Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.713exploits catalogados

39.298CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.379Exploit-DB 24.485GitHub PoC 16.200VulnCheck XDB 9648Nuclei 4478Metasploit 3523✓ solo verificadosrecientes populares riesgo

16.200 exploits

GitHub PoC

Manage BitLocker encrypted drives on Windows 10 and 11. Extract recovery keys, check encryption status, and apply security mitigations for CVE-2026-45585.

CVE-2026-45585MEDIUM25 jul 2026

Windows BitLocker Security Feature Bypass Vulnerability

33RIESGO

GitHub PoC

Security Advisory for CVE-2026-51565

CVE-2026-51565MEDIUM25 jul 2026

Cross-site scripting (XSS) vulnerability in Modules/Docs/DocsController.php in Milk admin <=0.9.8 allows remote attacker

33RIESGO

GitHub PoC★ 30

CVE-2026-54121 - CertiGhost AD CS Multi-Exploit Framework | Rogue DC + LDAP spoofing, certificate abuse, PKINIT hash extraction, auto DCSync. Safe Checker + full exploit, multi-threaded mass scan, Shodan integration, JSON/CSV/JSONL output. CVSS 8.8 High. Use Ethically, Stay Legal :v

CVE-2026-54121HIGH25 jul 2026

Active Directory Certificate Services Elevation of Privilege Vulnerability

41RIESGO

GitHub PoC★ 2

CVE-2026-54121

CVE-2026-54121HIGH25 jul 2026

Active Directory Certificate Services Elevation of Privilege Vulnerability

41RIESGO

GitHub PoC★ 1

Technical analysis and Proof-of-Concept for CVE-2026-60206, a critical Oracle WebLogic Server SAML authentication bypass vulnerability.

CVE-2026-60206CRITICAL25 jul 2026

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

48RIESGO

GitHub PoC★ 43

CVE-2026-50522 PoC

CVE-2026-50522CRITICALbajo ataque25 jul 2026

Microsoft SharePoint Remote Code Execution Vulnerability

78RIESGO

GitHub PoC

Auth Bypass in inetutils-telnetd

CVE-2026-24061CRITICALbajo ataque25 jul 2026

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment

100RIESGO

GitHub PoC

Security Advisory for CVE-2026-51564

CVE-2026-51564MEDIUM25 jul 2026

An issue in the redirect parameter in Milk admin <=0.9.8 allows remote attackers to redirect users to arbitrary external

33RIESGO

GitHub PoC★ 2

Technical analysis and advisory for CVE-2026-48908: Unauthenticated Arbitrary File Upload to RCE in JoomShaper SP Page Builder.

CVE-2026-48908CRITICALbajo ataque25 jul 2026

Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2

100RIESGO

GitHub PoC

Manage BitLocker encrypted drives on Windows. Extract recovery keys, check encryption status, and apply security mitigations for CVE-2026-45585.

CVE-2026-45585MEDIUM25 jul 2026

Windows BitLocker Security Feature Bypass Vulnerability

33RIESGO

GitHub PoC★ 5

CVE-2026-43499 per-boot root exploit — core logic (arm64 Android GKI 6.6)

CVE-2026-43499HIGH25 jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RIESGO

GitHub PoC

CVE-2026-54121 - Draft

CVE-2026-54121HIGH25 jul 2026

Active Directory Certificate Services Elevation of Privilege Vulnerability

41RIESGO

GitHub PoC★ 17

（CVE-2026-43499）内核漏洞利用程序，适用于未解锁 Bootloader 的一加15T.

CVE-2026-43499HIGH25 jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RIESGO

GitHub PoC★ 1

CVE-2026-16723

CVE-2026-16723CRITICAL25 jul 2026

Remote Code Execution in fastjson 1.2.68–1.2.83

48RIESGO

GitHub PoC★ 3

Technical analysis, root cause breakdown, and non-destructive detection methodology for CVE-2026-63030.

CVE-2026-63030CRITICALbajo ataque25 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

98RIESGO

GitHub PoC

CVE-2026-12960 - Improper Export of Android Application Components in the ASUS Router app (com.asus.aihome). PoC, exploit APK, video, and vendor report. Fixed in 1.0.0.9.74.

CVE-2026-12960MEDIUM25 jul 2026

An Improper Export of Android Application Components vulnerability in ASUS Router App allows a third-party application o

33RIESGO

GitHub PoC★ 1

CypherHippie/CVE-2026-66804

CVE-2026-66804HIGH25 jul 2026

Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

41RIESGO

GitHub PoC

kxom9ks/CVE-2024-27198-TeamCity

CVE-2024-27198CRITICALbajo ataqueransomware24 jul 2026

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

100RIESGO

GitHub PoC★ 1

最原始的

CVE-2026-43499HIGH24 jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RIESGO

GitHub PoC

Security Advisory: Negative Chunk-Size Parsing Causes Memory Corruption in facil.io

CVE-2026-66731HIGH24 jul 2026

facil.io 0.7.5 - 0.7.6 HTTP/1.1 Chunked Transfer Encoding Parser Crash DoS

41RIESGO

GitHub PoC

Security Advisory: Infinite Loop DoS in facil.io MIME Parser (Partial Boundary)

CVE-2026-66730HIGH24 jul 2026

facil.io 0.6.0 - 0.7.6 Infinite Loop DoS via Multipart MIME Body Parser

41RIESGO

GitHub PoC★ 1

CVE-2026-41940

CVE-2026-41940CRITICALbajo ataqueransomware24 jul 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RIESGO

GitHub PoC

manfredgabriel/cve-2021-43798-lab

CVE-2021-43798HIGHbajo ataque24 jul 2026

Grafana path traversal

100RIESGO

GitHub PoC★ 3

IBM Langflow Unauthenticated RCE via Auto-Login Bypass

CVE-2026-9198CRITICALbajo ataque24 jul 2026

Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation

98RIESGO

GitHub PoC★ 4

CVE-2026-60206 - Oracle WebLogic SAML Auth Bypass Exploit Framework | Bash & Python versions. Features: --detect safe check, --exploit combo/unsigned/xsw/nameid/all, --shodan integration, --tor support, mass scanning, JSON/CSV/JSONL output, cookie validation. CVSS 9.9 Critical - Use Ethically, Stay Legal.

CVE-2026-60206CRITICAL24 jul 2026

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

48RIESGO

GitHub PoC★ 1

Discuz! X5.0 Authentication Bypass Exploit Framework (CVE-2026-49952) - Critical vulnerability allowing unauthenticated database backup access via UC_KEY encryption oracle token reuse. CVSS 9.1. Full-featured tool with version detection, multi-payload attacks, interactive shell, and automated exploitation. Authorized testing only.

CVE-2026-49952CRITICAL24 jul 2026

Discuz! X5.0 Authentication Bypass via dbbak.php Encryption Oracle

63RIESGO

GitHub PoC★ 2

CVE-2026-60206

CVE-2026-60206CRITICAL24 jul 2026

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

48RIESGO

GitHub PoC

blue-chocolates/CVE-2016-10033

CVE-2016-10033CRITICALbajo ataque24 jul 2026

The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra para

100RIESGO

GitHub PoC★ 35

cve cve-2026-60206 weblogic saml exploit poc vulnerability oracle scanner security

CVE-2026-60206CRITICAL24 jul 2026

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

48RIESGO

GitHub PoC

Pedit COW – Linux Kernel Local Privilege Escalation (CVE-2026-46331)

CVE-2026-46331HIGH24 jul 2026

net/sched: fix pedit partial COW leading to page cache corruption

41RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.