Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
87.464exploits catalogados
40.695CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
87.464 exploits
GitHub PoC
Non-intrusive detector for PHP2Shell (CVE-2026-109618 / CVE-2026-109619) - scans codebases and live hosts for vulnerable PHP versions and risky config. Detection, not exploitation.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
CVE-2026-105482漏洞复现
A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently truncated by the dns.resolve*() f
41RIESGO
abrir ↗GitHub PoC
Reproducible RHITE fixed PHP runtime images for CVE-2026-109618 and CVE-2026-109619
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Cybersecurity research project analyzing threat intelligence feeds, Log4Shell (CVE-2021-44228), attack progression, remediation, incident response, and threat hunting.
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RIESGO
abrir ↗GitHub PoC★ 1
WordPress XML-RPC pingback lab and crash PoC for CVE-2026-111497 (Brotli decoder out-of-bounds write).
Out-of-Bounds Write in Google Brotli Decoder
70RIESGO
abrir ↗GitHub PoC★ 1
Log4Shell (CVE-2021-44228) CTF: vulnerable Spring Boot support-ticket app. Get RCE, decompile the JAR, pivot to admin, grab the flag.
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RIESGO
abrir ↗GitHub PoC
HDU IS Lab 1: secure Flask REST API, CI/CD SAST+SCA pipeline and CVE-2021-43798 analysis
Grafana path traversal
100RIESGO
abrir ↗GitHub PoC
EHAX DTU Open House: safe, isolated Log4Shell (CVE-2021-44228) wallpaper-reveal demo with Minecraft 1.8.8
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RIESGO
abrir ↗GitHub PoC
Offline Python detector for CVE-2023-7356 exposure in upstream Linux kernels, with CSV/JSON inventories and auditable reports.
Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID
21RIESGO
abrir ↗GitHub PoC★ 1
Find vulnerable Brotli (CVE-2026-111497, Broccoli2Shell / Node2Shell / HTTP2Shell) in Kubernetes clusters, container images and Linux hosts. Checks the binaries themselves, not just version numbers, so it catches bundled copies in Node.js, Python, .NET, Bun and Envoy. Read-only, bash only.
Out-of-Bounds Write in Google Brotli Decoder
70RIESGO
abrir ↗GitHub PoC
PHP2Shell（CVE-2026-109618 / CVE-2026-109619）の修正状況を確認し、PHPのメモリ安全性を研究するためのセキュリティ検証ツール。
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Security research and documentation for BKWLD Decoy 5.11.1 — CVE-2026-116471.
BKWLD Decoy Authorization Policy Policy.php privileges management
33RIESGO
abrir ↗GitHub PoC★ 49
6.12.69-android16-6-g242e1a07f878
exec: Cleanup POSIX timers right after de_thread()
41RIESGO
abrir ↗GitHub PoC
Offline Python detector for CVE-2026-113870 exposure in MongoDB Compass inventories, with CSV/JSON input and auditable reports.
Improper Encoding of Server-Supplied JavaScript Values in MongoDB Compass BSON Parsing
21RIESGO
abrir ↗GitHub PoC
Offline Python detector for CVE-2026-76475 exposure in Cisco UC inventories, with CSV/JSON input, versioned rules, and auditable reports.
Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities
28RIESGO
abrir ↗GitHub PoC★ 1
CVE-2026-110720 - HashiCorp consul-k8s Cross-Namespace ACL Bypass PoC & Exploit
Consul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding rules
48RIESGO
abrir ↗GitHub PoC
Detection-only triage scanner for Rust zip cloaking CVE-2026-115905: Cargo version check plus Central vs Local header comparison. No payloads, no extraction.
zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE
48RIESGO
abrir ↗GitHub PoC
Offline Python detector for CVE-2026-89035 exposure in MikroTik RouterOS inventories, with CSV/JSON input and auditable reports.
MikroTik RouterOS 7.24.5 WebFig Session Token Replay Authentication Bypass
28RIESGO
abrir ↗GitHub PoC
Offline Python detector for CVE-2026-71195 exposure in OpenStack Manila, with branch-aware rules, CSV/JSON inventories, and auditable reports.
In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns th
48RIESGO
abrir ↗GitHub PoC★ 2
Laravel TokenGuard authentication bypass through non-string API credentials
Laravel TokenGuard authentication bypass through non-string API credentials
63RIESGO
abrir ↗GitHub PoC★ 19
CVE-2026-112611/112610: CoreGraphics PDF out-of-bounds writes (fixed in iOS 27.2) — fix-diff analysis, on-device proof, methodology, and PoC generator scripts. No prebuilt PoCs, no crash reports.
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 2
33RIESGO
abrir ↗VulnCheck XDB
initial-access
Laravel TokenGuard authentication bypass through non-string API credentials
63RIESGO
abrir ↗GitHub PoC
Offline Python detector for CVE-2023-7356 exposure in upstream Linux kernels, with CSV/JSON inventories and auditable reports.
Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID
21RIESGO
abrir ↗GitHub PoC
Offline Python detector for CVE-2026-76473 release exposure in Cisco UC inventories, with CSV/JSON input and auditable reports.
Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.
28RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.