Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.464exploits catalogados

40.695CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4577Metasploit 3539✓ solo verificadosrecientes populares riesgo

87.464 exploits

GitHub PoC

Security audit and remediation agent for CVE-2026-111497, an out-of-bounds write in the Google Brotli decoder: detect, patch and verify on Debian and Ubuntu

CVE-2026-111497CRITICAL27 oct 2026

Out-of-Bounds Write in Google Brotli Decoder

70RIESGO

GitHub PoC★ 1

CVE-2026-102785: YOOtheme Pro 5.0.0-5.0.52 unauthenticated RCE via image handler signature reuse + path traversal + JPEG/PHP polyglot. CVSS 10.0. Check script, exploit, detection rules.

CVE-2026-102785CRITICAL27 oct 2026

Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52

48RIESGO

GitHub PoC★ 1

Scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)

CVE-2026-109618CRITICALbajo ataque27 oct 2026

RCE via OOM corruption

100RIESGO

VulnCheck XDB

initial-access

CVE-2026-16723CRITICAL27 oct 2026

Remote Code Execution in fastjson 1.2.68–1.2.83

48RIESGO

GitHub PoC★ 1

Find vulnerable Brotli (CVE-2026-111497, Broccoli2Shell / Node2Shell / HTTP2Shell) in Kubernetes clusters, container images and Linux hosts. Checks the binaries themselves, not just version numbers, so it catches bundled copies in Node.js, Python, .NET, Bun and Envoy. Read-only, bash only.

CVE-2026-111497CRITICAL27 oct 2026

Out-of-Bounds Write in Google Brotli Decoder

70RIESGO

GitHub PoC★ 2

Exposure triage, host verification and remediation tracking for PHP2Shell (CVE-2026-109618 / CVE-2026-109619)

CVE-2026-109618CRITICALbajo ataque27 oct 2026

RCE via OOM corruption

100RIESGO

GitHub PoC

Detection-only PHP version/exposure scanner for CVE-2026-109618 and CVE-2026-109619 (PHP2Shell). Fingerprints PHP version via standard HTTP headers, no exploit payload sent.

CVE-2026-109618CRITICALbajo ataque27 oct 2026

RCE via OOM corruption

100RIESGO

GitHub PoC

Measured php2shell (CVE-2026-109618/109619) RCE frontier on amd64: 8.3.35 closed via gdb crash forensics (HTDATA=chunk+0x6a0d8); per-build profiles, tools, method

CVE-2026-109618CRITICALbajo ataque27 oct 2026

RCE via OOM corruption

100RIESGO

VulnCheck XDB

initial-access

CVE-2026-102785CRITICAL27 oct 2026

Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52

48RIESGO

GitHub PoC

Portable PHP Brotli decoder inventory for WordPress, Drupal and Symfony — CVE-2026-111497

CVE-2026-111497CRITICAL27 oct 2026

Out-of-Bounds Write in Google Brotli Decoder

70RIESGO

GitHub PoC

PHP2Shell CVE-2026-109618 / CVE-2026-109619 Mitigation work (Ansible Role)

CVE-2026-109618CRITICALbajo ataque27 oct 2026

RCE via OOM corruption

100RIESGO

GitHub PoC★ 1

WordPress XML-RPC pingback lab and crash PoC for CVE-2026-111497 (Brotli decoder out-of-bounds write).

CVE-2026-111497CRITICAL27 oct 2026

Out-of-Bounds Write in Google Brotli Decoder

70RIESGO

GitHub PoC

Read-only exposure checks for PHP2Shell (CVE-2026-109618 / -109619): accuracy-hardened scanner + two on-box auditors.

CVE-2026-109618CRITICALbajo ataque27 oct 2026

RCE via OOM corruption

100RIESGO

GitHub PoC

Is your website affected by HTTP2Shell (CVE-2026-111497)?

