Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
83.636exploits catalogados
39.241CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.347Exploit-DB 24.485GitHub PoC 16.167VulnCheck XDB 9636Nuclei 4478Metasploit 3523✓ solo verificadosrecientespopularesriesgo
16.168 exploits
GitHub PoC★ 1
CVE-2026-65343 PoC — AppleKeyStore OOB read → KASLR defeat (iOS 26.6 / 23G71)
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.
41RIESGO
abrir ↗GitHub PoC
SOC investigation of CVE-2024-49138 exploitation involving brute-force activity, PowerShell execution, malicious payload analysis, privilege escalation, and incident response.
Windows Common Log File System Driver Elevation of Privilege Vulnerability
76RIESGO
abrir ↗GitHub PoC
Saku0512/CVE-2026-84361-poc
Composer: Perforce source URL permits P4PORT `rsh:` command execution
41RIESGO
abrir ↗GitHub PoC
CVE-2026-9335: KerasFileEditor and load_weights follow h5py ExternalLinks, disclosing arbitrary local HDF5 file contents in keras ≤ 3.14.0. Advisory + verified PoCs.
Improper Handling of HDF5 ExternalLinks in keras-team/keras
33RIESGO
abrir ↗GitHub PoC
Cypht CVE-2026-71981 PoC
Cypht < 2.12.2 PHP Object Injection RCE via back_query Parameter
41RIESGO
abrir ↗GitHub PoC★ 6
CVE-2026-82329 — JFrog Artifactory (self-hosted) Auth Bypass
Potential authentication bypass leading to administrative access in Artifactory
98RIESGO
abrir ↗GitHub PoC
tcollins-hashicorp/vault-cve-2026-5006-audit
Vault Vulnerable to Privilege Escalation via Slash Injection in Templated Policy Paths
33RIESGO
abrir ↗GitHub PoC★ 86
CVE-2026-65343 PoC — AppleKeyStore OOB read → KASLR defeat (iOS 26.6 / 23G71)
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.
41RIESGO
abrir ↗GitHub PoC
nabeelmkhan/CVE-2026-78839
An arbitrary file upload vulnerability in AppNitro MachForm v30 allows attackers to execute arbitrary code via uploading
41RIESGO
abrir ↗GitHub PoC★ 3
CVE-2026-65349 PoC — getattrlist OOB write in vfs_attr_pack_internal (iOS 26.6 / 23G71)
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1,
33RIESGO
abrir ↗GitHub PoC
Exploitation des vulnérabilités sur la version vsftpd 2.3.4 du service ftp (CVE-2011-2523)
vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.
60RIESGO
abrir ↗GitHub PoC
CVE-2026-38577
Insecure hardcoded credentials in the Admin account of Tenda HG21 V4.0.0-260302 allows attackers to gain root access.
48RIESGO
abrir ↗GitHub PoC
CVE-2026-9586 - Draft or TODO
Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMB
98RIESGO
abrir ↗GitHub PoC
Proof of concept exploit code for CVE-2026-5027
Langflow - Path Traversal Arbitrary File Write via upload_user_file
56RIESGO
abrir ↗GitHub PoC
nabeelmkhan/CVE-2026-78838
A reflected cross-site scripting (XSS) vulnerability in the grid_datasource.php component of AppNitro MachForm v30 allow
33RIESGO
abrir ↗GitHub PoC
ChrisBarack/cve-2025-55182
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir ↗GitHub PoC
nabeelmkhan/CVE-2026-78837
A SQL injection vulnerability in the ap_form_{id} parameter in AppNitro MachForm v30 allows attackers to access sensitiv
41RIESGO
abrir ↗GitHub PoC★ 1
Python exploit for the vsFTPd 2.3.4 backdoor (CVE-2011-2523).
vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.
60RIESGO
abrir ↗GitHub PoC
EXEcution-py/CVE-2026-9055
Booking for Appointments and Events Calendar – Amelia (Premium) 8.0 - 9.6.2 - Unauthenticated Privilege Escalation to Administrator via 'externalId'
48RIESGO
abrir ↗GitHub PoC★ 1
Using TCP Fast Open to bypass syscall-based networking rules (CVE-2026-63828/CVE-2026-72243 PoC)
apparmor: mediate the implicit connect of TCP fast open sendmsg
41RIESGO
abrir ↗GitHub PoC
A PoC for ZDI-CAN-28834/CVE-2026-83603, which allows local privilege escalation using netdata and fail2ban-client
Netdata: Local Root via ndsudo Arbitrary socket_path → fail2ban-client Pickle RCE
41RIESGO
abrir ↗GitHub PoC
CVE-2026-43284 and CVE-2026-43500 Dirty Frag PoC and exploit
xfrm: esp: avoid in-place decrypt on shared skb frags
56RIESGO
abrir ↗GitHub PoC★ 18
NetScaler ADC/Gateway SAML unsigned-assertion bypass via HTTP-Redirect binding (CTX696939) - root cause analysis + PoC
NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490
83RIESGO
abrir ↗GitHub PoC★ 6
CVE-2026-65330 PoC — setxattr PAC bypass via fixed #0x307a diversifier (iOS 26.6 / 23G71)
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoi
33RIESGO
abrir ↗GitHub PoC
byt3l0rd/CVE-2026-73570
A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp
100RIESGO
abrir ↗GitHub PoC
CVE-2026-73296
Microsoft UFO: Unauthenticated Mobile MCP access allows remote Android device control and screen disclosure
48RIESGO
abrir ↗GitHub PoC
SAP-system-update/CVE-2026-58231
Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)
48RIESGO
abrir ↗GitHub PoC★ 1
CVE-2026-82329 — JFrog Artifactory unauthenticated authentication bypass ("phantom join key" -> forged service admin token)
Potential authentication bypass leading to administrative access in Artifactory
98RIESGO
abrir ↗GitHub PoC
CVE-2026-38577
Insecure hardcoded credentials in the Admin account of Tenda HG21 V4.0.0-260302 allows attackers to gain root access.
48RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.