Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.780exploits catalogados

39.319CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.394Exploit-DB 24.485GitHub PoC 16.249VulnCheck XDB 9651Nuclei 4478Metasploit 3523✓ solo verificadosrecientes populares riesgo

16.249 exploits

GitHub PoC

A 16-year-old bug in the Linux kernel lets a rented VM break out and attack the host it runs on. Intel and AMD alike. Januscape is a use-after-free vulnerability in the KVM code that has been sitting there since 2010.

CVE-2026-53359HIGH15 jul 2026

KVM: x86: Fix shadow paging use-after-free due to unexpected role

41RIESGO

GitHub PoC

Reproducer for CVE-2026-46591: Apache Camel camel-neo4j Cypher injection via property names in CamelNeo4jMatchProperties, enabling authorization bypass / cross-label data exfiltration (fixed in 4.14.8/4.18.3/4.21.0)

CVE-2026-46591HIGH15 jul 2026

Apache Camel: Camel-Neo4j: JSON property names from the CamelNeo4jMatchProperties header are interpolated into the Cypher WHERE clause without validation, allowing Cypher injection (incomplete remediation of CVE-2025-66169)

41RIESGO

GitHub PoC★ 28

This repo contains a proof-of-concept exploit for CVE-2026-15409. It establishes non-root remote code execution on SonicWall SMA 1000 by implementing the Erlang protocol expected by localhost:1050 and tunneling it through the websocket for file r/w and arbitrary code execution via RPC calls.

CVE-2026-15409CRITICALbajo ataqueransomware15 jul 2026

A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A

93RIESGO

GitHub PoC

CVE-2025-60357- NoSQL(MongoDB) Injection POC

CVE-2025-60357HIGH15 jul 2026

AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEv

41RIESGO

GitHub PoC

Reproducer for CVE-2026-46585: Apache Camel camel-lucene QUERY header injection enabling authorization bypass / index data exfiltration (fixed in 4.14.8/4.18.3/4.21.0)

CVE-2026-46585HIGH15 jul 2026

Apache Camel Lucene: The query control headers used non-Camel-prefixed names (QUERY, RETURN_LUCENE_DOCS) that bypass the HTTP header filter, allowing an HTTP client to inject the full-text search query

41RIESGO

GitHub PoC

My portfolio showcasing vulnerability research (CVE-2026-11989, CVE-2026-11395) and automated threat orchestration engineering (Lucius Engine, TalonVigil).

CVE-2026-11989MEDIUM15 jul 2026

Bit integrations <= 2.8.7 - Unauthenticated Server-Side Request Forgery via Form Field Upload Mapping

33RIESGO

GitHub PoC

exploit for CVE-2022-42889

CVE-2022-42889—15 jul 2026

Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults

60RIESGO

GitHub PoC

Panduan mitigasi Januscape (CVE-2026-53359) AlmaLinux 9.5 production-safe + scripts

CVE-2026-53359HIGH15 jul 2026

KVM: x86: Fix shadow paging use-after-free due to unexpected role

41RIESGO

GitHub PoC

CVE-2026-15409 - Dectect

CVE-2026-15409CRITICALbajo ataqueransomware15 jul 2026

A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A

93RIESGO

GitHub PoC

WhatsWrongAndWhy/CVE-2015-1328

CVE-2015-1328—15 jul 2026

The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does no

50RIESGO

GitHub PoC

Technical analysis and safety-conscious research harness for CVE-2019-6447 in ES File Explorer for Android

CVE-2019-6447—15 jul 2026

The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary fi

50RIESGO

GitHub PoC★ 12

CVE-2026-56164 EOP Exploit

CVE-2026-56164MEDIUMbajo ataque15 jul 2026

Microsoft SharePoint Server Elevation of Privilege Vulnerability

63RIESGO

GitHub PoC

FzRsLLaSheR/CVE-2026-14960-CVE-2026-14961

CVE-2026-14960CRITICAL15 jul 2026

CVE-2026-14960

48RIESGO

GitHub PoC★ 1

罗技云掌机 · GhostLock CVE-2026-43499 root 尝试

CVE-2026-43499HIGH15 jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RIESGO

