Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
88.056exploits catalogados
40.804CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
88.056 exploits
VulnCheck XDB
local
In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused
46RIESGO
abrir ↗VulnCheck XDB
initial-access
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir ↗GitHub PoC
CVE-2026-39987 PoC: Marimo<0.23.0 Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass
marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass
100RIESGO
abrir ↗GitHub PoC★ 3
SM-F9360 (Galaxy Z Fold4, q4q) locked-bootloader KernelSU root — CVE-2026-43499 temp root → LD_PRELOAD DEFEX bypass → no-LTO clang-12 kernelsu.ko. Device-verified 2026-08-12.
rtmutex: Use waiter::task instead of current in remove_waiter()
41RIESGO
abrir ↗GitHub PoC★ 4
vivo/iQOO 临时 root 工具箱 (免解锁临时root, CVE-2026-43499) - 源码与脚本
rtmutex: Use waiter::task instead of current in remove_waiter()
41RIESGO
abrir ↗GitHub PoC★ 1
ZildanZ/CVE-2026-64638
WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen.
Via a specially crafted malici
56RIESGO
abrir ↗GitHub PoC★ 2
DavidCarliez/cve-2026-62737-lab
Windows Kernel Elevation of Privilege Vulnerability
41RIESGO
abrir ↗GitHub PoC
CVE-2026-48710漏洞验证代码
Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks
100RIESGO
abrir ↗VulnCheck XDB
initial-access
/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.
100RIESGO
abrir ↗Exploit-DB
mcp-server-kubernetes 3.8.x - Argument Injection
MCP Server Kubernetes < 3.9.0 Argument Injection via kubectl Structured Tools
48RIESGO
abrir ↗GitHub PoC
CVE-2026-9198利用代码
Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation
98RIESGO
abrir ↗VulnCheck XDB
initial-access
Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation
98RIESGO
abrir ↗GitHub PoC★ 2
CVE-2026-43499 (GhostLock) rtmutex remove_waiter() UAF local-root PoC adapted for Qualcomm Android 4.19 kernels (Redmi K40 / Snapdragon 870 class), LD_PRELOAD based
rtmutex: Use waiter::task instead of current in remove_waiter()
41RIESGO
abrir ↗Exploit-DB
LuCI DHCPv6 - Lease Hostname Stored Cross-Site Scripting
LuCI DHCPv6 Lease Hostname Stored Cross-Site Scripting
48RIESGO
abrir ↗GitHub PoC
unpredictable21/CVE-2026-75431_PowerJob_jwt_key_predictable
PowerJob Server version 5.1.2 (and likely earlier) uses a predictable JWT signing key for HS256-based authentication. Th
48RIESGO
abrir ↗GitHub PoC
Defensive security research, SIEM rules, and remediation tools for CVE-2026-18577 & StormEncryptor ransomware.
Incomplete patch leads to administrative account takeover
91RIESGO
abrir ↗GitHub PoC
keithbennedict/CVE-2026-41940-Linux
WebPros cPanel and WHM Authentication Bypass via Login Flow
100RIESGO
abrir ↗GitHub PoC★ 1
CVE-2026-43499 GhostLock futex UAF LPE PoC for OPPO PCKM00 (SM6150) / Linux 4.14.180
rtmutex: Use waiter::task instead of current in remove_waiter()
41RIESGO
abrir ↗Exploit-DB
Blocksy Companion 2.1.46 - RCE
Blocksy Companion Pro < 2.1.47 Unauthenticated File Upload via save_attachments
48RIESGO
abrir ↗Exploit-DB
Planyo_Online_Reservation_System 3.0 - Arbitrary File Read via SSRF
Planyo online reservation system <= 3.0 - Unauthenticated Server-Side Request Forgery via 'ulap_url' Parameter
56RIESGO
abrir ↗Exploit-DB
PraisonAI praisonaiagents 1.6.77 - Remote Code Execution
PraisonAI before 1.6.78 Remote Code Execution via CodeAgent
53RIESGO
abrir ↗GitHub PoC
PoC exploit for CVE-2022-35914 — GLPI v.10.0.2 htmLawed command injection, command execution, and reverse shell support.
/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.
100RIESGO
abrir ↗GitHub PoC
DaemonSet для митигации уязвимости CVE-2026-64564 (SCTPhantom)
sctp: don't free the ASCONF's own transport in DEL-IP processing
48RIESGO
abrir ↗GitHub PoC★ 1
CopyEscape (CVE-2026-17106) docker cp container-to-host arbitrary file write PoC mirror — Imperva Ron Masas, MIT; for authorized security testing
Tar extraction in moby/go-archive can write outside the destination directory via link following
41RIESGO
abrir ↗GitHub PoC
Hunt-Benito/two-dots-and-a-slash-cve-2026-18907-tecno-hi-browser-download-path-traversal
PathTravelsal Vulnerability in com.talpa.hibrowser
41RIESGO
abrir ↗GitHub PoC★ 2
Persistent XSS in Typemill CMS: the Markdown parser lets javascript: URIs through unfiltered. Writeup + PoC.
Typemill CMS 2.x Persistent XSS via Markdown javascript URI
33RIESGO
abrir ↗GitHub PoC
AegisAgent - Runtime security gateway & privilege governance for AI agents. Cryptographic tool-call provenance (CoreBreak/CVE-2026-18830/18236/64650 defense), policy engine, sandbox isolation, HITL approval, MCP security proxy, tamper-evident audit.
Insufficient input validation in Amazon Bedrock AgentCore harness InvokeHarness API
41RIESGO
abrir ↗GitHub PoC★ 1
YellowKey BitLocker CVE-2026-45585 - free BitLocker recovery key extractor and vulnerability tool. Bitlocker yellowkey, yellowkey bitlocker, yellowkey github, cve-2026-45585, yellowkey vulnerability, yellowkey exploit, chaotic eclipse. Free 2026.
Windows BitLocker Security Feature Bypass Vulnerability
33RIESGO
abrir ↗GitHub PoC
CVE-2025-64459 vulnerable by design app
Potential SQL injection via _connector keyword argument in QuerySet and Q objects
53RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.