Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.780exploits catalogados

39.319CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.394Exploit-DB 24.485GitHub PoC 16.249VulnCheck XDB 9651Nuclei 4478Metasploit 3523✓ solo verificadosrecientes populares riesgo

16.249 exploits

GitHub PoC

[AI-assisted] Root method for Lenovo IdeaTab A1000G (MT8317, kernel 3.4.0, Android 4.1) via CVE-2016-5195 (Dirty COW)

CVE-2016-5195HIGHbajo ataque11 jul 2026

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RIESGO

abrir ↗

GitHub PoC

Cybersecurity Capstone Project completed during the NCSC Nashama CyberCamp 11, delivered in collaboration with IT Security C&T. The project demonstrates vulnerability assessment, exploitation, mitigation, and SIEM detection for Oracle WebLogic (CVE-2017-10271) and Apache Druid (CVE-2021-25646).

CVE-2017-10271HIGHbajo ataqueransomware11 jul 2026

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte

100RIESGO

abrir ↗

GitHub PoC

Lim-ahmin/CVE-2021-43798

CVE-2021-43798HIGHbajo ataque11 jul 2026

Grafana path traversal

100RIESGO

abrir ↗

GitHub PoC★ 1

Dahua CVE-2026-29114

CVE-2026-29114LOW11 jul 2026

A vulnerability has been found in some Dahua products. An attacker may obtain the device’s CA root certificate. If that

28RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2026-23744 MCPJam Inspector unauthenticated RCE PoC

CVE-2026-23744CRITICAL11 jul 2026

REC in MCPJam inspector due to HTTP Endpoint exposes

75RIESGO

abrir ↗

GitHub PoC

PoC for jenkins 2.63 CVE-2019-1003030

CVE-2019-1003030CRITICALbajo ataque11 jul 2026

A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src/main/java/org/

100RIESGO

abrir ↗

GitHub PoC★ 4

CVE-2026-46331 act_pedit page-cache corruption exploit, with Alpine PIE fix

CVE-2026-46331HIGH11 jul 2026

net/sched: fix pedit partial COW leading to page cache corruption

41RIESGO

abrir ↗

GitHub PoC

OS Command Injection in Health Check → Remote Code Execution

CVE-2026-59734HIGH11 jul 2026

Coolify: OS Command Injection in Health Check Configuration Allows Remote Code Execution

41RIESGO

abrir ↗

GitHub PoC

WHS 4기 이희수. kr-vulhub 과제 제출물

CVE-2021-41773HIGHbajo ataqueransomware11 jul 2026

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

abrir ↗

GitHub PoC

1beelze/CVE-2026-14894

CVE-2026-14894CRITICAL11 jul 2026

Super Forms <= 6.3.313 - Unauthenticated Arbitrary File Upload via 'data' Parameter (datauristring / value)

63RIESGO

abrir ↗

GitHub PoC

Wazuh + Suricata SOC lab detecting real exploits (CVE-2011-2523) and brute-force attacks, with custom detection rules for gaps in default IDS signatures.

CVE-2011-2523—11 jul 2026

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

60RIESGO

abrir ↗

GitHub PoC

Web application security assessment of DVWA using OWASP ZAP — vulnerability scanning, RCE (CVE-2012-1823) analysis, and remediation report.

CVE-2012-1823CRITICALbajo ataque11 jul 2026

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not

100RIESGO

abrir ↗

GitHub PoC★ 1

Azure IoT Hub where exposure of an owner-level Shared Access Key enables unauthenticated remote code execution (RCE) against connected IoT devices. Proof-Of-Concept

CVE-2026-13768CRITICAL11 jul 2026

Gardyn IoT Hub Use of Hard-coded Credentials

48RIESGO

abrir ↗

GitHub PoC★ 1

Dahua CVE-2026-29116

CVE-2026-29116HIGH11 jul 2026

A vulnerability has been found in some Dahua products could allow an unauthenticated remote attacker to send a specially

41RIESGO

abrir ↗

GitHub PoC★ 1

Dahua CVE-2026-29115

CVE-2026-29115MEDIUM11 jul 2026

A vulnerability has been found in some Dahua products could allow an authenticated remote attacker to send a specially c

33RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2026-46242

CVE-2026-46242HIGH11 jul 2026

eventpoll: fix ep_remove struct eventpoll / struct file UAF

41RIESGO

abrir ↗

GitHub PoC★ 3

This is an exploit for CVE-2026-46215 (Linux Kernel Use After Free) Adapted for Linux 7.0 !!! by Antonius (ev1lut10n / sw0rdm4n)

CVE-2026-46215HIGH11 jul 2026

drm: Set old handle to NULL before prime swap in change_handle

41RIESGO

abrir ↗

GitHub PoC

nvicloud/CVE-2026-12948

CVE-2026-12948MEDIUM10 jul 2026

Stored Cross-Site Scripting (XSS)

33RIESGO

abrir ↗

GitHub PoC

PoC for CVE-2026-56423: MISP deleteSelection broken access control (CWE-862, contributor hard-deletes other orgs' Event Reports/Sharing Groups, CVSS 8.8)

CVE-2026-56423CRITICAL10 jul 2026

MISP Core: Broken access control allows instance-wide unauthorized deletion of event reports and sharing groups via bulk deletion endpoints

48RIESGO

abrir ↗

GitHub PoC

0x77FSec/CVE-2026-23744

CVE-2026-23744CRITICAL10 jul 2026

REC in MCPJam inspector due to HTTP Endpoint exposes

75RIESGO

abrir ↗

GitHub PoC

CVE-2026-51833 Advisory

CVE-2026-51833HIGH10 jul 2026

Xenforo 2.3.8 is vulnerable to SSRF. Attackers that have administrator privileges or are able to add/save RSS feeds can

41RIESGO

abrir ↗

GitHub PoC

CVE-2025-60787 motionEye authenticated command injection RCE PoC

CVE-2025-60787HIGH10 jul 2026

MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration parameters such as image_file_name

61RIESGO

abrir ↗

GitHub PoC

Initial upload

CVE-2026-12352MEDIUM10 jul 2026

Incorrect Authorization

33RIESGO

abrir ↗

GitHub PoC

Exploit for CVE-2022-26134

CVE-2022-26134CRITICALbajo ataqueransomware10 jul 2026

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC

oPanel Authanticated Remote Code Execution via 'advenced/curl' Component

CVE-2026-50979HIGH10 jul 2026

A command injection vulnerability in the 'advanced/curl' component of Osbil Technology oPanel v1.19.50 and earlier allow

41RIESGO

abrir ↗

GitHub PoC

CVE-2026-54390 — JTL Shop Smarty SSTI RCE | Pre-Auth Template Injection via fetch('string:' . ) | 5.2.0-5.7.1

CVE-2026-54390CRITICAL10 jul 2026

JTL Shop < 5.7.2 Server-Side Template Injection via Smarty Renderer

48RIESGO

abrir ↗

GitHub PoC

oPanel DNS-Based Cross-Site Scripting (XSS) & Session Hijacking

CVE-2026-50980MEDIUM10 jul 2026

Cross-Site Scripting (XSS) vulnerability in the DNS lookup/management component of oPanel before v1.20.25 allows remote

33RIESGO

abrir ↗

GitHub PoC★ 2

A Proof of Concept (PoC) exploit for CVE-2026-46331

CVE-2026-46331HIGH10 jul 2026

net/sched: fix pedit partial COW leading to page cache corruption

41RIESGO

abrir ↗

GitHub PoC

Reproducer for CVE-2026-40859 — Apache Camel camel-netty-http / camel-vertx-http producer-side unsafe deserialization of HTTP response bodies (RCE)

CVE-2026-40859HIGH10 jul 2026

Apache Camel: Camel-Vertx-Http: Unsafe Java deserialization of HTTP response bodies via a raw ObjectInputStream when transferException is enabled

41RIESGO

abrir ↗

GitHub PoC

unpredictable21/halo-2.25.4-backup-write-CVE-2026-67920

CVE-2026-67920HIGH10 jul 2026

An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the run.halo.app.migration.impl.Migration

41RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.