GitHub PoC★ 47

Xiaomi K70e (duchamp) one-click root via CVE-2026-43499 (IonStack) + KernelSU integration

CVE-2026-43499HIGH15 jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RIESGO

GitHub PoC

Cxyofficial/x200-cve-2026-43499

CVE-2026-43499HIGH15 jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RIESGO

GitHub PoC

ctnBobong32/CVE-2026-43499-so-build

CVE-2026-43499HIGH15 jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RIESGO

GitHub PoC★ 3

CvE-2026-43499偏移量计算

CVE-2026-43499HIGH15 jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RIESGO

GitHub PoC★ 3

CVE-2026-15409

CVE-2026-15409CRITICALbajo ataqueransomware15 jul 2026

A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A

93RIESGO

GitHub PoC★ 2

Raimu0x19/CVE-2026-13001

CVE-2026-13001CRITICAL15 jul 2026

Podlove Podcast Publisher <= 4.5.1 - Unauthenticated Arbitrary File Upload via podlove_image_cache_url Parameter

63RIESGO

GitHub PoC

Reproducer for CVE-2026-46588: Apache Camel camel-couchdb CouchDb* header injection (operation confusion) subverting a write-only endpoint into read + delete of arbitrary documents (fixed in 4.14.8/4.18.3/4.21.0)

CVE-2026-46588HIGH15 jul 2026

Apache Camel: CouchDB: Non-Camel-prefixed Exchange headers bypass HeaderFilterStrategy allowing operation override from untrusted input

41RIESGO

GitHub PoC★ 1

A containerized enterprise-style lab for researching and defending against CVE-2026-27483.

CVE-2026-27483HIGH15 jul 2026

MindsDB has Path Traversal in /api/files Leading to Remote Code Execution

56RIESGO

GitHub PoC★ 1

A modified method to root Android device with locked bootloader via new exploit. (Only for Samsung now or smthing like that devices cuz i ported it to N970U1), Fork of https://github.com/localhosts-A/CyberMeowfia

CVE-2026-43499HIGH15 jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RIESGO

GitHub PoC★ 10

CvE-2026-43499偏移量计算

CVE-2026-43499HIGH15 jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RIESGO

GitHub PoC★ 1

ctn-Qvo/CVE-2026-43499-so-build

CVE-2026-43499HIGH15 jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RIESGO

GitHub PoC★ 3

A lightweight, fast tool to scan and detect the "regreSSHion" OpenSSH remote code execution vulnerability (CVE-2024-6387).

CVE-2024-6387HIGH15 jul 2026

Openssh: regresshion - race condition in ssh allows rce/dos

63RIESGO

GitHub PoC

Kanak-CypherX/cve-2024-4577-lab

CVE-2024-4577CRITICALbajo ataqueransomware15 jul 2026

Argument Injection in PHP-CGI

100RIESGO

GitHub PoC★ 4

Pix for WooCommerce Unauthenticated File Upload via certificate_crt_path Parameter | CVSS 9.8

CVE-2026-3891CRITICAL15 jul 2026

Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload

68RIESGO

GitHub PoC

Reproducer for CVE-2026-46587: Apache Camel camel-couchbase CCB_* header injection enabling document disclosure, tampering, and TTL-forced data destruction (fixed in 4.14.8/4.18.3/4.21.0)

CVE-2026-46587HIGH15 jul 2026

Apache Camel: Couchbase: Non-Camel-prefixed Exchange headers bypass HeaderFilterStrategy allowing operation override from untrusted input

41RIESGO

GitHub PoC

Blog on CVE-2026-59827, Unsafe H2 query ouput deserialization

CVE-2026-59827CRITICAL15 jul 2026

Metabase: Unsafe Deserialization of H2 Query Results

48RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.