Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
87.464exploits catalogados
40.695CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
87.464 exploits
GitHub PoC
PoC / exploit archive for CVE-2026-102785
Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52
48RIESGO
abrir ↗GitHub PoC
Offline Python detector for CVE-2026-113870 exposure in MongoDB Compass inventories, with CSV/JSON input and auditable reports.
Improper Encoding of Server-Supplied JavaScript Values in MongoDB Compass BSON Parsing
21RIESGO
abrir ↗GitHub PoC
Offline Python detector for CVE-2026-89035 exposure in MikroTik RouterOS inventories, with CSV/JSON input and auditable reports.
MikroTik RouterOS 7.24.5 WebFig Session Token Replay Authentication Bypass
28RIESGO
abrir ↗GitHub PoC★ 1
CVE-2026-110720 - HashiCorp consul-k8s Cross-Namespace ACL Bypass PoC & Exploit
Consul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding rules
48RIESGO
abrir ↗GitHub PoC
Detection-only triage scanner for Rust zip cloaking CVE-2026-115905: Cargo version check plus Central vs Local header comparison. No payloads, no extraction.
zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE
48RIESGO
abrir ↗GitHub PoC★ 2
Laravel TokenGuard authentication bypass through non-string API credentials
Laravel TokenGuard authentication bypass through non-string API credentials
63RIESGO
abrir ↗VulnCheck XDB
initial-access
Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
100RIESGO
abrir ↗GitHub PoC
CVE-2026-115893: full Wasmtime aarch64 Cranelift br_table sandbox-escape public exploit, PoV, calibration notes, and verification evidence.
Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction
48RIESGO
abrir ↗GitHub PoC★ 1
The authorization layer CVE-2026-93328 was missing: scoped grants, path confinement, and signed receipts in front of MCP storage tools. CVE reproduction + gated proof, 10/10 tests.
Missing Authorization in MCP Toolbox for Databases allows Arbitrary File Read and Write
48RIESGO
abrir ↗GitHub PoC★ 1
CVE-2026-114148 - .NET Linux Tarball Local Privilege Escalation PoC & Exploit
ASP.NET Core Elevation of Privilege Vulnerability
41RIESGO
abrir ↗GitHub PoC
Offline Python detector for CVE-2026-76475 exposure in Cisco UC inventories, with CSV/JSON input, versioned rules, and auditable reports.
Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities
28RIESGO
abrir ↗VulnCheck XDB
initial-access
Laravel TokenGuard authentication bypass through non-string API credentials
63RIESGO
abrir ↗VulnCheck XDB
info-leak
Arbitrary Local File Read via Component Method Invocation in gradio-app/gradio
56RIESGO
abrir ↗GitHub PoC
Offline Python detector for CVE-2023-7356 exposure in upstream Linux kernels, with CSV/JSON inventories and auditable reports.
Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID
21RIESGO
abrir ↗GitHub PoC
Offline Python detector for CVE-2026-76473 release exposure in Cisco UC inventories, with CSV/JSON input and auditable reports.
Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.
28RIESGO
abrir ↗GitHub PoC
Offline Python detector for CVE-2026-94300 exposure in ISC BIND 9, with edition-aware rules, CSV/JSON inventories, and auditable reports.
Concurrent GSS-TSIG messages corrupt memory
41RIESGO
abrir ↗GitHub PoC
Offline Python detector for CVE-2026-76474 exposure in Cisco UC inventories, with CSV/JSON input, versioned rules, and auditable reports.
Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities
28RIESGO
abrir ↗GitHub PoC
Offline Python detector for CVE-2026-113870 exposure in MongoDB Compass inventories, with CSV/JSON input and auditable reports.
Improper Encoding of Server-Supplied JavaScript Values in MongoDB Compass BSON Parsing
21RIESGO
abrir ↗GitHub PoC
Offline Python detector for CVE-2026-89035 exposure in MikroTik RouterOS inventories, with CSV/JSON input and auditable reports.
MikroTik RouterOS 7.24.5 WebFig Session Token Replay Authentication Bypass
28RIESGO
abrir ↗GitHub PoC★ 19
CVE-2026-112611/112610: CoreGraphics PDF out-of-bounds writes (fixed in iOS 27.2) — fix-diff analysis, on-device proof, methodology, and PoC generator scripts. No prebuilt PoCs, no crash reports.
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 2
33RIESGO
abrir ↗GitHub PoC
Offline Python detector for CVE-2026-76475 exposure in Cisco UC inventories, with CSV/JSON input, versioned rules, and auditable reports.
Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities
28RIESGO
abrir ↗GitHub PoC
KharalDipendra/CVE-2026-43621
Simple Machines Forum < 2.1.7 Authorization Confusion via Profile::load()
41RIESGO
abrir ↗GitHub PoC
Offline Python detector for CVE-2026-71195 exposure in OpenStack Manila, with branch-aware rules, CSV/JSON inventories, and auditable reports.
In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns th
48RIESGO
abrir ↗GitHub PoC
Offline Python detector for CVE-2026-76474 exposure in Cisco UC inventories, with CSV/JSON input, versioned rules, and auditable reports.
Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities
28RIESGO
abrir ↗GitHub PoC
PoC for CVE-2026-117532 in REDAXO Authentication bypass, full chain not yet implemented. CVSS score 9.3 critical
REDAXO Core 5.3.0 before 5.21.4 Authentication Bypass via History Plugin
48RIESGO
abrir ↗GitHub PoC
Offline Python detector for CVE-2026-76473 release exposure in Cisco UC inventories, with CSV/JSON input and auditable reports.
Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.
28RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.