Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.554exploits catalogados

39.165CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.281Exploit-DB 24.485GitHub PoC 16.153VulnCheck XDB 9636Nuclei 4476Metasploit 3523✓ solo verificadosrecientes populares riesgo

16.153 exploits

GitHub PoC

Proof of concept for vulnerability CVE-2026-87902 in Wordpress

CVE-2026-87902HIGHbajo ataque25 sep 2026

An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph

98RIESGO

abrir ↗

GitHub PoC

Lab vulnerável (Docker) + PoC Python para a CVE-2026-87902 — path traversal não autenticado no WordPress Core (page-template -> LFI -> RCE condicional). Uso educacional/autorizado.

CVE-2026-87902HIGHbajo ataque25 sep 2026

An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph

98RIESGO

abrir ↗

GitHub PoC

LetsDefend SOC lab investigating CVE-2024-49138 exploitation and related malicious activity.

CVE-2024-49138HIGHbajo ataque25 sep 2026

Windows Common Log File System Driver Elevation of Privilege Vulnerability

76RIESGO

abrir ↗

GitHub PoC★ 3

Proof of concept for vulnerability CVE-2026-87902 in Wordpress

CVE-2026-87902HIGHbajo ataque25 sep 2026

An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph

98RIESGO

abrir ↗

GitHub PoC★ 3

针对 OnePlus Ace6 设备的 cve-2026-64560 复现

CVE-2026-64560HIGH25 sep 2026

posix-cpu-timers: Prevent UAF caused by non-leader exec() race

41RIESGO

abrir ↗

GitHub PoC

Samba 3.0.20 username map script command injection exploit — reverse shell via SMB authentication, built from scratch in Python using impacket. No Metasploit.

CVE-2007-2447—25 sep 2026

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands

50RIESGO

abrir ↗

GitHub PoC★ 1

This repository contains the exploit for CVE-2026-16764.

CVE-2026-16764MEDIUM24 sep 2026

OWASP DefectDojo API/Web serializers.py UserSerializer privileges management

33RIESGO

abrir ↗

GitHub PoC

Detailed technical analysis of CVE-2026-43284 (Dirty Frag) local privilege escalation flaw in the Linux kernel.

CVE-2026-43284HIGH24 sep 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

56RIESGO

abrir ↗

GitHub PoC

A WordPress plugin exposing an MCP server over the REST API, with the security model as the point -- closes the CVE-2026-15015 OAuth-bypass shape by never having that surface at all.

CVE-2026-15015CRITICAL24 sep 2026

MountDev AI MCP Connector for WordPress <= 1.6.1 - Unauthenticated Privilege Escalation via OAuth Authorization Endpoint

48RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2026-12227 - Visual Composer <= 45.16.0 unauthenticated LFI via vcv-template (CVSS 9.8): Docker validation lab, safe-oracle PoC, nuclei template. Root cause: validate-then-mutate on the theme: prefix. Verified: vendor fix never landed - fires through 45.16.3 on WP <= 7.1.1; masked by WP 7.1.2 core gate.

CVE-2026-12227CRITICAL24 sep 2026

Visual Composer Website Builder <= 45.16.0 - Unauthenticated Local File Inclusion via 'vcv-template' Parameter

63RIESGO

abrir ↗

GitHub PoC

CVE-2026-12227 (CVSS 9.8): WordPress Visual Composer Website Builder ≤45.16.0 — unauthenticated local file inclusion via vcv-template. Educational PoC only.

CVE-2026-12227CRITICAL24 sep 2026

Visual Composer Website Builder <= 45.16.0 - Unauthenticated Local File Inclusion via 'vcv-template' Parameter

63RIESGO

abrir ↗

GitHub PoC★ 15

watchtowrlabs/watchTowr-vs-f5-bigip-PreAuth-RCE-CVE-2026-94127

CVE-2026-94127CRITICALbajo ataque24 sep 2026

BIG-IP APM OAuth vulnerability

78RIESGO

abrir ↗

GitHub PoC

zyphorixofficialmain-lab/cve-2026-87902

CVE-2026-87902HIGHbajo ataque24 sep 2026

An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph

98RIESGO

abrir ↗

GitHub PoC

CVE-2026-94609: Writeup and POC

CVE-2026-94609HIGH24 sep 2026

authentik: Privilege Escalation to Superuser via Group Hierarchy

41RIESGO

abrir ↗

GitHub PoC

UnrealIRCd 3.2.8.1 backdoor exploit — reverse shell via AB; trigger, built from scratch in Python using raw sockets. No Metasploit.

