Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.554exploits catalogados

39.165CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.281Exploit-DB 24.485GitHub PoC 16.153VulnCheck XDB 9636Nuclei 4476Metasploit 3523✓ solo verificadosrecientes populares riesgo

16.153 exploits

GitHub PoC★ 23

ZeroDayEvil/CVE-2026-62911

CVE-2026-62911HIGH28 sep 2026

Microsoft Exchange Server Elevation of Privilege Vulnerability

41RIESGO

abrir ↗

GitHub PoC

Hands-on cybersecurity and CTF labs covering port reconnaissance, CMS stack discovery, VulnCMS, CVE-2026-58225, shell-to-root paths, Python, sudo, user switching, passwords, and post-exploitation.

CVE-2026-58225LOW28 sep 2026

SQL injection via unescaped dollar-quote in Postgrex.Notifications reconnect replay causes notification denial of service

28RIESGO

abrir ↗

GitHub PoC

Proof-of-Concept for CVE-2026-18110

CVE-2026-18110HIGH28 sep 2026

Concrete CMS 9.0.0 through 9.5.2 is vulnerable to missing authorization in the user selector autocomplete endpoint (/ccm/system/user/autocomplete), allowing an unauthenticated attacker to retrieve the complete backend user directory — internal ID, username

41RIESGO

abrir ↗

GitHub PoC

Request a Quote for WooCommerce (Addify) <= 2.9.2 Unauthenticated arbitrary file upload via afrfq_submit_quote_via_popup

CVE-2026-18143CRITICAL28 sep 2026

Request a Quote for WooCommerce <= 2.9.2 - Unauthenticated Arbitrary File Upload via AJAX Popup Handler

48RIESGO

abrir ↗

GitHub PoC

Hasyros/CVE-2026-101162-xss-wp-ultimate-review

CVE-2026-101162MEDIUM28 sep 2026

WP Ultimate Review < 2.4.4 - Author+ Stored XSS via Review Overview Settings

33RIESGO

abrir ↗

GitHub PoC

CVE-2026-38526 - Authenticated RCE exploit for Krayin CRM <= 2.2.x. Upload arbitrary PHP via /admin/tinymce/upload and gain remote code execution. Python PoC for security researchers, CTF players and bug bounty hunters. Tested on HTB Nexus.

CVE-2026-38526CRITICAL28 sep 2026

An authenticated arbitrary file upload vulnerability in the /admin/tinymce/upload endpoint of Webkul Krayin CRM v2.2.x a

48RIESGO

abrir ↗

GitHub PoC

CVE-2026-93958 PoC: D-Link R95 BE9500 DHMAPI SetTimeSettings NTPServer authenticated root command injection. DHMAPI login, RCE verify, mass bulk exploit mode, colored CLI. https://pocbit.org/pocs/cve-2026-93958

CVE-2026-93958CRITICAL28 sep 2026

D-Link R95 DHMAPI ssi system os command injection

48RIESGO

abrir ↗

GitHub PoC★ 28

ZeroDayEvil/CVE-2026-41940-PoC

CVE-2026-41940CRITICALbajo ataqueransomware28 sep 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RIESGO

abrir ↗

GitHub PoC★ 8

One-click temporary KernelSU root (late-load) for Samsung Galaxy via DirtyFrag (CVE-2026-43284). No Shizuku/PC/ADB.

CVE-2026-43284HIGH28 sep 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

56RIESGO

abrir ↗

GitHub PoC

Hasyros/CVE-2026-101161-dos-wp-ultimate-review-shortcode

CVE-2026-101161HIGH28 sep 2026

WP Ultimate Review < 2.4.4 - Unauthenticated DoS via Unset Display Settings in wp-reviews Shortcode

41RIESGO

abrir ↗

GitHub PoC

CVE-2026-38526CRITICAL28 sep 2026

An authenticated arbitrary file upload vulnerability in the /admin/tinymce/upload endpoint of Webkul Krayin CRM v2.2.x a

48RIESGO

abrir ↗

GitHub PoC★ 1

Reproduction and root cause analysis of CVE-2026-39987 Marimo pre-auth WebSocket RCE in a local Docker lab.

CVE-2026-39987CRITICALbajo ataque27 sep 2026

marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

100RIESGO

abrir ↗

GitHub PoC★ 6

三星 Galaxy S25 Ultra（SM-S938B）适配版 DFRoot：开机自动获取 root（DirtyFrag CVE-2026-43284 + CVE-2026-43499 双链路），全中文界面，fork 自 diabl0w/DFRoot

CVE-2026-43284HIGH27 sep 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

56RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2026-100740 PoC: D-Link DIR-895L A1_102b07 L2TP Host Name AVP out-of-bounds write in tunnel_set_params (UDP 1701). Device fingerprint + optional OOB trigger packet for authorized lab testing. https://pocbit.org/pocs/cve-2026-100740

CVE-2026-100740CRITICAL27 sep 2026

D-Link DIR-895L L2TP Control Channel tunnel.c tunnel_set_params out-of-bounds write

48RIESGO

abrir ↗

GitHub PoC

A complete guide and workflow for integrating Agile sprints with DevOps CI/CD pipelines.

