Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

85.337exploits catalogados

39.873CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 25.822Exploit-DB 24.487GitHub PoC 17.115VulnCheck XDB 9874Nuclei 4511Metasploit 3528✓ solo verificadosrecientes populares riesgo

17.115 exploits

GitHub PoC

This tool demonstrates the application of fundamental physics discoveries to cybersecurity.

CVE-2022-0847HIGHbajo ataque07 feb 2026

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

abrir ↗

GitHub PoC★ 6

Proof of Concept for CVE-2026-0770 - Langflow Remote Code Execution

CVE-2026-0770CRITICALbajo ataque07 feb 2026

Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC

CVE-2025-14847 (MongoBleed) scanner and exploit tool. Unauthenticated MongoDB heap memory leak via zlib decompression. Detection, memory extraction, credential parsing, CIDR/batch scanning, Nuclei templates, and CTF lab included

CVE-2025-14847HIGHbajo ataque07 feb 2026

Zlib compressed protocol header length confusion may allow memory read

100RIESGO

abrir ↗

GitHub PoC

CDT Ansible playbook for deploying CVE-2017-7494 aka "SambaCry" to an Ubuntu box

CVE-2017-7494CRITICALbajo ataqueransomware07 feb 2026

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allo

100RIESGO

abrir ↗

GitHub PoC

CDT Ansible playbook for deploying CVE-2017-7494 aka "SambaCry" to an Ubuntu box

CVE-2017-7494CRITICALbajo ataqueransomware07 feb 2026

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allo

100RIESGO

abrir ↗

GitHub PoC

PoC скрипт для CVE-2021-41773 - Path Traversal в Apache 2.4.49

CVE-2021-41773HIGHbajo ataqueransomware07 feb 2026

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

abrir ↗

GitHub PoC★ 4

This repository contains a Proof of Concept (PoC) for CVE-2025-49132, a critical vulnerability in Pterodactyl Panel versions < 1.11.11.

CVE-2025-49132CRITICAL07 feb 2026

Pterodactyl Panel Allows Unauthenticated Arbitrary Remote Code Execution

75RIESGO

abrir ↗

GitHub PoC

CVE-2026-24061 PoC

CVE-2026-24061CRITICALbajo ataque06 feb 2026

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment

100RIESGO

abrir ↗

GitHub PoC

A passive detection tool for identifying potential exposure to CVE-2026-24061 in GNU inetutils telnet installations

CVE-2026-24061CRITICALbajo ataque06 feb 2026

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment

100RIESGO

abrir ↗

GitHub PoC

theo543/OSDS_Paper_CVE-2016-5195

CVE-2016-5195HIGHbajo ataque06 feb 2026

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RIESGO

abrir ↗

GitHub PoC

CVE-2025-70962 PoC

CVE-2025-70962HIGH06 feb 2026

Zosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Access Control. The application contains hardcoded credentials

41RIESGO

abrir ↗

GitHub PoC★ 2

CVE-2018-13379 fortiOS vulnerability POC

CVE-2018-13379CRITICALbajo ataqueransomware05 feb 2026

An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.

100RIESGO

abrir ↗

GitHub PoC

CVE-2024-46987 - Camaleon CMS LFI Exploit

CVE-2024-46987HIGH05 feb 2026

Arbitrary path traversal in Camaleon CMS

61RIESGO

abrir ↗

GitHub PoC★ 1

RedTeamBlueTeam/CVE-2024-5084-Red-Team

CVE-2024-5084CRITICAL05 feb 2026

Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution

75RIESGO

abrir ↗

GitHub PoC★ 1

Exploit created using Python

CVE-2024-46987HIGH05 feb 2026

Arbitrary path traversal in Camaleon CMS

61RIESGO

abrir ↗

GitHub PoC★ 37

ZeroDayEvil/CVE-2026-50416-writeup-and-PoC

CVE-2026-50416LOW05 feb 2026

Win32k Information Disclosure Vulnerability

28RIESGO

abrir ↗

GitHub PoC

Exploit for CVE-2024-46987

CVE-2024-46987HIGH05 feb 2026

Arbitrary path traversal in Camaleon CMS

61RIESGO

abrir ↗

GitHub PoC★ 3

jduardo2704/CVE-2026-25643-Frigate-RCE

CVE-2026-25643CRITICAL05 feb 2026

Frigate Affected by Authenticated Remote Command Execution (RCE) and Container Escape

48RIESGO

abrir ↗

GitHub PoC

killsystema/scan-cve-2026-24061

CVE-2026-24061CRITICALbajo ataque05 feb 2026

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment

100RIESGO

abrir ↗

GitHub PoC

CVE-2025-32463

CVE-2025-32463CRITICALbajo ataque05 feb 2026

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

100RIESGO

abrir ↗

GitHub PoC

Log4Shell (CVE-2021-44228) security remediation demo - Showcasing Antigravity's ability to identify and fix critical security vulnerabilities in Java applications

CVE-2021-44228CRITICALbajo ataqueransomware05 feb 2026

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

abrir ↗

GitHub PoC★ 59

Advanced PoC & Research for CVE-2026-0828 (Safetica) and CVE-2025-7771 (ThrottleStop). Analysis of BYOVD (Bring Your Own Vulnerable Driver) TTPs for Ring 0 process termination and physical memory R/W. Researching EDR-Killer patterns, PPL bypasses, and kernel-mode primitives used by MedusaLocker and other threat actors.

CVE-2025-7771HIGH04 feb 2026

Code Execution / Escalation of Privileges in ThrottleStop

41RIESGO

abrir ↗

GitHub PoC

thai1012/cve-2020-0796

CVE-2020-0796CRITICALbajo ataqueransomware04 feb 2026

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h

100RIESGO

abrir ↗

GitHub PoC

Evillm/CVE-2025-27520-PoC

CVE-2025-27520CRITICAL04 feb 2026

BentoML Allows Remote Code Execution (RCE) via Insecure Deserialization

75RIESGO

abrir ↗

GitHub PoC

Evillm/CVE-2024-8856-PoC

CVE-2024-8856CRITICAL04 feb 2026

Backup and Staging by WP Time Capsule <= 1.22.21 - Unauthenticated Arbitrary File Upload

85RIESGO

abrir ↗

GitHub PoC

lavabyte/telnet-CVE-2026-24061

CVE-2026-24061CRITICALbajo ataque04 feb 2026

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment

100RIESGO

abrir ↗

GitHub PoC

Evillm/CVE-2025-49113-PoC

CVE-2025-49113CRITICALbajo ataque04 feb 2026

Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the

100RIESGO

abrir ↗

GitHub PoC

canpilayda/inetutils-telnetd-cve-2026-24061

CVE-2026-24061CRITICALbajo ataque04 feb 2026

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment

100RIESGO

abrir ↗

GitHub PoC

Evillm/CVE-2023-4634-PoC

CVE-2023-4634CRITICAL04 feb 2026

Media Library Assistant <= 3.09 - Unauthenticated Local/Remote File Inclusion & Remote Code Execution

85RIESGO

abrir ↗

GitHub PoC

Evillm/CVE-2025-55182-PoC

CVE-2025-55182CRITICALbajo ataqueransomware04 feb 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.