Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
87.464exploits catalogados
40.695CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
87.464 exploits
GitHub PoC★ 1
Log4Shell (CVE-2021-44228) CTF: vulnerable Spring Boot support-ticket app. Get RCE, decompile the JAR, pivot to admin, grab the flag.
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RIESGO
abrir ↗GitHub PoC
EHAX DTU Open House: safe, isolated Log4Shell (CVE-2021-44228) wallpaper-reveal demo with Minecraft 1.8.8
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RIESGO
abrir ↗GitHub PoC
PHP 8.2.35 rebuild (CVE-2026-109618 / CVE-2026-109619 fix, no telemetry) for Ubuntu 24.04 hosts running php8.2 8.2.7-1ubuntu1
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
PHP2Shell (CVE-2026-109618/109619) exposure scanner — finds unpatched / end-of-life PHP hosts on an internal network. Bilingual, no-dependency Windows tool.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
PHP2SHELL — remote scanner + research PoC for CVE-2026-109618 / CVE-2026-109619: the PHP rfc1867 pre-request OOM RCE pair (PHP 5.4.0–8.5.11, fixed in 8.5.12). Reverse-engineered from the 8.5.11→8.5.12 diff, verified against both builds.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC★ 1
CVE-2026-101767-POC
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported
48RIESGO
abrir ↗GitHub PoC★ 46
villager1314/CVE-2026-98260-Analysis
exec: Cleanup POSIX timers right after de_thread()
41RIESGO
abrir ↗GitHub PoC
Checks that Tenable scanning is set up to detect PHP2Shell (CVE-2026-109618, CVE-2026-109619) on every PHP host: plugin feed, credentials, and scan settings. Lists the hosts to rescan and flags end-of-life PHP. Works with Tenable Vulnerability Management, Security Center, and .nessus files. Claude Code skill or standalone script.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Read-only scanner and config patcher to detect and work around CVE-2026-109618 / CVE-2026-109619 on PHP, with a full detection and harening manual.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
CVE-2026-75650 (StyleSmuggler): unauthenticated RCE via template injection in Magento Open Source / Adobe Commerce 2.4.4–2.4.9 — b63 showcase, lab-verified with patched-build negative test
Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
100RIESGO
abrir ↗GitHub PoC
PoC / exploit archive for CVE-2026-0303
Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File
28RIESGO
abrir ↗GitHub PoC★ 11
CVE-2026-98260 一键 root | 玄戒 O1 家族：Xiaomi Pad 7S Pro 12.5 (violin) / Pad 7 Ultra (jinghu) / 15S Pro (dijun)，内核 6.18.21 | 可选加载 KernelSU / SukiSU / KernelSU Next / 7kimisu
exec: Cleanup POSIX timers right after de_thread()
41RIESGO
abrir ↗GitHub PoC★ 1
Target-specific Android CVE-2026-98260 research port for Xiaomi 17 (pudding)
exec: Cleanup POSIX timers right after de_thread()
41RIESGO
abrir ↗GitHub PoC
Offline Python detector for CVE-2026-76466 in Cisco Expressway, using version and clustering evidence with JSON reporting.
Cisco Expressway Series Remote Code Execution Vulnerability
28RIESGO
abrir ↗GitHub PoC★ 2
CVE-2026-98260 (exec: posix CPU timer UAF) - one-command temporary root for OnePlus 16 (PYB110) from uid 2000 shell, with KernelSU/FinaSU handover
exec: Cleanup POSIX timers right after de_thread()
41RIESGO
abrir ↗GitHub PoC
Análisis de la vulnerabilidad CVE-2025-5548
FreeFloat FTP Server NOOP Command buffer overflow
38RIESGO
abrir ↗GitHub PoC
En este repositorio voy subir la explotacion de la vulnerablildad CVE-2017-0143 con el exploit eternalblue.
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RIESGO
abrir ↗GitHub PoC★ 18
CVE-2026-98260（fs/exec.c POSIX CPU timer UAF）XRING O1 / Android 17 / 6.18.21 研究记录与 PC 一键流程（授权设备安全研究）
exec: Cleanup POSIX timers right after de_thread()
41RIESGO
abrir ↗GitHub PoC
Cross-platform scanner that finds .NET apps, runtimes and Azure App Service / Functions deployments exposed to CVE-2026-111497 (brotli decoder)
Out-of-Bounds Write in Google Brotli Decoder
70RIESGO
abrir ↗GitHub PoC★ 1
Offline Brotli / HTTP2Shell (CVE-2026-111497) exposure and inventory checker across verified ecosystems. Python 3.10+, no dependencies or exploit payloads.
Out-of-Bounds Write in Google Brotli Decoder
70RIESGO
abrir ↗GitHub PoC
PoC / exploit archive for CVE-2026-111497
Out-of-Bounds Write in Google Brotli Decoder
70RIESGO
abrir ↗GitHub PoC
Aqui voy a colocar el paso a paso de la post explotacion de la vulnerabilidad CVE-2017-0143
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RIESGO
abrir ↗GitHub PoC★ 1
CVE-2026-109618 - PHP session.upload_progress Heap UAF Pre-Auth RCE (CVSS 9.2)
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Vá PHP2Shell (CVE-2026-109618/109619) và nâng cấp PHP 8.1→8.3/8.4 cho nginx + php-fpm — Ubuntu/Debian và RHEL/Rocky
RCE via OOM corruption
100RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.