Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

81.689exploits catalogados
38.075CVEs con explotación pública
24.695probados en laboratorio
81.689 exploits
VulnCheck XDB
infoleak
CVE-2025-29927CRITICAL06 jul 2025
Authorization Bypass in Next.js Middleware
85RIESGO
abrir ↗
GitHub PoC
Citrix Bleed 2 PoC Scanner (CVE-2025-5777)
CVE-2025-5777CRITICALbajo ataqueransomware06 jul 2025
NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread
100RIESGO
abrir ↗
GitHub PoC★ 2
CVE-2024-55963, allows unauthenticated remote code execution on Appsmith Enterprise platform due to a misconfigured PostgreSQL database included by default
CVE-2024-55963MEDIUM06 jul 2025
An issue was discovered in Appsmith before 1.51. A user on Appsmith that doesn't have admin permissions can trigger the
45RIESGO
abrir ↗
GitHub PoC★ 3
ibrahmsql/CVE-2023-45131
CVE-2023-45131HIGH06 jul 2025
Unauthenticated access to new private chat messages in Discourse
41RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2025-5777CRITICALbajo ataqueransomware06 jul 2025
NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread
100RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2025-5777CRITICALbajo ataqueransomware06 jul 2025
NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-25646—06 jul 2025
Authenticated users can override system configurations in their requests which allows them to execute arbitrary code.
60RIESGO
abrir ↗
GitHub PoC
hklabCR/CVE-2011-2523
CVE-2011-2523—06 jul 2025
vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.
60RIESGO
abrir ↗
GitHub PoC★ 2
CitrixBleed-2 Checker & Poc automatic exploit and check token.
CVE-2025-5777CRITICALbajo ataqueransomware06 jul 2025
NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2022-37969HIGHbajo ataqueransomware06 jul 2025
Windows Common Log File System Driver Elevation of Privilege Vulnerability
76RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2025-20281CRITICALbajo ataque06 jul 2025
Cisco ISE API Unauthenticated Remote Code Execution Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2025-32463CRITICALbajo ataque06 jul 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2025-32463CRITICALbajo ataque06 jul 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2024-36991HIGH06 jul 2025
Path Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows
61RIESGO
abrir ↗
GitHub PoC★ 5
Proof of Concept for CVE-2025-32463 Local privilege escalation exploit targeting sudo -R on vulnerable Linux systems. For educational and authorized security testing only.
CVE-2025-32463CRITICALbajo ataque06 jul 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RIESGO
abrir ↗
GitHub PoC★ 9
A PoC exploit for CVE-2025-32463 - Sudo Privilege Escalation
CVE-2025-32463CRITICALbajo ataque06 jul 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RIESGO
abrir ↗
GitHub PoC★ 1
Chocapikk/CVE-2025-32463-lab
CVE-2025-32463CRITICALbajo ataque06 jul 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RIESGO
abrir ↗
GitHub PoC
Ruby on Rails Web Console Exploit (CVE-2015-3224)
CVE-2015-3224—06 jul 2025
request.rb in Web Console before 2.1.3, as used with Ruby on Rails 3.x and 4.x, does not properly restrict the use of X-
50RIESGO
abrir ↗
GitHub PoC★ 3
ibrahmsql/CVE-2021-41163
CVE-2021-41163CRITICAL05 jul 2025
RCE via malicious SNS subscription payload
53RIESGO
abrir ↗
GitHub PoC★ 2
ibrahmsql/discourse-CVE-2021-41163
CVE-2021-41163CRITICAL05 jul 2025
RCE via malicious SNS subscription payload
53RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-27350CRITICALbajo ataqueransomware05 jul 2025
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Bui
100RIESGO
abrir ↗
GitHub PoC
CVE-2025-32463
CVE-2025-32463CRITICALbajo ataque05 jul 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RIESGO
abrir ↗
VulnCheck XDB
client-side
CVE-2025-6554HIGHbajo ataque05 jul 2025
Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write v
76RIESGO
abrir ↗
GitHub PoC
CitrixBleed2 poc
CVE-2025-5777CRITICALbajo ataqueransomware05 jul 2025
NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread
100RIESGO
abrir ↗
VulnCheck XDB
client-side
CVE-2025-24071MEDIUM05 jul 2025
Microsoft Windows File Explorer Spoofing Vulnerability
38RIESGO
abrir ↗
GitHub PoC
Royall-Researchers/CVE-2025-24071
CVE-2025-24071MEDIUM05 jul 2025
Microsoft Windows File Explorer Spoofing Vulnerability
38RIESGO
abrir ↗
VulnCheck XDB
client-side
CVE-2025-6554HIGHbajo ataque05 jul 2025
Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write v
76RIESGO
abrir ↗
GitHub PoC★ 3
Memory disclosure vulnerability in Citrix NetScaler ADC and Gateway when configured as a Gateway (VPN virtual server, ICA proxy, CVPN, RDP Proxy).
CVE-2025-5777CRITICALbajo ataqueransomware05 jul 2025
NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2025-32463CRITICALbajo ataque05 jul 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RIESGO
abrir ↗
GitHub PoC
gmh5225/CVE-2025-6554
CVE-2025-6554HIGHbajo ataque05 jul 2025
Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write v
76RIESGO
abrir ↗
← anteriorpágina 317 / 2723siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.