CVE-2026-111497CRITICAL27 oct 2026

Out-of-Bounds Write in Google Brotli Decoder

70RIESGO

GitHub PoC

Find every Wasmtime engine embedded in binaries, wheels, NuGet packages and layers, and check CVE-2026-115889/115893

CVE-2026-115889CRITICAL27 oct 2026

Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation

48RIESGO

GitHub PoC★ 62

CVE-2026-97798 Windows Error Reporting - Command Injection TO SYSTEM

CVE-2026-97798HIGH27 oct 2026

Windows Error Reporting Service Elevation of Privilege Vulnerability

41RIESGO

GitHub PoC

HDU IS Lab 1: secure Flask REST API, CI/CD SAST+SCA pipeline and CVE-2021-43798 analysis

CVE-2021-43798HIGHbajo ataque27 oct 2026

Grafana path traversal

100RIESGO

GitHub PoC

PoC and exploit for CVE-2025-24813 - Apache Tomcat Partial PUT RCE (CVSS 9.8)

CVE-2025-24813CRITICALbajo ataque27 oct 2026

Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

100RIESGO

GitHub PoC★ 1

Scanner for php2shell (CVE-2026-111497)

CVE-2026-111497CRITICAL27 oct 2026

Out-of-Bounds Write in Google Brotli Decoder

70RIESGO

GitHub PoC

Offline Python detector for CVE-2023-7356 exposure in upstream Linux kernels, with CSV/JSON inventories and auditable reports.

CVE-2023-7356HIGH27 oct 2026

Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID

21RIESGO

GitHub PoC

Offline Python detector for CVE-2026-94300 exposure in ISC BIND 9, with edition-aware rules, CSV/JSON inventories, and auditable reports.

CVE-2026-94300HIGH27 oct 2026

Concurrent GSS-TSIG messages corrupt memory

41RIESGO

GitHub PoC

CVE-2026-115893: full Wasmtime aarch64 Cranelift br_table sandbox-escape public exploit, PoV, calibration notes, and verification evidence.

CVE-2026-115893CRITICAL27 oct 2026

Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction

48RIESGO

GitHub PoC

Offline Python detector for CVE-2026-76473 release exposure in Cisco UC inventories, with CSV/JSON input and auditable reports.

CVE-2026-76473CRITICAL27 oct 2026

Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.

28RIESGO

GitHub PoC

Offline Python detector for CVE-2026-76474 exposure in Cisco UC inventories, with CSV/JSON input, versioned rules, and auditable reports.

CVE-2026-76474CRITICAL27 oct 2026

Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities

28RIESGO

GitHub PoC★ 2

Laravel TokenGuard authentication bypass through non-string API credentials

CVE-2026-114509CRITICAL27 oct 2026

Laravel TokenGuard authentication bypass through non-string API credentials

63RIESGO

GitHub PoC

Offline Python detector for CVE-2026-89035 exposure in MikroTik RouterOS inventories, with CSV/JSON input and auditable reports.

CVE-2026-89035CRITICAL27 oct 2026

MikroTik RouterOS 7.24.5 WebFig Session Token Replay Authentication Bypass

28RIESGO

GitHub PoC★ 1

The authorization layer CVE-2026-93328 was missing: scoped grants, path confinement, and signed receipts in front of MCP storage tools. CVE reproduction + gated proof, 10/10 tests.

CVE-2026-93328CRITICAL27 oct 2026

Missing Authorization in MCP Toolbox for Databases allows Arbitrary File Read and Write

48RIESGO

GitHub PoC

Offline Python detector for CVE-2026-113870 exposure in MongoDB Compass inventories, with CSV/JSON input and auditable reports.

CVE-2026-113870HIGH27 oct 2026

Improper Encoding of Server-Supplied JavaScript Values in MongoDB Compass BSON Parsing

21RIESGO

GitHub PoC★ 1

Cushz/CVE-2026-118238

CVE-2026-118238HIGH27 oct 2026

CVE-2026-118238

41RIESGO

GitHub PoC

PoC / exploit archive for CVE-2026-114509

CVE-2026-114509CRITICAL27 oct 2026

Laravel TokenGuard authentication bypass through non-string API credentials

63RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.