Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
87.899exploits catalogados
40.763CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.463Exploit-DB 24.489GitHub PoC 18.324VulnCheck XDB 10.507Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
87.899 exploits
GitHub PoC
Home network security assessment identifying CVE-2017-7494 SambaCry and implementing VLAN segmentation
Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allo
100RIESGO
abrir ↗GitHub PoC
CVE-2026-75045 - JetBrains YouTrack unauthenticated database backup download via shared draft signature (CVSS 9.1)
In JetBrains YouTrack before 2025.3.156085,
2026.1.13913,
2026.2.18112 an unauthenticated attacker could download data
48RIESGO
abrir ↗GitHub PoC
ydkdk12345-bot/CVE-2024-23897-CTF
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RIESGO
abrir ↗GitHub PoC
Reproducer for CVE-2026-85243 — Apache Camel camel-crypto-pgp integrity verification downgrade (CWE-354); Spring Boot + Quarkus, affected vs fixed
Apache Camel: Camel-Crypto-PGP Integrity Verification Downgrade via Attacker-Controlled Message Structure
33RIESGO
abrir ↗GitHub PoC
alvaroguzmancode/CVE-2026-99999
ipv4: validate checksum_start before completing checksum
48RIESGO
abrir ↗GitHub PoC★ 1
Corresponding source for the CVE-2026-64560 public binaries
posix-cpu-timers: Prevent UAF caused by non-leader exec() race
41RIESGO
abrir ↗GitHub PoC
Research for CYB 401
Glibc: buffer overflow in ld.so leading to privilege escalation
98RIESGO
abrir ↗GitHub PoC★ 2
CVE-2026-99999 (PwnEscape) reproduction: IPv4 csum_start validation bug — IHL rewrite and 32-byte kernel heap disclosure
ipv4: validate checksum_start before completing checksum
48RIESGO
abrir ↗GitHub PoC
Reproducer for CVE-2026-85257 — Apache Camel camel-cxf SOAP fault information disclosure (CWE-209); Spring Boot + Quarkus, affected vs fixed
Apache Camel: Camel-CXF Information Disclosure via Unmuted Consumer Exceptions
33RIESGO
abrir ↗GitHub PoC
An isolated-lab study of EternalBlue (MS17-010 / CVE-2017-0144)
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RIESGO
abrir ↗GitHub PoC★ 5
Ephemeral root for Samsung Galaxy devices via CVE-2026-43284 — stability fork of DirtyFrag. Reboot to undo.
xfrm: esp: avoid in-place decrypt on shared skb frags
78RIESGO
abrir ↗GitHub PoC
wonnnggge/CVE-2024-27198_CTF
In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible
100RIESGO
abrir ↗GitHub PoC
Reproducer for CVE-2026-85247 — Apache Camel camel-knative improper certificate validation (CWE-295); Spring Boot + Quarkus, affected vs fixed
Apache Camel: Camel-Knative Improper Certificate Validation When SSL Is Enabled Without a Truststore
33RIESGO
abrir ↗GitHub PoC
Reproducer for CVE-2026-85248 — Apache Camel camel-pqc concurrent Signature race / verification bypass (CWE-362); Spring Boot + Quarkus, affected vs fixed
Apache Camel: Camel-PQC Signature Verification Bypass via a Shared Unsynchronized Signature Instance
33RIESGO
abrir ↗GitHub PoC
Cybersecurity assignment on CVE-2024-27198
In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible
100RIESGO
abrir ↗GitHub PoC
Reproducer for CVE-2026-85249 — Apache Camel camel-tika metadata header injection (CWE-20); Spring Boot + Quarkus, affected vs fixed
Apache Camel: Camel-Tika Header Injection via Unfiltered Document Metadata
33RIESGO
abrir ↗GitHub PoC
CVE-2026-81963 - It is rated as "Important" by Microsoft. CVE-2026-85880 - CVE-2026-69414 -
Windows Update Stack Elevation of Privilege Vulnerability
71RIESGO
abrir ↗GitHub PoC
Reproducer for CVE-2026-83531 (Apache Camel camel-dynamic-router): the dynamic-router-control endpoint compiles an attacker-supplied predicate expression/language from the control message (expression-language / code injection) — Camel Spring Boot
Apache Camel: Camel-Dynamic-Router Control Endpoint Compiles Predicate Expressions Supplied by Control Messages
41RIESGO
abrir ↗GitHub PoC★ 23
CVE-2026-64560 staged security research package
posix-cpu-timers: Prevent UAF caused by non-leader exec() race
41RIESGO
abrir ↗GitHub PoC
Cybersecurity assignment analysing CVE-2024-3400, its severity, patch, Cyber Kill Chain, and incident response.
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RIESGO
abrir ↗GitHub PoC
Reproducer for CVE-2026-85251 — Apache Camel camel-http credential disclosure on redirect (CWE-200); Spring Boot, affected vs fixed
Apache Camel: Camel-HTTP Credential Disclosure to Cross-Host Redirect Targets
41RIESGO
abrir ↗GitHub PoC
CVE-2026-16723 reproduction toolkit - fastjson 1.2.83 jar: remote class-loading payload generator (ASM-built POC.class with @JSONType + clinit exec)
Remote Code Execution in fastjson 1.2.68–1.2.83
48RIESGO
abrir ↗GitHub PoC
CVE-2016-5195 Dirty COW analysis using the Cyber Kill Chain.
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RIESGO
abrir ↗GitHub PoC★ 2
kpatch livepatch build and load test for CVE-2026-99999 on Rocky Linux 8.10 (4.18.0-553.144.1.el8_10)
ipv4: validate checksum_start before completing checksum
48RIESGO
abrir ↗GitHub PoC
Reproducer for CVE-2026-85245 — Apache Camel camel-thrift cross-exchange data disclosure (CWE-488); Spring Boot, affected vs fixed
Apache Camel: Camel-Thrift Cross-Exchange Data Disclosure via a Shared Deserialization Target
33RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.