Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
88.056exploits catalogados
40.804CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
88.056 exploits
VulnCheck XDB
initial-access
SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS
63RIESGO
abrir ↗VulnCheck XDB
remote-with-credentials
Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.
98RIESGO
abrir ↗VulnCheck XDB
initial-access
An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph
100RIESGO
abrir ↗VulnCheck XDB
initial-access
An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph
100RIESGO
abrir ↗VulnCheck XDB
initial-access
Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query
41RIESGO
abrir ↗VulnCheck XDB
remote-with-credentials
SSH user impersonation possible in Mikrotik RouterOS
48RIESGO
abrir ↗VulnCheck XDB
initial-access
Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint
100RIESGO
abrir ↗VulnCheck XDB
initial-access
Kestra: Unauthenticated RCE via /configs path-suffix auth-filter bypass
63RIESGO
abrir ↗VulnCheck XDB
initial-access
Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy
70RIESGO
abrir ↗VulnCheck XDB
initial-access
Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
100RIESGO
abrir ↗GitHub PoC★ 6
CVE-2026-59310-POC 仅用于自测，请勿用于攻击
vCenter directory-traversal vulnerability
90RIESGO
abrir ↗GitHub PoC★ 3
Proof of concept for vulnerability CVE-2026-87902 in Wordpress
An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph
100RIESGO
abrir ↗GitHub PoC
Proof of concept for vulnerability CVE-2026-87902 in Wordpress
An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph
100RIESGO
abrir ↗GitHub PoC
LetsDefend SOC lab investigating CVE-2024-49138 exploitation and related malicious activity.
Windows Common Log File System Driver Elevation of Privilege Vulnerability
76RIESGO
abrir ↗GitHub PoC
WordPress CVE-2026-87902 diagnostic check
An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph
100RIESGO
abrir ↗VulnCheck XDB
initial-access
CryptoPayment Gateway 1.2.1 - 1.2.2 - Unauthenticated Arbitrary File Deletion and Settings Update via Unguarded AJAX Router
48RIESGO
abrir ↗GitHub PoC★ 1
Malicious Register Directive Code Injection Exploit
Microsoft SharePoint Server Remote Code Execution Vulnerability
71RIESGO
abrir ↗GitHub PoC
rmhowe425/POC-CVE-2026-107326
Langflow OSS is affected by multiple vulnerabilities
41RIESGO
abrir ↗GitHub PoC
rmhowe425/POC-CVE-2026-107328
Langflow OSS is affected by multiple vulnerabilities
48RIESGO
abrir ↗GitHub PoC
rmhowe425/POC-CVE-2026-107329
Langflow OSS is affected by multiple vulnerabilities
48RIESGO
abrir ↗GitHub PoC
rmhowe425/POC-CVE-2026-110200
Langflow OSS is affected by multiple vulnerabilities
33RIESGO
abrir ↗GitHub PoC
PoC for CVE-2026-72001 — Pangolin < 1.22.0 cross-organization resource authentication bypass via the share-link access-token endpoint (CWE-639, CVSS 8.1).
Pangolin < 1.22.0 Authentication Bypass via Share-Link Endpoint
41RIESGO
abrir ↗GitHub PoC★ 1
yulisec/CVE-2025-7771
Code Execution / Escalation of Privileges in ThrottleStop
41RIESGO
abrir ↗GitHub PoC
Detailed technical analysis of CVE-2026-43284 (Dirty Frag) local privilege escalation flaw in the Linux kernel.
xfrm: esp: avoid in-place decrypt on shared skb frags
78RIESGO
abrir ↗GitHub PoC
Ninja Forms unauth stored XSS POC
Ninja Forms – The Contact Form Builder That Grows With You <= 3.15.3 - Stored Cross-Site Scripting
21RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.