Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.589exploits catalogados

34.508CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.554GitHub PoC 13.689VulnCheck XDB 8216Nuclei 4223Metasploit 3464✓ solo verificadosrecientes populares riesgo

75.589 exploits

GitHub PoC

Find out a modified Cacti public exploit!

CVE-2022-46169CRITICALbajo ataque02 jul 2025

Unauthenticated Command Injection

100RIESGO

abrir ↗

GitHub PoC★ 11

This repository contains a Proof of Concept (PoC) exploit for the **CVE-2025-47175** vulnerability found in Microsoft PowerPoint. The vulnerability is a Use-After-Free (UAF) bug that allows an attacker to execute arbitrary code by tricking a user into opening a specially crafted PPTX file.

CVE-2025-47175HIGH02 jul 2025

Microsoft PowerPoint Remote Code Execution Vulnerability

41RIESGO

abrir ↗

GitHub PoC★ 3

Wing FTP Server RCE via Lua Injection

CVE-2025-47812CRITICALbajo ataque02 jul 2025

In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection o

100RIESGO

abrir ↗

VulnCheck XDB

local

CVE-2025-32463CRITICALbajo ataque02 jul 2025

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

100RIESGO

abrir ↗

VulnCheck XDB

local

CVE-2025-32463CRITICALbajo ataque02 jul 2025

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

100RIESGO

abrir ↗

VulnCheck XDB

local

CVE-2025-32463CRITICALbajo ataque02 jul 2025

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2025-47812CRITICALbajo ataque02 jul 2025

In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection o

100RIESGO

abrir ↗

VulnCheck XDB

local

CVE-2025-32463CRITICALbajo ataque02 jul 2025

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

100RIESGO

abrir ↗

GitHub PoC

Python exploit for CVE-2021-41773 - Apache HTTP Server 2.4.49 Path Traversal vulnerability

CVE-2021-41773HIGHbajo ataqueransomware02 jul 2025

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

abrir ↗

GitHub PoC★ 1

MAVRICK-1/cve-2024-23113-test-env

CVE-2024-23113CRITICALbajo ataque02 jul 2025

A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.

90RIESGO

abrir ↗

VulnCheck XDB

local

CVE-2025-32463CRITICALbajo ataque02 jul 2025

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

100RIESGO

abrir ↗

Exploit-DB

Wing FTP Server 7.4.3 - Unauthenticated Remote Code Execution (RCE)

CVE-2025-47812CRITICALbajo ataqueremotemultiple02 jul 2025

In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection o

100RIESGO

abrir ↗

GitHub PoC

B1gN0Se/Tomcat-CVE-2025-31650

CVE-2025-31650HIGH02 jul 2025

Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame

53RIESGO

abrir ↗

GitHub PoC★ 3

Exploit for Local Privilege Escalation in Sudo via Malicious nsswitch.conf with sudo -R. (CVE-2025-32463)

CVE-2025-32463CRITICALbajo ataque02 jul 2025

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-46169CRITICALbajo ataque02 jul 2025

Unauthenticated Command Injection

100RIESGO

abrir ↗

GitHub PoC

robbert1978/CVE-2025-32463_POC

CVE-2025-32463CRITICALbajo ataque02 jul 2025

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

100RIESGO

abrir ↗

GitHub PoC

zhaduchanhzz/CVE-2025-32463_POC

CVE-2025-32463CRITICALbajo ataque02 jul 2025

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

100RIESGO

abrir ↗

VulnCheck XDB

infoleak

CVE-2021-41773HIGHbajo ataqueransomware02 jul 2025

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2025-6934 POC

CVE-2025-6934CRITICAL02 jul 2025

Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation via 'on_regiser_user'

68RIESGO

abrir ↗

GitHub PoC★ 469

Local Privilege Escalation to Root via Sudo chroot in Linux

CVE-2025-32463CRITICALbajo ataque02 jul 2025

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

100RIESGO

abrir ↗

GitHub PoC★ 4

SysMancer/CVE-2025-32463

CVE-2025-32463CRITICALbajo ataque02 jul 2025

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

100RIESGO

abrir ↗

GitHub PoC

neko205-mx/CVE-2025-32463_Exploit

CVE-2025-32463CRITICALbajo ataque02 jul 2025

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

100RIESGO

abrir ↗

GitHub PoC★ 526

Escalation of Privilege to the root through sudo binary with chroot option. CVE-2025-32463

CVE-2025-32463CRITICALbajo ataque01 jul 2025

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

100RIESGO

abrir ↗

GitHub PoC★ 29

CVE-2025-32463 Proof of concept

CVE-2025-32463CRITICALbajo ataque01 jul 2025

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

100RIESGO

abrir ↗

GitHub PoC★ 1

Proof of concept of CVE-2025-20282, the perfect 10.

CVE-2025-20282CRITICAL01 jul 2025

Cisco ISE API Unauthenticated Remote Code Execution Vulnerability

53RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2025-20282CRITICAL01 jul 2025

Cisco ISE API Unauthenticated Remote Code Execution Vulnerability

53RIESGO

abrir ↗

GitHub PoC★ 10

End-to-end simulation of a Python dependency confusion attack, sudo privilege escalation (CVE-2025-32463), and rootkit-based persistence - with full memory and network forensic analysis.

CVE-2025-32463CRITICALbajo ataque01 jul 2025

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

100RIESGO

abrir ↗

GitHub PoC★ 9

Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation

CVE-2025-6934CRITICAL01 jul 2025

Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation via 'on_regiser_user'

68RIESGO

abrir ↗

GitHub PoC★ 2

7r00t/cve-2025-32463-lab

CVE-2025-32463CRITICALbajo ataque01 jul 2025

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

100RIESGO

abrir ↗

GitHub PoC★ 31

Proof of Concept for CVE-2025-6218, demonstrating the exploitation of a vulnerability in WinRAR versions 7.11 and under, involving improper handling of archive extraction paths.

CVE-2025-6218HIGHbajo ataque01 jul 2025

RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability

93RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.