Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados

40.804CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientes populares riesgo

88.056 exploits

GitHub PoC

CVE-2026-85984 PoC: WordPress miniOrange OTP ≤5.5.5 unauth admin bypass (mo_wp_login_intent=otp + empty password). Check/exploit, user enum, colored CLI. https://pocbit.org/pocs/cve-2026-85984

CVE-2026-85984CRITICAL28 sep 2026

miniOrange OTP Login, Verification and SMS Notifications <= 5.5.5 - Unauthenticated Authentication Bypass via 'mo_wp_login_intent' Parameter

48RIESGO

GitHub PoC

CVE-2026-38526 - Authenticated RCE exploit for Krayin CRM <= 2.2.x. Upload arbitrary PHP via /admin/tinymce/upload and gain remote code execution. Python PoC for security researchers, CTF players and bug bounty hunters. Tested on HTB Nexus.

CVE-2026-38526CRITICAL28 sep 2026

An authenticated arbitrary file upload vulnerability in the /admin/tinymce/upload endpoint of Webkul Krayin CRM v2.2.x a

48RIESGO

GitHub PoC★ 8

One-click temporary KernelSU root (late-load) for Samsung Galaxy via DirtyFrag (CVE-2026-43284). No Shizuku/PC/ADB.

CVE-2026-43284HIGH28 sep 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

78RIESGO

VulnCheck XDB

initial-access

CVE-2026-82901CRITICAL28 sep 2026

Ultra Addons for Contact Form 7 <= 3.5.50 - Unauthenticated Arbitrary File Upload via Signature Form Field

63RIESGO

GitHub PoC★ 1

Request a Quote for WooCommerce (Addify) <= 2.9.2 Unauthenticated arbitrary file upload via afrfq_submit_quote_via_popup

CVE-2026-18143CRITICAL28 sep 2026

Request a Quote for WooCommerce <= 2.9.2 - Unauthenticated Arbitrary File Upload via AJAX Popup Handler

63RIESGO

GitHub PoC

CVE-2026-100835 PoC: Edgeless Contrast <1.16.0 remote attestation relay (aTLS / CWE-295). Manifest audit (AllowedChipIDs/AllowedPIIDs), version & coordinator probe. https://pocbit.org/pocs/cve-2026-100835

CVE-2026-100835CRITICAL27 sep 2026

Contrast before 1.16.0 Remote Attestation Relay Attack

48RIESGO

Metasploit300

Citrix NetScaler Unauthenticated Login Log Command Injection (CVE-2026-88771)

CVE-2026-88773CRITICAL27 sep 2026

HTTP Request Smuggling

63RIESGO

GitHub PoC

PHP Object Injection in Profile Builder < 4.0.1

CVE-2026-76547MEDIUM27 sep 2026

Profile Builder < 4.0.1 - Admin+ PHP Object Injection via Import/Export

33RIESGO

Metasploit300

Citrix NetScaler Unauthenticated Login Log Command Injection (CVE-2026-88771)

CVE-2026-88771CRITICALbajo ataque27 sep 2026

A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands

100RIESGO

Metasploit300

Citrix NetScaler Unauthenticated Login Log Command Injection (CVE-2026-88771)

CVE-2026-88772CRITICALbajo ataque27 sep 2026

Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

100RIESGO

GitHub PoC

CVE-2026-71963 - Hermes Agent 0.18.2-0.21.0 RCE via a repository-delivered .git/config (core.fsmonitor). Stdlib-only Python, verified on real 0.21.0 with a clean negative control on the fixed build.

CVE-2026-71963HIGH27 sep 2026

Hermes Agent 0.18.2 - 0.21.0 RCE via git core.fsmonitor Config Injection

41RIESGO

GitHub PoC★ 1

CVE-2026-100740 PoC: D-Link DIR-895L A1_102b07 L2TP Host Name AVP out-of-bounds write in tunnel_set_params (UDP 1701). Device fingerprint + optional OOB trigger packet for authorized lab testing. https://pocbit.org/pocs/cve-2026-100740

CVE-2026-100740CRITICAL27 sep 2026

D-Link DIR-895L L2TP Control Channel tunnel.c tunnel_set_params out-of-bounds write

48RIESGO

GitHub PoC★ 1

Reproduction and root cause analysis of CVE-2026-39987 Marimo pre-auth WebSocket RCE in a local Docker lab.

CVE-2026-39987CRITICALbajo ataque27 sep 2026

marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

100RIESGO

GitHub PoC

Alexandertanay/jenkins-cve-2024-23897-lab

CVE-2024-23897CRITICALbajo ataqueransomware27 sep 2026

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an

100RIESGO

GitHub PoC

CVE-2026-8712: Unauthenticated SSRF / Backend URI Override in Wyoming HTTP API via uri Query Parameter

CVE-2026-8712MEDIUM27 sep 2026

Wyoming < 1.10.2 SSRF via uri Query Parameter

33RIESGO

GitHub PoC

khanna419/cve-2021-43798-lab

CVE-2021-43798HIGHbajo ataque27 sep 2026

Grafana path traversal

100RIESGO

GitHub PoC★ 1

Defensive WordPress security scanner for CVE-2026-87902 — local filesystem inspection and safe remote HTTP/HTTPS assessment.

