-65650MEDIUM24 jul 2026

Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar upload.

33RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.