Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.508exploits catalogados

40.258CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.095Exploit-DB 24.488GitHub PoC 17.831VulnCheck XDB 10.015Nuclei 4547Metasploit 3532✓ solo verificadosrecientes populares riesgo

17.831 exploits

GitHub PoC★ 1

Incorrect Privilege Assignment vulnerability in nssTheme Wp NssUser Register allows Privilege Escalation.This issue affects Wp NssUser Register: from n/a through 1.0.0.

CVE-2024-54363CRITICAL16 ene 2025

WordPress Wp NssUser Register plugin <= 1.0.0 - Privilege Escalation vulnerability

48RIESGO

GitHub PoC★ 1

Proof of concept for CVE-2022-31814

CVE-2022-31814CRITICAL16 ene 2025

pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as root via shell metachar

85RIESGO

GitHub PoC★ 66

watchtowrlabs/fortios-auth-bypass-check-CVE-2024-55591

CVE-2024-55591CRITICALbajo ataqueransomware16 ene 2025

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 thro

100RIESGO

GitHub PoC★ 1

Proof of concept for CVE-2022-31814

CVE-2022-31814CRITICAL16 ene 2025

pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as root via shell metachar

85RIESGO

GitHub PoC★ 31

Ivanti Connect Secure IFT TLS Stack Overflow pre-auth RCE (CVE-2025-0282)

CVE-2025-0282CRITICALbajo ataqueransomware15 ene 2025

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7

100RIESGO

GitHub PoC★ 271

POC exploit for CVE-2024-49138

CVE-2024-49138HIGHbajo ataque15 ene 2025

Windows Common Log File System Driver Elevation of Privilege Vulnerability

76RIESGO

GitHub PoC★ 1

Parses the System Snapshot from an Ivanti Connect Secure applicance to identify possible IOCs related to CVE-2023-46805, CVE-2024-21887 and CVE-2025-0282.

CVE-2025-0282CRITICALbajo ataqueransomware14 ene 2025

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7

100RIESGO

GitHub PoC★ 1

Parses the System Snapshot from an Ivanti Connect Secure applicance to identify possible IOCs related to CVE-2023-46805, CVE-2024-21887 and CVE-2025-0282.

CVE-2023-46805HIGHbajo ataqueransomware14 ene 2025

An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a re

100RIESGO

GitHub PoC★ 1

Parses the System Snapshot from an Ivanti Connect Secure applicance to identify possible IOCs related to CVE-2023-46805, CVE-2024-21887 and CVE-2025-0282.

CVE-2024-21887CRITICALbajo ataqueransomware14 ene 2025

A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x,

100RIESGO

GitHub PoC★ 1

Partners <= 0.2.0 - Unauthenticated PHP Object Injection

CVE-2024-56059CRITICAL13 ene 2025

WordPress Partners plugin <= 0.2.0 - PHP Object Injection vulnerability

48RIESGO

GitHub PoC★ 1

Chartify – WordPress Chart Plugin <= 2.9.5 - Unauthenticated Local File Inclusion via source

CVE-2024-10571CRITICAL13 ene 2025

Chartify – WordPress Chart Plugin <= 2.9.5 - Unauthenticated Local File Inclusion via source

63RIESGO

GitHub PoC★ 1

VRPConnector <= 2.0.1 - Unauthenticated PHP Object Injection

CVE-2024-56058CRITICAL13 ene 2025

WordPress VRPConnector plugin <= 2.0.1 - PHP Object Injection vulnerability

48RIESGO

GitHub PoC★ 3

CVE-2024-35250 PoC - Optimized & Condensed Form of Varwara's PoC

CVE-2024-35250HIGHbajo ataque13 ene 2025

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

91RIESGO

GitHub PoC★ 1

CVE-2024-11972 in Hunk Companion <1.9.0 allows unauthenticated attackers to exploit insecure REST API endpoints and install vulnerable plugins, risking RCE, SQLi, XSS, and backdoors.

