Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.526exploits catalogados
34.478CVEs con explotación pública
24.695probados en laboratorio
75.526 exploits
Exploit-DB
Simple File List WordPress Plugin 4.2.2 - File Upload to RCE
CVE-2020-36847CRITICALwebappsmultiple22 jul 2025
Simple File List < 4.2.3 - Remote Code Execution
68RIESGO
abrir
GitHub PoC
CVE-2025-32463
CVE-2025-32463CRITICALbajo ataque22 jul 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RIESGO
abrir
VulnCheck XDB
initial-access
CVE-2018-120722 jul 2025
Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute
60RIESGO
abrir
VulnCheck XDB
infoleak
CVE-2022-138622 jul 2025
Fusion Builder < 3.6.2 - Unauthenticated SSRF
60RIESGO
abrir
GitHub PoC
cve-2024-32002
CVE-2024-32002CRITICAL22 jul 2025
Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution
53RIESGO
abrir
VulnCheck XDB
initial-access
CVE-2023-7028CRITICALbajo ataque21 jul 2025
Weak Password Recovery Mechanism for Forgotten Password in GitLab
100RIESGO
abrir
GitHub PoC30
A in-the-wild V8 type confusion bug.
CVE-2024-4947CRITICALbajo ataque21 jul 2025
Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside
83RIESGO
abrir
VulnCheck XDB
client-side
CVE-2024-4947CRITICALbajo ataque21 jul 2025
Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside
83RIESGO
abrir
GitHub PoC
Python exploit for GeoServer (CVE-2024-36401) with JSP web shell upload
CVE-2024-36401CRITICALbajo ataque21 jul 2025
Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver
100RIESGO
abrir
GitHub PoC
This PowerShell script detects indicators of compromise for CVE-2025-53770 — a critical RCE vulnerability in Microsoft SharePoint. Created by @n1chr0x and @BlackRazer67
CVE-2025-53770CRITICALbajo ataqueransomware21 jul 2025
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RIESGO
abrir
GitHub PoC
CVE-2025-53770
CVE-2025-53770CRITICALbajo ataqueransomware21 jul 2025
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RIESGO
abrir
GitHub PoC1
A comprehensive PowerShell-based SharePoint security monitoring solution with CVE-2025-53770 protection, advanced DLL analysis, threat detection, and automated alerting capabilities.
CVE-2025-53770CRITICALbajo ataqueransomware21 jul 2025
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RIESGO
abrir
GitHub PoC43
POC
CVE-2025-53770CRITICALbajo ataqueransomware21 jul 2025
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RIESGO
abrir
GitHub PoC3
Bluefire-Redteam-Cybersecurity/bluefire-sharepoint-cve-2025-53770
CVE-2025-53770CRITICALbajo ataqueransomware21 jul 2025
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RIESGO
abrir
GitHub PoC312
SharePoint WebPart Injection Exploit Tool
CVE-2025-53770CRITICALbajo ataqueransomware21 jul 2025
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RIESGO
abrir
GitHub PoC
A critical zero-day vulnerability CVE‑2025‑53770 has been actively exploited in the wild against on-premises Microsoft SharePoint Server. Dubbed "ToolShell," this exploit leverages a deserialization flaw (variant of CVE‑2025‑49706, CVSS: 6.3).
CVE-2025-53770CRITICALbajo ataqueransomware21 jul 2025
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RIESGO
abrir
GitHub PoC1
This FORK of repository presents a proof-of-concept of CVE-2023-7028. I am only improve exploit usage
CVE-2023-7028CRITICALbajo ataque21 jul 2025
Weak Password Recovery Mechanism for Forgotten Password in GitLab
100RIESGO
abrir
GitHub PoC
Grafana image with DuckDB binary present vulnerable to exploit CVE-2024-9264
CVE-2024-9264CRITICAL21 jul 2025
Grafana SQL Expressions allow for remote code execution
85RIESGO
abrir
VulnCheck XDB
remote-with-credentials
CVE-2023-3864621 jul 2025
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
60RIESGO
abrir
VulnCheck XDB
initial-access
CVE-2025-53770CRITICALbajo ataqueransomware21 jul 2025
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RIESGO
abrir
VulnCheck XDB
initial-access
CVE-2025-53770CRITICALbajo ataqueransomware21 jul 2025
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RIESGO
abrir
GitHub PoC1
Comprueba si un servidor SharePoint on-premises es vulnerable a CVE-2025-53770
CVE-2025-53770CRITICALbajo ataqueransomware21 jul 2025
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RIESGO
abrir
GitHub PoC
Hunting for Critical SharePoint Vulnerability CVE-2025-53770
CVE-2025-53770CRITICALbajo ataqueransomware21 jul 2025
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RIESGO
abrir
GitHub PoC11
A deep dive into two critical Sudo vulnerabilities (CVE‑2025‑32463 & CVE‑2025‑32462) that enable local privilege escalation across major Linux distributions.
CVE-2025-32463CRITICALbajo ataque21 jul 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RIESGO
abrir
GitHub PoC18
ToolShell scanner - CVE-2025-53770 and detection information
CVE-2025-53770CRITICALbajo ataqueransomware21 jul 2025
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RIESGO
abrir
GitHub PoC45
Scanner for the SharePoint CVE-2025-53770 RCE zero day vulnerability.
CVE-2025-53770CRITICALbajo ataqueransomware21 jul 2025
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RIESGO
abrir
VulnCheck XDB
initial-access
CVE-2025-53770CRITICALbajo ataqueransomware21 jul 2025
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RIESGO
abrir
VulnCheck XDB
initial-access
CVE-2025-3408520 jul 2025
35RIESGO
abrir
GitHub PoC1
LiveHelperChat <=4.61 - Stored Cross Site Scripting (XSS) via Telegram Bot Username
CVE-2025-51396MEDIUM20 jul 2025
A stored cross-site scripting (XSS) vulnerability in Live Helper Chat v4.60 allows attackers to execute arbitrary web sc
33RIESGO
abrir
VulnCheck XDB
client-side
CVE-2025-48384HIGHbajo ataque20 jul 2025
Git allows arbitrary code execution through broken config quoting
71RIESGO
abrir
anteriorpágina 226 / 2518siguiente

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.