Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
87.464exploits catalogados
40.695CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
87.464 exploits
GitHub PoC★ 2
Script que detecta si tu versión de PHP es vulnerable a PHP2Shell (CVE-2026-109618 / 109619)
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
PHP2Shell Sentinel is an intelligent, zero-dependency, low-resource cross-platform defense daemon to detect, log, prevent, and actively mitigate php2shell exploits (CVE-2026-109618 & CVE-2026-109619, plus CVE-2024-4577) on both Linux and Windows servers
Argument Injection in PHP-CGI
100RIESGO
abrir ↗GitHub PoC
Offline Node.js evidence checker for CVE-2026-58044: HTTP header-limit request smuggling. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.
A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding proxies that rebuild ou
28RIESGO
abrir ↗GitHub PoC
Standalone defensive checker project for CVE-2026-106069: Node.js: TLS leading-zero IPv4 resolver mismatch. One exploit per repository; implementation pending.
A flaw in Node.js TLS hostname verification can cause a server certificate to be validated against a different IP addres
41RIESGO
abrir ↗GitHub PoC
Full exploits and PoCs for php2shell (CVE-2026-109618, CVE-2026-109619) and CVE-2024-4577 - PHP critical RCE (CVSS 9.2-9.8)
Argument Injection in PHP-CGI
100RIESGO
abrir ↗GitHub PoC
Standalone defensive checker project for CVE-2026-105482: Node.js: DNS resolution NUL-name truncation. One exploit per repository; implementation pending.
A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently truncated by the dns.resolve*() f
41RIESGO
abrir ↗GitHub PoC
Standalone defensive checker project for CVE-2026-106074: Node.js: Crypto entropy cache duplication in snapshots. One exploit per repository; implementation pending.
A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUIDv7()`, an
33RIESGO
abrir ↗GitHub PoC
Offline Node.js evidence checker for CVE-2026-58045: zlib synchronous API spoofed TypedArray crash. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.
A flaw in Node.js allows a spoofed `TypedArray` `byteLength` to trigger a reachable assertion in the synchronous `node:z
33RIESGO
abrir ↗GitHub PoC
Write-up and proof of concept for CVE-2026-113872: multer async fileFilter process crash (DoS)
multer vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardown
41RIESGO
abrir ↗GitHub PoC
Standalone defensive checker project for CVE-2026-104935: Ivanti Connect Secure: Authentication bypass by spoofing. One exploit per repository; implementation pending.
Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arb
100RIESGO
abrir ↗GitHub PoC★ 2
CVE-2026-111497 (Node2Shell) — Node.js Brotli decoder OOB heap write. Independent research: exploit code, Docker labs, Express RCE gap analysis.
Out-of-Bounds Write in Google Brotli Decoder
70RIESGO
abrir ↗GitHub PoC
Offline, evidence-aware PHP inventory triage for CVE-2026-109618/109619, with backport handling and static reports.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC★ 1
w116tjb/CVE-2026-111497_nodejs_hash_lookup
Out-of-Bounds Write in Google Brotli Decoder
70RIESGO
abrir ↗GitHub PoC
Check a Node.js runtime for the CVE-2026-111497 Brotli decoder fix and find where a project decodes outside Brotli data. No dependencies.
Out-of-Bounds Write in Google Brotli Decoder
70RIESGO
abrir ↗GitHub PoC
This is made for php2shell-CVE-2026-109618-CVE-2026-109619-PoC.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC★ 1
Defense guide + static scanner for CVE-2026-108551 (openapi-typescript-codegen code injection).
openapi-typescript-codegen through 0.31.0 Code Injection via Handlebars Templates
48RIESGO
abrir ↗GitHub PoC
Offline Ivanti Connect Secure evidence checker for CVE-2026-104935. Connect Secure build and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arb
100RIESGO
abrir ↗GitHub PoC★ 1
Find every PHP install vulnerable to PHP2Shell (CVE-2026-109618, CVE-2026-109619) on hosts and container images. Single static binary, backport-aware, defensive only.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Read-only check for WordPress sites on shared PHP hosting after PHP2Shell (CVE-2026-109618/-109619).
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Offline NetScaler ADC / Gateway evidence checker for CVE-2026-88771. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands
100RIESGO
abrir ↗GitHub PoC
php2shell (CVE-2026-109618/109619) 利用工具：带来源与日期的指纹库、两条引擎、免 gdb 标定；含源码级结论——本链下限 PHP 7.0。
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC★ 1
Loopback-only PHP2Shell research lab for CVE-2026-109618 and CVE-2026-109619
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Offline Node.js evidence checker for CVE-2026-106073: Permission Model realpathSync read bypass. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.
A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the required read permissio
28RIESGO
abrir ↗GitHub PoC
Offline Node.js evidence checker for CVE-2026-106070: ZipFile invalid-header content substitution. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.
A flaw in the Node.js `zlib.ZipFile` API can cause it to return bytes that do not belong to the requested entry after th
28RIESGO
abrir ↗GitHub PoC
PoC for CVE-2026-54668 — XXE injection in Kitodo.Production (< 3.9.2) XMLUtils. Default-configured JAXP parsers on the EAD-import path resolve external entities: local file disclosure + SSRF. Verified on JDK 17. Java, no dependencies.
Kitodo.Production: XXE in XMLUtils EAD/XML upload parsers (parseXMLString / getNumberOfEADElements / checkIfXmlIsWellFormed lack secure JAXP config)
21RIESGO
abrir ↗GitHub PoC
Educational HTML/CSS/JS visualization of CVE-2026-109618 — a PHP out-of-memory / longjmp() request-state corruption issue. For security awareness and blue-team training only.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Standalone defensive checker project for CVE-2026-88778: Citrix NetScaler ADC / Gateway: Predictable TCP initial sequence numbers. One exploit per repository; implementation pending.
TCP Initial Sequence Number (ISN) prediction
41RIESGO
abrir ↗GitHub PoC
Standalone defensive checker project for CVE-2026-88777: Citrix NetScaler ADC / Gateway: Non-HTTP L7 memory corruption. One exploit per repository; implementation pending.
Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service
41RIESGO
abrir ↗GitHub PoC
Standalone defensive checker project for CVE-2026-88776: Citrix NetScaler ADC / Gateway: Oracle load-balancer memory corruption. One exploit per repository; implementation pending.
Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service
41RIESGO
abrir ↗GitHub PoC★ 8
PHP2Shell proof of concept for CVE-2026-109618 and CVE-2026-109619, with Docker labs and build-specific profiles for security research.
RCE via OOM corruption
100RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.