CVE-2024-11972CRITICAL13 ene 2025

Hunk Companion < 1.9.0 - Unauthenticated Plugin Installation

75RIESGO

GitHub PoC★ 1

WP Hotel Booking <= 2.1.0 - Unauthenticated SQL Injection

CVE-2024-3605CRITICAL12 ene 2025

WP Hotel Booking <= 2.1.0 - Unauthenticated SQL Injection

63RIESGO

GitHub PoC★ 4

# CVE-2025-0282: Remote Code Execution Vulnerability in [StorkS]

CVE-2025-0282CRITICALbajo ataqueransomware12 ene 2025

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7

100RIESGO

GitHub PoC★ 1

RSVP ME <= 1.9.9 - Unauthenticated SQL Injection

CVE-2024-50491CRITICAL12 ene 2025

WordPress RSVP ME plugin <= 1.9.9 - SQL Injection vulnerability

48RIESGO

GitHub PoC★ 2

kcfg bypass example - CVE-2024-21338

CVE-2024-21338HIGHbajo ataqueransomware12 ene 2025

Windows Kernel Elevation of Privilege Vulnerability

83RIESGO

GitHub PoC

Nxploited/CVE-2024-10586-Poc

CVE-2024-10586CRITICAL12 ene 2025

Debug Tool <= 2.2 - Unauthenticated Arbitrary File Creation

48RIESGO

GitHub PoC

he Hunk Companion Plugin for WordPress: Vulnerable to Unauthorized Plugin Installation/Activation (Versions Up to and Including 1.8.4)

CVE-2024-9707CRITICAL12 ene 2025

Hunk Companion <= 1.8.4 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation

63RIESGO

GitHub PoC★ 17

CVE-2024-50603: Aviatrix Controller Unauthenticated Command Injection

CVE-2024-50603CRITICALbajo ataque12 ene 2025

An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996. Due to the improper neutraliza

100RIESGO

GitHub PoC★ 1

Subscribe to Category <= 2.7.4 - Unauthenticated SQL Injection

CVE-2023-32590CRITICAL12 ene 2025

WordPress Subscribe to Category Plugin <= 2.7.4 is vulnerable to SQL Injection

63RIESGO

GitHub PoC

poc-cve-2023-3824

CVE-2023-3824CRITICAL11 ene 2025

Buffer overflow and overread in phar_dir_read()

53RIESGO

GitHub PoC

A Python script to detect CVE-2024-41713, a directory traversal vulnerability in Apache HTTP Server, enabling unauthorized access to restricted resources. This tool is for educational purposes and authorized testing only. Unauthorized usage is unethical and illegal.

CVE-2024-41713CRITICALbajo ataqueransomware11 ene 2025

A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could

100RIESGO

GitHub PoC★ 1

Bludit 3.9.2 - Auth Bruteforce Bypass CVE:2019-17240 Refurbish In bash

CVE-2019-17240LOW11 ene 2025

bl-kernel/security.class.php in Bludit 3.9.2 allows attackers to bypass a brute-force protection mechanism by using many

40RIESGO

GitHub PoC

Nxploited/CVE-2024-9932-POC

CVE-2024-9932CRITICAL11 ene 2025

Wux Blog Editor <= 3.0.0 - Unauthenticated Arbitrary File Upload

60RIESGO

GitHub PoC

Exploit implementation for CVE-2021-21551

CVE-2021-21551HIGHbajo ataque11 ene 2025

Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privile

100RIESGO

GitHub PoC★ 1

GiveWP – Donation Plugin and Fundraising Platform <= 3.19.2 - Unauthenticated PHP Object Injection

CVE-2024-12877CRITICAL11 ene 2025

GiveWP – Donation Plugin and Fundraising Platform <= 3.19.2 - Unauthenticated PHP Object Injection

48RIESGO

GitHub PoC

Nxploited/CVE-2024-49328-exploit

CVE-2024-49328CRITICAL11 ene 2025

WordPress WP REST API FNS Plugin plugin <= 1.0.0 - Account Takeover vulnerability

48RIESGO

GitHub PoC★ 53

CVE-2025-0282 is a critical vulnerability found in Ivanti Connect Secure, allowing Remote Command Execution (RCE) through a buffer overflow exploit.

CVE-2025-0282CRITICALbajo ataqueransomware11 ene 2025

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7

100RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.