Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados

40.804CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientes populares riesgo

88.056 exploits

GitHub PoC★ 1

Discuz! X5.0 Authentication Bypass Exploit Framework (CVE-2026-49952) - Critical vulnerability allowing unauthenticated database backup access via UC_KEY encryption oracle token reuse. CVSS 9.1. Full-featured tool with version detection, multi-payload attacks, interactive shell, and automated exploitation. Authorized testing only.

CVE-2026-49952CRITICAL24 jul 2026

Discuz! X5.0 Authentication Bypass via dbbak.php Encryption Oracle

63RIESGO

VulnCheck XDB

initial-access

CVE-2024-4577CRITICALbajo ataqueransomware23 jul 2026

Argument Injection in PHP-CGI

100RIESGO

GitHub PoC

GitHub Actions workflow sandbox (CVE-2026-48546 reproduction)

CVE-2026-48546HIGH23 jul 2026

KanaDojo < 0.1.18 Sandbox Escape RCE via messages.cjs

21RIESGO

VulnCheck XDB

info-leak

CVE-2024-43451MEDIUMbajo ataque23 jul 2026

NTLM Hash Disclosure Spoofing Vulnerability

85RIESGO

VulnCheck XDB

initial-access

CVE-2026-33017CRITICALbajo ataque23 jul 2026

Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint

100RIESGO

VulnCheck XDB

initial-access

CVE-2026-63030CRITICALbajo ataque23 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

98RIESGO

GitHub PoC★ 16

DavidCarliez/CVE-2026-66804-CrossDevice-LPE

CVE-2026-66804HIGH23 jul 2026

Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

41RIESGO

VulnCheck XDB

local

CVE-2021-3493HIGHbajo ataque23 jul 2026

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o

98RIESGO

VulnCheck XDB

initial-access

CVE-2024-0012CRITICALbajo ataqueransomware23 jul 2026

PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)

100RIESGO

GitHub PoC★ 5

CVE-2026-43499 exploit configuration for realme RMX3888 (Android 16) - 20 verified kernel offsets

CVE-2026-43499HIGH23 jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RIESGO

GitHub PoC★ 7

Exploit for CVE-2026-63286: Offline decryptor for AXIS Camera Station (ACS) credentials

CVE-2026-63286HIGH23 jul 2026

Database backups are vulnerable to offline attacks. Backups created using a version prior to the patched version are sti

41RIESGO

GitHub PoC★ 1

0xdak/CVE-2026-56121_exploit

CVE-2026-56121CRITICAL23 jul 2026

Feast < 0.63.0 Unauthenticated RCE via ApplyFeatureView gRPC Deserialization

48RIESGO

GitHub PoC

0xdak/CVE-2026-63766_exploit

CVE-2026-63766CRITICAL23 jul 2026

GPT-SoVITS 20250606v2pro OS Command Injection via webui.py

48RIESGO

VulnCheck XDB

info-leak

CVE-2025-5777CRITICALbajo ataqueransomware23 jul 2026

NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread

100RIESGO

GitHub PoC★ 4

soralis0912/CVE-2026-43499-aristotle

CVE-2026-43499HIGH23 jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RIESGO

GitHub PoC

CVE-2026-64600 - Draft - Check todo

CVE-2026-64600HIGH23 jul 2026

xfs: resample the data fork mapping after cycling ILOCK

41RIESGO

GitHub PoC★ 28

YellowKey free tool for the CVE-2026-45585 BitLocker bypass vulnerability on Windows 10/11. Covered on Tom's Hardware: extract recovery keys, apply remediation, test bypass mitigation and manage BitLocker encryption state. Download YellowKey

CVE-2026-45585MEDIUM23 jul 2026

Windows BitLocker Security Feature Bypass Vulnerability

33RIESGO

GitHub PoC

finding by nvth

CVE-2026-59880HIGH23 jul 2026

Immutable.js: Hash-collision algorithmic complexity denial of service in Immutable.Map/Set

21RIESGO

GitHub PoC★ 1

Flowise Windows RCE exploit for CVE-2026-58057. Bypasses environment variable validation via case-sensitive flaw. Uses node_options to inject arbitrary code through MCP stdio. Supports reverse shell, persistence, file upload, credential dumping. For authorized security testing only.

CVE-2026-58057LOW23 jul 2026

Flowise - Custom MCP Environment Variable Denylist Bypass via Case Sensitivity

28RIESGO

VulnCheck XDB

initial-access

CVE-2021-41773HIGHbajo ataqueransomware23 jul 2026

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

GitHub PoC★ 5

soralis0912/CVE-2026-43499-aristotle-apk

CVE-2026-43499HIGH23 jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RIESGO

GitHub PoC

CVE-2026-41940 cPanel & WHM Auth Bypass

CVE-2026-41940CRITICALbajo ataqueransomware23 jul 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RIESGO

GitHub PoC

CVE Reproduction: cve-2026-0770-langflow_rce_reproduction

CVE-2026-0770CRITICALbajo ataque23 jul 2026

Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability

100RIESGO

GitHub PoC

CVE Reproduction: cve-2025-55182-react2shell_reproduction

CVE-2025-55182CRITICALbajo ataqueransomware23 jul 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RIESGO

VulnCheck XDB

initial-access

CVE-2026-23744CRITICAL23 jul 2026

REC in MCPJam inspector due to HTTP Endpoint exposes

75RIESGO

GitHub PoC

GitHub Actions workflow sandbox for CVE-2026-45132 reproduction

CVE-2026-45132CRITICAL23 jul 2026

CloudPirates Open Source Helm Charts: GitHub Actions workflow leaks PAT and SSH signing key via unsafe credential handling

48RIESGO

VulnCheck XDB

initial-access

CVE-2025-32432CRITICALbajo ataque23 jul 2026

Craft CMS Allows Remote Code Execution

100RIESGO

GitHub PoC★ 1

Metabase CVE-2026-59827 Vulnerability Scanner

CVE-2026-59827CRITICAL23 jul 2026

Metabase: Unsafe Deserialization of H2 Query Results

48RIESGO

GitHub PoC

CVE Reproduction: cve-2025-2783-chrome_sandbox_escape_reproduction

CVE-2025-2783HIGHbajo ataque23 jul 2026

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allow

71RIESGO

GitHub PoC★ 2

CVE-2026-64560, kernelctf-lts-6.12.95

CVE-2026-64560HIGH23 jul 2026

posix-cpu-timers: Prevent UAF caused by non-leader exec() race

41RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.