CVE-2010-2075—24 sep 2026

UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally

60RIESGO

abrir ↗

GitHub PoC

Detailed technical analysis of CVE-2026-43284 (Dirty Frag) local privilege escalation flaw in the Linux kernel.

CVE-2026-43284HIGH24 sep 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

56RIESGO

abrir ↗

GitHub PoC

DJI Drone DUML Command Injection over Bluetooth — Proof of Concept for CVE-2026-78306

CVE-2026-78306HIGH24 sep 2026

DJI Drone Bluetooth Interface Unauthenticated DUML Command Execution

41RIESGO

abrir ↗

GitHub PoC

PoC for CVE-2026-72001 — Pangolin < 1.22.0 cross-organization resource authentication bypass via the share-link access-token endpoint (CWE-639, CVSS 8.1).

CVE-2026-72001HIGH24 sep 2026

Pangolin < 1.22.0 Authentication Bypass via Share-Link Endpoint

41RIESGO

abrir ↗

GitHub PoC★ 40

Technical disclosure and PoC for CVE-2026-84543, a macOS SMB kernel vulnerability

CVE-2026-84543HIGH24 sep 2026

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27,

41RIESGO

abrir ↗

GitHub PoC

CVE-2026-63030 + CVE-2026-60137 WordPress Core pre-auth RCE mass exploit

CVE-2026-63030CRITICALbajo ataque24 sep 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

98RIESGO

abrir ↗

GitHub PoC

whoami-012/CVE-2026-96515

CVE-2026-96515HIGH24 sep 2026

Command Injection Vulnerability in Netlink ICT HG323RW Router

41RIESGO

abrir ↗

GitHub PoC★ 1

yulisec/CVE-2026-90817

CVE-2026-90817CRITICAL24 sep 2026

An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import proce

48RIESGO

abrir ↗

GitHub PoC★ 1

yulisec/CVE-2025-7771

CVE-2025-7771HIGH24 sep 2026

Code Execution / Escalation of Privileges in ThrottleStop

41RIESGO

abrir ↗

GitHub PoC

Ninja Forms unauth stored XSS POC

CVE-2026-94504HIGH24 sep 2026

Ninja Forms – The Contact Form Builder That Grows With You <= 3.15.3 - Stored Cross-Site Scripting

41RIESGO

abrir ↗

GitHub PoC★ 13

a23bc/op13-cve-2026-64560

CVE-2026-64560HIGH24 sep 2026

posix-cpu-timers: Prevent UAF caused by non-leader exec() race

41RIESGO

abrir ↗

GitHub PoC

Temporary fork of braces with a minimal security patch for CVE-2026-93687, created only to validate dependency override behavior and Fortify/FoD detection before moving the fix to an official Bentobox-owned source.

CVE-2026-93687HIGH24 sep 2026

braces through 3.0.3 Stack Overflow via Deeply Nested Patterns

41RIESGO

abrir ↗

GitHub PoC

PoC CVE-2020-6857

CVE-2020-6857—23 sep 2026

CarbonFTP v1.4 uses insecure proprietary password encryption with a hard-coded weak encryption key. The key for local FT

23RIESGO

abrir ↗

GitHub PoC

CVE-2026-90898 - Draft or TODO

CVE-2026-90898CRITICAL23 sep 2026

Bifrost unauthenticated remote code execution via MCP stdio client registration

63RIESGO

abrir ↗

GitHub PoC★ 12

CVE-2026-87902 – WordPress Core LFI→RCE Toolkit (CVSS 9.2) - Red/Blue Team suite for WordPress 4.7–7.1.1. | 2 tools: Full Exploit (LFI, PEAR RCE, admin create, webshell, reverse shell, loot, mass scan, stealth) & SafeChecker (version detect, risk audit, JSON report). Use Ethically & Authorized Enviorement, Stay Legal <3

CVE-2026-87902HIGHbajo ataque23 sep 2026

An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph

98RIESGO

abrir ↗

GitHub PoC

CVE-2026-89274 — WP Recipe Maker <= 10.8.1 arbitrary shortcode execution via rating-comment reviewBody (CVSS 9.1): Docker validation lab with vulnerable (10.8.1) vs patched (10.8.2) controls, Python PoC proving server-side shortcode execution in recipe JSON-LD, nuclei version screen. Authorized security research only.

CVE-2026-89274CRITICAL23 sep 2026

WP Recipe Maker <= 10.8.1 - Unauthenticated Arbitrary Shortcode Execution via Recipe Comment Content

48RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.