Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
88.056exploits catalogados
40.804CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
88.056 exploits
GitHub PoC
Langflow 1.10.0 urllib SSRF
Incomplete Security Scanner Blocklist Enables Network-Based Code Execution
28RIESGO
abrir ↗GitHub PoC
Information on the security content of Apple software updates
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS
33RIESGO
abrir ↗GitHub PoC
CVE-2021-29447 is an authenticated XML External Entity (XXE) vulnerability in WordPress
WordPress Authenticated XXE attack when installation is running PHP 8
63RIESGO
abrir ↗GitHub PoC★ 2
spip exploits for CVE-2026-72708, CVE-2026-72709, CVE-2026-72710
SPIP < 4.4.18 Unauthenticated Blind SQL Injection via sitemap.xml.html
41RIESGO
abrir ↗GitHub PoC
Unofficial Apache Doris Spark connector 26.1.0 security fork for Java / Spark 3.5.1 / Scala 2.12; patched shaded Jackson for CVE-2026-54512.
jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation
41RIESGO
abrir ↗GitHub PoC★ 1
Issabel pbxapi hard coded JWT RCE POC
Issabel Framework Hard-coded JWT Key RCE via pbxapi/manager/originate
63RIESGO
abrir ↗GitHub PoC★ 10
research on finding the bug and fix of CVE-2026-84616 and CVE-2026-84607
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS
33RIESGO
abrir ↗GitHub PoC
CVE-2026-65374 - Draft or TODO
A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Seq
41RIESGO
abrir ↗VulnCheck XDB
initial-access
Issabel Framework Hard-coded JWT Key RCE via pbxapi/manager/originate
63RIESGO
abrir ↗GitHub PoC
shivammittal2403/cve-2026-80428-ctf
ILIAS PHP Object Injection via Shibboleth Logout
48RIESGO
abrir ↗GitHub PoC★ 49
container escape POCs for CVE-2026-80521 and CVE-2026-52910
af_unix: Unlink scc_entry in unix_del_edge().
41RIESGO
abrir ↗GitHub PoC★ 1
Proof-of-Concept for CVE-2026-92680, the insecurely protected credentials vulnerability affecting Araxis Merge.
Araxis Merge insufficiently protected credentials
33RIESGO
abrir ↗GitHub PoC★ 8
Reliable CVE-2025-32432 pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail
Craft CMS Allows Remote Code Execution
100RIESGO
abrir ↗GitHub PoC
CVE-2026-5430 - Draft or TODO
Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover
83RIESGO
abrir ↗GitHub PoC★ 3
Proof of Concept and Write-up for CVE-2026-56096 (Blind Parameter Injection in TYPO3 EXT:solr)
Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
33RIESGO
abrir ↗VulnCheck XDB
info-leak
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RIESGO
abrir ↗GitHub PoC
rootxn/CVE-2026-12793
JetFormBuilder <= 3.6.2 - Unauthenticated Privilege Escalation via '_jet_engine_booking_form_id' Parameter
48RIESGO
abrir ↗VulnCheck XDB
initial-access
Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
100RIESGO
abrir ↗GitHub PoC★ 3
Langflow 1.10.0 urllib SSRF POC
Incomplete Security Scanner Blocklist Enables Network-Based Code Execution
28RIESGO
abrir ↗GitHub PoC★ 13
PoC for CVE-2026-59346 - 32-bit integer overflow in VMware's VMXNET3 TSO segmentation path, guest-to-host crash.
VMware Workstation and Fusion VMXNET3 integer-overflow vulnerability
48RIESGO
abrir ↗GitHub PoC
Tenda Technology Co., Ltd NVR_4H: CH3 v2.1.V27.5.58.6 was discovered to contain a hardcoded cryptographic key.
Tenda Technology Co., Ltd NVR_4H CH3 v2.1 V27.5.58.6 was discovered to contain a hardcoded cryptographic key.
41RIESGO
abrir ↗GitHub PoC
isaca0315/CVE-2026-65013-BOLA-IDOR
Onlook tRPC Insecure Direct Object Reference via multiple procedures
41RIESGO
abrir ↗GitHub PoC
Laboratorio académico de análisis y explotación de CVE-2025-5548 en FreeFloat FTP Server 1.0.
FreeFloat FTP Server NOOP Command buffer overflow
38RIESGO
abrir ↗GitHub PoC
Testing for CVE-2025-8191
macrozheng mall Swagger UI index.html cross site scripting
33RIESGO
abrir ↗GitHub PoC★ 4
CVE-2026-82329 – JFrog Artifactory Auth Bypass Toolkit (CVSS 9.8) | Red/Blue Team suite for self-hosted Artifactory 7.x (111-161). 2 tools: Full Exploit (JWTforge, admin token, user create, mass scan, stealth, interactive menu, resistence, WAF bypass etc.), SafeChecker (version detect, audit, JSON report). 🦾 Use Ethically, Stay Legal :V
Potential authentication bypass leading to administrative access in Artifactory
98RIESGO
abrir ↗VulnCheck XDB
initial-access
Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
100RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.