Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

85.883exploits catalogados

40.037CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 25.956Exploit-DB 24.488GitHub PoC 17.453VulnCheck XDB 9931Nuclei 4527Metasploit 3528✓ solo verificadosrecientes populares riesgo

17.453 exploits

GitHub PoC★ 1

Exploit for CVE-2019-18935

CVE-2019-18935CRITICALbajo ataqueransomware23 oct 2025

Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUp

100RIESGO

abrir ↗

GitHub PoC

srakkk/cve-2024-32002-hook

CVE-2024-32002CRITICAL23 oct 2025

Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution

53RIESGO

abrir ↗

GitHub PoC

srakkk/cve-2024-32002-demo

CVE-2024-32002CRITICAL23 oct 2025

Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution

53RIESGO

abrir ↗

GitHub PoC

Redux Python3 Version of CVE-2010-2861

CVE-2010-2861HIGHbajo ataqueransomware22 oct 2025

Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow re

100RIESGO

abrir ↗

GitHub PoC

cve-2023-2745

CVE-2023-2745MEDIUM22 oct 2025

WordPress Core < 6.2.1 - Directory Traversal

70RIESGO

abrir ↗

GitHub PoC

Script to obfuscate a payload the same way as it was done by the XZ utils attack (CVE-2024-3094)

CVE-2024-3094CRITICAL22 oct 2025

Xz: malicious code in distributed source

70RIESGO

abrir ↗

GitHub PoC

root Privileges

CVE-2021-3493HIGHbajo ataque22 oct 2025

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o

98RIESGO

abrir ↗

GitHub PoC★ 1

cesarbtakeda/CVE-2025-31161

CVE-2025-31161CRITICALbajo ataqueransomware21 oct 2025

CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unle

100RIESGO

abrir ↗

GitHub PoC★ 2

c4bsec/CVE-2025-31161

CVE-2025-31161CRITICALbajo ataqueransomware21 oct 2025

CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unle

100RIESGO

abrir ↗

GitHub PoC

moeinmiadi/CVE-2015-1635_PoC

CVE-2015-1635CRITICALbajo ataque20 oct 2025

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold an

100RIESGO

abrir ↗

GitHub PoC★ 6

专业级HTTP请求走私漏洞利用与自动化渗透测试工具

CVE-2025-55315CRITICAL19 oct 2025

ASP.NET Security Feature Bypass Vulnerability

60RIESGO

abrir ↗

GitHub PoC

CaelumIsMe/CVE-2019-9053-POC

CVE-2019-9053—19 oct 2025

An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve

35RIESGO

abrir ↗

GitHub PoC★ 3

Patch for CVE-2025-54236(a.k.a Session Reaper) which allows customer account takeover and RCE under certain conditions. This patch is actually a Magento 2 extension and universal compatible for Magento 2.3 & 2.4. If you cannot upgrade Magento or cannot apply the official hotfix, try this one.

CVE-2025-54236CRITICALbajo ataque19 oct 2025

Adobe Commerce | Improper Input Validation (CWE-20)

100RIESGO

abrir ↗

GitHub PoC★ 1

📋 ملخص مشروع MikroTik RouterOS 6.49.18 Exploit Kit 🎯 نظرة عامة تم إنشاء مشروع احترافي وشامل لاختراق أجهزة MikroTik RouterOS 6.49.18 يتضمن جميع المكونات المطلوبة مع واجهة عربية كاملة وتوثيق مفصل. ✅ المكونات المكتملة 1️⃣ سكربتات الاختراق (7 سكربتات ✅ المميزات الرئيسية 1🎯 دعم CVE-2023-30799 اقراء دليل ملخص شامل للاداة PROJECT_SUMMARY.md

CVE-2023-30799CRITICAL19 oct 2025

MikroTik RouterOS Administrator Privilege Escalation

48RIESGO

abrir ↗

GitHub PoC

Proof-of-Concept (POC) of a simple firewall in Python designed to mitigate the Spring4Shell (CVE-2022-22965) RCE attack by inspecting and blocking malicious request bodies.

