Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

85.883exploits catalogados

40.037CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 25.956Exploit-DB 24.488GitHub PoC 17.453VulnCheck XDB 9931Nuclei 4527Metasploit 3528✓ solo verificadosrecientes populares riesgo

17.453 exploits

GitHub PoC

- Vulnerable: sudo 1.9.14, 1.9.15, 1.9.16, 1.9.17 - Patched in: sudo 1.9.17p1 and later - Legacy versions older than 1.9.14 are not affected, as they don't support the --chroot option.

CVE-2025-32463CRITICALbajo ataque09 oct 2025

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

100RIESGO

GitHub PoC

Enviroment and Nuclei template to test CVE-2025-32463

CVE-2025-32463CRITICALbajo ataque09 oct 2025

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

100RIESGO

GitHub PoC

CVE-2024-32113-Apache-OFBiz<18.12.13-Exploit

CVE-2024-32113CRITICALbajo ataque09 oct 2025

Apache OFBiz: Path traversal leading to RCE

100RIESGO

GitHub PoC

syorik/CVE-2023-42793

CVE-2023-42793CRITICALbajo ataqueransomware09 oct 2025

In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

100RIESGO

GitHub PoC★ 2

CVE-2023-21554 PoC

CVE-2023-21554CRITICAL09 oct 2025

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

85RIESGO

GitHub PoC

foregenix/CVE-2023-39143

CVE-2023-39143CRITICAL09 oct 2025

PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or delete

85RIESGO

GitHub PoC

lastvocher/Hikvision-CVE-2017-7921-decryptor

CVE-2017-7921CRITICALbajo ataque08 oct 2025

An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16

100RIESGO

GitHub PoC

sudo --chroot exploit

CVE-2025-32463CRITICALbajo ataque08 oct 2025

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

100RIESGO

GitHub PoC★ 1

Reproduction and fix of the CVE-2025-29927 vulnerability.

CVE-2025-29927CRITICAL08 oct 2025

Authorization Bypass in Next.js Middleware

85RIESGO

GitHub PoC

Remote Code Execution PoC for Apache 2.4.49

CVE-2021-41773HIGHbajo ataqueransomware07 oct 2025

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

GitHub PoC★ 1

StoryChief <= 1.0.42 - Unauthenticated Arbitrary File Upload

CVE-2025-7441CRITICAL07 oct 2025

StoryChief <= 1.0.42 - Unauthenticated Arbitrary File Upload

75RIESGO

GitHub PoC★ 1

This repository contains an exploit script for CVE-2025-32463, a local privilege escalation involving `chroot` behavior in affected `sudo` versions (1.9.14 through 1.9.17)

CVE-2025-32463CRITICALbajo ataque07 oct 2025

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

100RIESGO

GitHub PoC

Authenticated API Key Exposure in Nagios Log Server 2024R1.3.1

CVE-2025-44823CRITICAL07 oct 2025

Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagi

53RIESGO

GitHub PoC★ 1

Advanced PostgreSQL database enumeration tool exploiting CVE-2024-39309 in Parse Server - Comprehensive SQL injection exploitation for security research

CVE-2024-39309CRITICAL07 oct 2025

ZDI-CAN-23894: Parse Server literalizeRegexPart SQL Injection Authentication Bypass Vulnerability

53RIESGO

GitHub PoC

CVE-2025-32462 & CVE-2025-32463

CVE-2025-32462LOW07 oct 2025

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allo

28RIESGO

GitHub PoC★ 5

Proof-of-Concept exploit for CVE-2025-9074 - Unauthenticated Docker API exposure allowing arbitrary container creation and host filesystem access.

CVE-2025-9074CRITICAL06 oct 2025

Docker Desktop allows unauthenticated access to Docker Engine API from containers

48RIESGO

GitHub PoC★ 1

compiled poc binary

CVE-2024-30088HIGHbajo ataqueransomware06 oct 2025

Windows Kernel Elevation of Privilege Vulnerability

83RIESGO

GitHub PoC

hybinn/CVE-2024-23897

CVE-2024-23897CRITICALbajo ataqueransomware06 oct 2025

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an

100RIESGO

GitHub PoC

exploit for CVE-2018-16763

CVE-2018-16763—05 oct 2025

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca

60RIESGO

GitHub PoC

shoucheng3/apache__struts_CVE-2020-17530_2-5-25

CVE-2020-17530CRITICALbajo ataque05 oct 2025

Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected

100RIESGO

GitHub PoC

WP-CVE-2025-6934 | Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation

CVE-2025-6934CRITICAL05 oct 2025

Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation via 'on_regiser_user'

68RIESGO

GitHub PoC★ 2

An Python Exp For "GeoServer"

CVE-2024-36401CRITICALbajo ataque04 oct 2025

Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver

100RIESGO

GitHub PoC

Explicação e demonstração da vulnerabilidade ZeroLogon (CVE-2020-1472)

CVE-2020-1472MEDIUMbajo ataqueransomware04 oct 2025

Netlogon Elevation of Privilege Vulnerability

100RIESGO

GitHub PoC★ 1

Simple script to attempt a Bypass on a server possibly vulnerable to CVE-2025-29927 (Next.js Middleware)

CVE-2025-29927CRITICAL04 oct 2025

Authorization Bypass in Next.js Middleware

85RIESGO

GitHub PoC

CVE-2025-60787 Poc - RCE - MotionEye <= 0.43.1b4

CVE-2025-60787HIGH03 oct 2025

MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration parameters such as image_file_name

61RIESGO

GitHub PoC★ 11

Arbitrary Function Call Exploit using the ThrottleStop driver

CVE-2025-7771HIGH03 oct 2025

Code Execution / Escalation of Privileges in ThrottleStop

41RIESGO

GitHub PoC★ 5

Unauthenticated Remote Code Execution in XWiki via SolrSearch Macro

CVE-2025-24893CRITICALbajo ataque02 oct 2025

Remote code execution as guest via SolrSearchMacros request in xwiki

100RIESGO

GitHub PoC

# CVE-2025-32463 – Sudo EoP Exploit (PoC) with precompiled .so

CVE-2025-32463CRITICALbajo ataque02 oct 2025

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

100RIESGO

GitHub PoC★ 13

watchtowrlabs/watchTowr-vs-WatchGuard-CVE-2025-9242

CVE-2025-9242CRITICALbajo ataque01 oct 2025

WatchGuard Firebox iked Out of Bounds Write Vulnerability

100RIESGO

GitHub PoC

CS50 Cybersecurity final project — Palo Alto OAuth token breach (CVE-2024-3400)

CVE-2024-3400CRITICALbajo ataqueransomware01 oct 2025

PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect

100RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.