Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
87.464exploits catalogados
40.695CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
87.464 exploits
GitHub PoC
PoC and research for CVE-2026-123014: iTerm2 x-man-page NUL-byte argument injection.
iTerm2 before 3.7.7beta2 has an argument injection vulnerability in the x-man-page: URL handler, allowing an attacker to
41RIESGO
abrir ↗VulnCheck XDB
initial-access
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RIESGO
abrir ↗VulnCheck XDB
local
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir ↗GitHub PoC
CVE-2026-118423 — WP Libre Form <= 1.5.0.1 unauthenticated file upload to RCE (PoC, lab-verified)
WP Libre Form 1.5.0.1 - Unauthenticated RCE via Arbitrary File Upload
48RIESGO
abrir ↗VulnCheck XDB
local
The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishan
76RIESGO
abrir ↗GitHub PoC
CVE-2026-118570 — CSRF on the Drupal fasttoggle toggle route
Fasttoggle - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2026-283
33RIESGO
abrir ↗VulnCheck XDB
initial-access
WP Libre Form 1.5.0.1 - Unauthenticated RCE via Arbitrary File Upload
48RIESGO
abrir ↗VulnCheck XDB
initial-access
WP Libre Form 1.5.0.1 - Unauthenticated RCE via Arbitrary File Upload
48RIESGO
abrir ↗GitHub PoC
A simple reproducer for CVE-2026-123158
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentica
41RIESGO
abrir ↗VulnCheck XDB
initial-access
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir ↗GitHub PoC
3jee/CVE-2026-120491
Wing FTP Server before 8.2.6 Stored XSS via nowpath in Legacy Activity Page
33RIESGO
abrir ↗GitHub PoC
CVE-2026-114630 - ELEX HelpDesk <= 3.3.8 unauthenticated arbitrary file deletion (PoC + exploit by thiscitze)
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.8 - Unauthenticated Arbitrary File Deletion via 'ticket_attachment_path' Parameter
45RIESGO
abrir ↗VulnCheck XDB
initial-access
WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query
78RIESGO
abrir ↗GitHub PoC★ 1
hackzuoji/freeswitch-cve-2026-116779-POC
FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commands
48RIESGO
abrir ↗GitHub PoC
PHP session.upload_progress CVE-2026-109618 lab PoC and research notes
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
A scanner for *sshole SSH vulnerability (CVE-2026-123158)
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentica
41RIESGO
abrir ↗GitHub PoC
Find Dockerfiles that ship an sshd exposed to *sshole (CVE-2026-123158). CLI, pre-commit hook and GitHub Action.
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentica
41RIESGO
abrir ↗GitHub PoC
Ansible playbook that upgrades OpenSSH to 10.6p2 on Alpine Linux to remediate CVE-2026-123158
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentica
41RIESGO
abrir ↗VulnCheck XDB
info-leak
An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16
100RIESGO
abrir ↗GitHub PoC
sshole漏洞复现，CVE-2026-123158
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentica
41RIESGO
abrir ↗VulnCheck XDB
initial-access
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentica
41RIESGO
abrir ↗GitHub PoC★ 1
OpenSSH + musl password authentication bypass (sshole) checker: local precondition audit + remote verification; for authorized testing
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentica
41RIESGO
abrir ↗GitHub PoC
OpenSSH sshole(CVE-2026-123158) 알파인 sshd 점검을 벨로키와 쉽게 보기
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentica
41RIESGO
abrir ↗GitHub PoC★ 1
sshole (CVE-2026-123158): OpenSSH password bypass on alpine Linux
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentica
41RIESGO
abrir ↗GitHub PoC
kjry8sb/CVE-2026-19219
DialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAX
41RIESGO
abrir ↗GitHub PoC
OS command injection as root via Google Cloud DNS challenge key
An OS Command Injection vulnerability was discovered in the Google Cloud DNS validation module of the OPNsense os-acme-c
48RIESGO
abrir ↗GitHub PoC
openssh-musl-enterprise-hardening (CVE-2026-123158)
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentica
41RIESGO
abrir ↗GitHub PoC
CVE-2026-98260 (posix-cpu-timers UAF) to KernelSU on a bootloader-locked OPPO PKT110: exploit core, on-device app, and the research write-up.
exec: Cleanup POSIX timers right after de_thread()
41RIESGO
abrir ↗página 1 / 2916siguiente →
Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.