CVE-2022-22965CRITICALbajo ataque19 oct 2025

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RIESGO

abrir ↗

GitHub PoC

robbin0919/CVE-2025-32463

CVE-2025-32463CRITICALbajo ataque19 oct 2025

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

100RIESGO

abrir ↗

GitHub PoC★ 7

Privilege escalation in Fedora Linux via ABRT (Automatic Bug Reporting Tool): CVE-2025-12744

CVE-2025-12744HIGH18 oct 2025

Abrt: command-injection in abrt leading to local privilege escalation

41RIESGO

abrir ↗

GitHub PoC

Custom vulnerable VM (Ubuntu 14.04) designed for teaching multi-stage penetration testing. Features 10 interconnected challenges across Forensics, Web Exploitation (SQLi, XSS), Cryptography, and Kernel Exploitation (OverlayFS/CVE-2015-1328) to achieve full root compromise.

CVE-2015-1328—18 oct 2025

The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does no

50RIESGO

abrir ↗

GitHub PoC

We are presented with a security alert indicating the detection of the Follina (CVE-2022-30190) vulnerability. A malicious Word document triggered msdt.exe execution, suggesting possible remote code execution on the host JonasPRD. Our task is to investigate the alert, confirm exploitation, assess impact, and recommend remediation.

CVE-2022-30190HIGHbajo ataqueransomware18 oct 2025

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 6

Proof-of-Concept

CVE-2025-33073HIGHbajo ataque18 oct 2025

Windows SMB Client Elevation of Privilege Vulnerability

93RIESGO

abrir ↗

GitHub PoC

End-to-end Domain Controller exploitation using Metasploit and Impacket: discovered DC10, exploited Zerologon (CVE-2020-1472), extracted NTLM hashes, gained SYSTEM shell, and established a Meterpreter session.

CVE-2020-1472MEDIUMbajo ataqueransomware18 oct 2025

Netlogon Elevation of Privilege Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 1

secvulnhub/CVE-2025-32463-EXPLOIT

CVE-2025-32463CRITICALbajo ataque17 oct 2025

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

100RIESGO

abrir ↗

GitHub PoC

autocode07/cisagov__check-cve-2019-19781.4142e02b

CVE-2019-19781CRITICALbajo ataqueransomware17 oct 2025

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RIESGO

abrir ↗

GitHub PoC

CVE-2024-27956

CVE-2024-27956CRITICAL17 oct 2025

WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability

85RIESGO

abrir ↗

GitHub PoC★ 1

Sudo Vulnerability Local PrivEsc (CVE-2025-32463) POC with Python

CVE-2025-32463CRITICALbajo ataque17 oct 2025

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

100RIESGO

abrir ↗

GitHub PoC

0axz-tools/CVE-2024-51793

CVE-2024-51793CRITICAL17 oct 2025

WordPress RepairBuddy plugin <= 3.8115 - Arbitrary File Upload vulnerability

48RIESGO

abrir ↗

GitHub PoC

CVE-2017-1000367

CVE-2017-1000367—17 oct 2025

Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_

23RIESGO

abrir ↗

GitHub PoC★ 1

Sudo Vulnerability Local PrivEsc (CVE-2025-32463) POC with Python

CVE-2025-32463CRITICALbajo ataque17 oct 2025

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

100RIESGO

abrir ↗

GitHub PoC★ 1

Yukik4z3/CVE-2025-24893

CVE-2025-24893CRITICALbajo ataque17 oct 2025

Remote code execution as guest via SolrSearchMacros request in xwiki

100RIESGO

abrir ↗

GitHub PoC

POC of CVE-2025-61882

CVE-2025-61882CRITICALbajo ataqueransomware16 oct 2025

Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integratio

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.