CVE-2026-87902HIGHbajo ataque27 sep 2026

An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph

100RIESGO

GitHub PoC★ 2

Exploit para explotar la vulnerabilidad CVE-2026-87902 que se acontece en el core de WordPress

CVE-2026-87902HIGHbajo ataque27 sep 2026

An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph

100RIESGO

GitHub PoC★ 1

CVE-2026-39987 Marimo Pre-auth RCE research, Docker lab reproduction, root cause analysis, and patch validation.

CVE-2026-39987CRITICALbajo ataque27 sep 2026

marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

100RIESGO

GitHub PoC

CVE-2024-4367 proof PDF for cpc docs-preview

CVE-2024-4367MEDIUM27 sep 2026

A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js c

55RIESGO

GitHub PoC

snapshot of logpresso/CVE-2021-44228-Scanner at a pinned commit, for cross platform ci legs

CVE-2021-44228CRITICALbajo ataqueransomware27 sep 2026

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

GitHub PoC★ 13

CVE-2026-88772 PoC: Citrix NetScaler ADC/Gateway DTLS memory overflow (RCE/DoS, CVSS 9.5). Fingerprints Gateway, build vs 14.1-73.37 / 13.1-64.23, UDP/443 DTLS probe. CTX697096; active exploitation reported. https://pocbit.org/pocs/cve-2026-88772

CVE-2026-88772CRITICALbajo ataque27 sep 2026

Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

100RIESGO

GitHub PoC★ 1

Unauthenticated SQL injection PoC and vulnerable lab environment for WP2Shell (CVE-2026-63030 + CVE-2026-60137) — a WordPress REST API batch route confusion chained into a WP_Query SQL injection. Includes Docker Compose lab setup and a Python exploitation script. For authorized security research only.

CVE-2026-63030CRITICALbajo ataque27 sep 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

98RIESGO

GitHub PoC★ 9

CVE-2026-67279 + CVE-2026-86060 – MikroTrick MikroTik RouterOS SSH Pre-Auth Takeover (CVSS 9.2) | Red/Blue Team suite. 2 tools: Full Exploit (rekey bypass, fd-2 policy swap, full-admin shell, plant, mass scan, SOCKS5/Tor, stealth) & SafeDetect (banner/version audit, IoC guidance, JSON/CSV/HTML). Use Ethically & Safety only.

CVE-2026-67279MEDIUMbajo ataque27 sep 2026

SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS

63RIESGO

VulnCheck XDB

initial-access

CVE-2026-12227CRITICAL27 sep 2026

Visual Composer Website Builder <= 45.16.0 - Unauthenticated Local File Inclusion via 'vcv-template' Parameter

63RIESGO

GitHub PoC★ 10

三星 Galaxy S25 Ultra（SM-S938B）适配版 DFRoot：开机自动获取 root（DirtyFrag CVE-2026-43284 + CVE-2026-43499 双链路），全中文界面，fork 自 diabl0w/DFRoot

CVE-2026-43284HIGH27 sep 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

78RIESGO

GitHub PoC★ 1

CVE-2026-12227 is a critical (CVSS 9.8) unauthenticated Local File Inclusion (LFI) vulnerability in the Visual Composer Website Builder plugin for WordPress, affecting all versions up to and including 45.16.0, This can lead to sensitive data exposure, access control bypass, or even full Remote Code Execution (RCE).

CVE-2026-12227CRITICAL27 sep 2026

Visual Composer Website Builder <= 45.16.0 - Unauthenticated Local File Inclusion via 'vcv-template' Parameter

63RIESGO

GitHub PoC

A Windows-friendly, non-destructive Python checker for detecting WordPress installations potentially affected by CVE-2026-14281.

CVE-2026-14281CRITICAL27 sep 2026

Automation Web Platform <= 4.8.6 - Unauthenticated Privilege Escalation via 'wawp_custom_fields' Parameter

48RIESGO

GitHub PoC★ 1

Unauthenticated LFI and conditional RCE scanner for CVE-2026-87902 in WordPress Core (4.7.0 – 7.1.1).

CVE-2026-87902HIGHbajo ataque27 sep 2026

An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph

100RIESGO

GitHub PoC

Universal container escape exploit targeting the CRIU container checkpoint/restore system - CVE-2026-18107

CVE-2026-18107HIGH27 sep 2026

Criu: criu: container escape via rseq critical section hijack during checkpoint/restore

41RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.