CVE-2026-8452HIGHbajo ataque27 sep 2026

Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service

71RIESGO

abrir ↗

GitHub PoC

khanna419/cve-2021-43798-lab

CVE-2021-43798HIGHbajo ataque27 sep 2026

Grafana path traversal

100RIESGO

abrir ↗

GitHub PoC★ 1

Unauthenticated LFI and conditional RCE scanner for CVE-2026-87902 in WordPress Core (4.7.0 – 7.1.1).

CVE-2026-87902HIGHbajo ataque27 sep 2026

An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph

98RIESGO

abrir ↗

GitHub PoC★ 3

CVE-2026-67279 + CVE-2026-86060 – MikroTrick MikroTik RouterOS SSH Pre-Auth Takeover (CVSS 9.2) | Red/Blue Team suite. 2 tools: Full Exploit (rekey bypass, fd-2 policy swap, full-admin shell, plant, mass scan, SOCKS5/Tor, stealth) & SafeDetect (banner/version audit, IoC guidance, JSON/CSV/HTML). Use Ethically & Safety only.

CVE-2026-67279MEDIUMbajo ataque27 sep 2026

SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS

63RIESGO

abrir ↗

GitHub PoC

CVE-2026-43805 IOKit IODMACommand race analysis and proof of concept

CVE-2026-43805CRITICAL27 sep 2026

A race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequ

48RIESGO

abrir ↗

GitHub PoC★ 4

nth347/mediawiki-CVE-2026-100382

CVE-2026-100382CRITICAL27 sep 2026

Unauthenticated remote code execution through wikitext in ExternalData

48RIESGO

abrir ↗

GitHub PoC

PHP Object Injection in Profile Builder < 4.0.1

CVE-2026-76547MEDIUM27 sep 2026

Profile Builder < 4.0.1 - Admin+ PHP Object Injection via Import/Export

33RIESGO

abrir ↗

GitHub PoC

CVE-2026-71963 - Hermes Agent 0.18.2-0.21.0 RCE via a repository-delivered .git/config (core.fsmonitor). Stdlib-only Python, verified on real 0.21.0 with a clean negative control on the fixed build.

CVE-2026-71963HIGH27 sep 2026

Hermes Agent 0.18.2 - 0.21.0 RCE via git core.fsmonitor Config Injection

41RIESGO

abrir ↗

GitHub PoC★ 12

watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88772

CVE-2026-88772CRITICALbajo ataque27 sep 2026

Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

78RIESGO

abrir ↗

GitHub PoC

CVE-2020-14008 — ManageEngine Applications Manager Remote Code Execution

CVE-2020-14008—27 sep 2026

Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to upload a vulnerable jar in

35RIESGO

abrir ↗

GitHub PoC★ 2

Exploit para explotar la vulnerabilidad CVE-2026-87902 que se acontece en el core de WordPress

CVE-2026-87902HIGHbajo ataque27 sep 2026

An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph

98RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2026-12227 is a critical (CVSS 9.8) unauthenticated Local File Inclusion (LFI) vulnerability in the Visual Composer Website Builder plugin for WordPress, affecting all versions up to and including 45.16.0, This can lead to sensitive data exposure, access control bypass, or even full Remote Code Execution (RCE).

CVE-2026-12227CRITICAL27 sep 2026

Visual Composer Website Builder <= 45.16.0 - Unauthenticated Local File Inclusion via 'vcv-template' Parameter

63RIESGO

abrir ↗

GitHub PoC

CVE-2026-88008 - Traefik (<=2.11.56 / <=3.7.12): a client-controlled h2c upgrade tunnels past routers and middleware (BasicAuth/ForwardAuth/IPAllowList), unauthorised access + no access logging. Stdlib-only Python PoC + real Jetty h2c lab, verified on v3.7.12 vs v3.7.13.

CVE-2026-88008HIGH27 sep 2026

Traefik: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') and Incorrect Authorization

41RIESGO

abrir ↗

GitHub PoC★ 13

CVE-2026-88772 PoC: Citrix NetScaler ADC/Gateway DTLS memory overflow (RCE/DoS, CVSS 9.5). Fingerprints Gateway, build vs 14.1-73.37 / 13.1-64.23, UDP/443 DTLS probe. CTX697096; active exploitation reported. https://pocbit.org/pocs/cve-2026-88772

CVE-2026-88772CRITICALbajo ataque27 sep 2026

Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

78RIESGO

abrir ↗

GitHub PoC

CVE-2026-8712: Unauthenticated SSRF / Backend URI Override in Wyoming HTTP API via uri Query Parameter

CVE-2026-8712MEDIUM27 sep 2026

Wyoming < 1.10.2 SSRF via uri Query Parameter

33RIESGO

abrir ↗

GitHub PoC

A Windows-friendly, non-destructive Python checker for detecting WordPress installations potentially affected by CVE-2026-14281.

CVE-2026-14281CRITICAL27 sep 2026

Automation Web Platform <= 4.8.6 - Unauthenticated Privilege Escalation via 'wawp_custom_fields' Parameter

48RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.