Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

81.924exploits catalogados

38.251CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 24.506Exploit-DB 24.485GitHub PoC 15.787VulnCheck XDB 9186Nuclei 4448Metasploit 3512✓ solo verificadosrecientes populares riesgo

81.689 exploits

GitHub PoC★ 4

numanturle/CVE-2025-25279

CVE-2025-25279CRITICAL24 feb 2025

Arbitrary file read in Mattermost Boards via import & export board archive

53RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2023-22515CRITICALbajo ataqueransomware24 feb 2025

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited

100RIESGO

abrir ↗

VulnCheck XDB

local

CVE-2021-4034HIGHbajo ataqueransomware24 feb 2025

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

VulnCheck XDB

local

CVE-2025-0411HIGHbajo ataque23 feb 2025

7-Zip Mark-of-the-Web Bypass Vulnerability

83RIESGO

abrir ↗

GitHub PoC

WinVerifyTrust Signature Validation CVE-2013-3900 Mitigation (EnableCertPaddingCheck)

CVE-2013-3900MEDIUMbajo ataque23 feb 2025

WinVerifyTrust Signature Validation Vulnerability

75RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2024-10924CRITICAL23 feb 2025

Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass

85RIESGO

abrir ↗

GitHub PoC★ 2

cesarbtakeda/7-Zip-CVE-2025-0411-POC

CVE-2025-0411HIGHbajo ataque23 feb 2025

7-Zip Mark-of-the-Web Bypass Vulnerability

83RIESGO

abrir ↗

GitHub PoC★ 1

WordPress CVE-2024-10924 Exploit for Really Simple Security plugin

CVE-2024-10924CRITICAL23 feb 2025

Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass

85RIESGO

abrir ↗

GitHub PoC

Example usage: exploit.sh http://site.com

CVE-2023-1545HIGH22 feb 2025

SQL Injection in nilsteampassnet/teampass

41RIESGO

abrir ↗

GitHub PoC★ 1

funixone/CVE-2024-24919---Exploit-Script

CVE-2024-24919HIGHbajo ataqueransomware21 feb 2025

Information disclosure

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2025-24016: RCE in Wazuh server! Remote Code Execution

CVE-2025-24016CRITICALbajo ataque21 feb 2025

Remote code execution in Wazuh server

100RIESGO

abrir ↗

GitHub PoC★ 4

CVE-2023-1698 Proof of Concept (PoC)

CVE-2023-1698CRITICAL21 feb 2025

WAGO: WBM Command Injection in multiple products

85RIESGO

abrir ↗

VulnCheck XDB

infoleak

CVE-2024-24919HIGHbajo ataqueransomware21 feb 2025

Information disclosure

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2023-1698CRITICAL21 feb 2025

WAGO: WBM Command Injection in multiple products

85RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2024-2961HIGH20 feb 2025

The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4

78RIESGO

abrir ↗

Metasploit600

Remote Code Execution Vulnerability in XWiki Platform (CVE-2025-24893)

CVE-2025-24893CRITICALbajo ataque20 feb 2025

Remote code execution as guest via SolrSearchMacros request in xwiki

100RIESGO

abrir ↗

GitHub PoC★ 2

PoC of the vulnerability CVE-2024-23346

CVE-2024-23346CRITICAL20 feb 2025

pymatgen arbitrary code execution when parsing a maliciously crafted JonesFaithfulTransformation transformation_string

48RIESGO

abrir ↗

GitHub PoC

anu

CVE-2024-1651CRITICAL20 feb 2025

Torrentpier 2.4.1 - RCE

60RIESGO

abrir ↗

GitHub PoC

CVE-2025-24971 exploit

CVE-2025-24971CRITICAL20 feb 2025

OS Command Injection endpoint '/upload/init' parameter 'filename' (RCE) in DumpDrop

48RIESGO

abrir ↗

GitHub PoC★ 5

CVE-2025-24016: RCE in Wazuh server! Remote Code Execution

CVE-2025-24016CRITICALbajo ataque20 feb 2025

Remote code execution in Wazuh server

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2025-24016CRITICALbajo ataque20 feb 2025

Remote code execution in Wazuh server

100RIESGO

abrir ↗

VulnCheck XDB

denial-of-service

CVE-2023-44487HIGHbajo ataque19 feb 2025

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many

93RIESGO

abrir ↗

GitHub PoC

barcrange/CVE-2025-0108-Authentication-Bypass-checker

CVE-2025-0108HIGHbajo ataque19 feb 2025

PAN-OS: Authentication Bypass in the Management Web Interface

100RIESGO

abrir ↗

GitHub PoC★ 1

ishwardeepp/CVE-2025-0411-MoTW-PoC

CVE-2025-0411HIGHbajo ataque19 feb 2025

7-Zip Mark-of-the-Web Bypass Vulnerability

83RIESGO

abrir ↗

GitHub PoC★ 2

NSE script that checks for CVE-2025-0108 vulnerability in Palo Alto Networks PAN-OS

CVE-2025-0108HIGHbajo ataque19 feb 2025

PAN-OS: Authentication Bypass in the Management Web Interface

100RIESGO

abrir ↗

GitHub PoC★ 1

PAN-OS CVE POC SCRIPT

CVE-2025-0108HIGHbajo ataque19 feb 2025

PAN-OS: Authentication Bypass in the Management Web Interface

100RIESGO

abrir ↗

GitHub PoC

This report details exploiting Trickster via an XSS in PrestaShop (CVE-2024-34716) to gain www-data access, extracting database credentials for SSH as james. A root shell in Docker is obtained via ChangeDetection.io (CVE-2024-32651), revealing adam’s credentials, followed by root escalation with CVE-2023-47268 in PrusaSlicer.

CVE-2024-34716CRITICAL19 feb 2025

PrestaShop vulnerable to XSS via customer contact form in FO, through file upload

60RIESGO

abrir ↗

GitHub PoC

POC for CVE-2023-44487

CVE-2023-44487HIGHbajo ataque19 feb 2025

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many

93RIESGO

abrir ↗

Metasploit600

SPIP Saisies Plugin Unauthenticated RCE

CVE-2025-71243CRITICAL19 feb 2025

SPIP Saisies Plugin < 5.11.1 Remote Code Execution

63RIESGO

abrir ↗

GitHub PoC

A fully functional exploit for a stack-based buffer overflow vulnerability in VideoLan’s VLC Media Player 0.9.4 when processing TiVo files.

CVE-2008-4654—19 feb 2025

Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player

50RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.