Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.464exploits catalogados

40.695CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4577Metasploit 3539✓ solo verificadosrecientes populares riesgo

86.991 exploits

GitHub PoC

Offline NetScaler ADC / Gateway evidence checker for CVE-2026-88775. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-88775HIGH23 oct 2026

Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

41RIESGO

GitHub PoC

Hunts, logging and audits for PHP2Shell (CVE-2026-109618, CVE-2026-109619) and CVE-2026-115560. Read-only bash; companion to GarphenGate's defender's field guide.

CVE-2026-109618CRITICALbajo ataque23 oct 2026

RCE via OOM corruption

100RIESGO

GitHub PoC

Hardik007007/CVE-2026-31158-Boolean-Based-SQL-Injection-in-CRM-Login

CVE-2026-31158CRITICAL23 oct 2026

SQL Injection vulnerability in CRM SOFTTRADE Infotech (aka softtradeindia) 1.0 allows a remote attacker to execute arbit

48RIESGO

GitHub PoC

Offline Atlassian Data Center evidence checker for CVE-2026-21589. Self-managed product and version evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-21589CRITICALbajo ataque23 oct 2026

This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft

100RIESGO

GitHub PoC

Offline NetScaler ADC / Gateway evidence checker for CVE-2026-88773. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-88773CRITICAL23 oct 2026

HTTP Request Smuggling

63RIESGO

GitHub PoC

Offline Sharp / librsvg evidence checker for CVE-2026-96889. Sharp and librsvg version and build evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-96889HIGH23 oct 2026

Librsvg: use-after-free when xml includes have duplicated entities

41RIESGO

GitHub PoC

Offline Docker CopyEscape evidence checker for CVE-2026-17106. Docker version and build-configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-17106HIGH23 oct 2026

Tar extraction in moby/go-archive can write outside the destination directory via link following

41RIESGO

GitHub PoC

Scan a filesystem for traces of the compromised eMudhra CA certificates (CVE-2026-111943) and get an upgrade plan

CVE-2026-111943MEDIUM23 oct 2026

Distrust compromised intermediate certificates in crypto/x509

33RIESGO

GitHub PoC

Offline NetScaler ADC / Gateway evidence checker for CVE-2026-19489. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-19489HIGH23 oct 2026

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 thr

41RIESGO

GitHub PoC

Offline NetScaler ADC / Gateway evidence checker for CVE-2026-19490. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-19490CRITICALbajo ataque23 oct 2026

NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490

90RIESGO

GitHub PoC

CVE-2026-94300: This analysis and PoC were produced substantially with AI assistance ("AI patchwork"). Every code, diff and measurement claim should be verified against the cited sources before being relied upon.

CVE-2026-94300HIGH23 oct 2026

Concurrent GSS-TSIG messages corrupt memory

41RIESGO

GitHub PoC

Offline NetScaler ADC / Gateway evidence checker for CVE-2026-88771. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-88771CRITICALbajo ataque23 oct 2026

A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands

100RIESGO

GitHub PoC

Offline NetScaler ADC / Gateway evidence checker for CVE-2026-88772. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-88772CRITICALbajo ataque23 oct 2026

Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

100RIESGO

GitHub PoC

Offline SonicWall SMA1000 evidence checker for CVE-2026-102256. Reported build and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-102256HIGH23 oct 2026

Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerabi

41RIESGO

GitHub PoC

Offline Sharp / librsvg evidence checker for CVE-2026-96889. Sharp and librsvg version and build evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-96889HIGH23 oct 2026

Librsvg: use-after-free when xml includes have duplicated entities

41RIESGO

GitHub PoC

Offline vm2 evidence checker for CVE-2026-92935. Sandbox package and nesting evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-92935CRITICAL23 oct 2026

vm2 NodeVM Remote Code Execution via Array-Shaped Require

48RIESGO

GitHub PoC

Offline Node.js evidence checker for CVE-2026-105481: HTTP keep-alive premature-response acceptance. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-105481MEDIUM23 oct 2026

A flaw in Node.js HTTP Agent connection reuse can cause a client to accept as valid a response that was sent before the

33RIESGO

GitHub PoC

通达OAV11 PHP5.45.0 补丁包

CVE-2026-109618CRITICALbajo ataque23 oct 2026

RCE via OOM corruption

100RIESGO

GitHub PoC

Offline SonicWall SMA1000 evidence checker for CVE-2026-102255. Reported build and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-102255CRITICAL23 oct 2026

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended altern

48RIESGO

GitHub PoC

Offline SonicWall SMA1000 evidence checker for CVE-2026-102257. Reported build and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-102257HIGH23 oct 2026

A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extrac

41RIESGO

GitHub PoC★ 2

CVE-2026-107092 is a critical directory traversal vulnerability in NexoPOS v6.2.4 affecting the api/update endpoint, where insufficient input sanitization allows unauthenticated attackers to supply path traversal sequences, escape the intended application directory, and potentially execute arbitrary files or remote code on the underlying server.

CVE-2026-107092CRITICAL23 oct 2026

NexoPOS v6.2.4 is vulnerable to Directory Traversal via the api/update endpoint.

48RIESGO

GitHub PoC

regex2shell (CVE-2026-110264 + family) — GitLab/Onigmo unauth regex RCE research: safe differential detector, deterministic interpreter kill, match-time write primitive

CVE-2026-110264CRITICAL23 oct 2026

Integer Overflow or Wraparound in GitLab

48RIESGO

GitHub PoC

Offline Node.js evidence checker for CVE-2026-58040: HTTPS Agent TLS session identity-policy bypass. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-58040MEDIUM23 oct 2026

An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across ident

33RIESGO

GitHub PoC

Offline Node.js evidence checker for CVE-2026-56846: HTTP/2 retained header memory exhaustion. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-56846HIGH23 oct 2026

A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory and enable remote memor

41RIESGO

GitHub PoC

Offline Node.js evidence checker for CVE-2026-58042: DNS resolveAny process abort. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-58042MEDIUM23 oct 2026

A flaw in Node.js can cause dns.resolveAny() Aborts the Node.js Process When a DNS Response Contains More Than 256 A Rec

33RIESGO

GitHub PoC

Offline Flowise evidence checker for CVE-2026-69254. Flowise version and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-69254CRITICAL23 oct 2026

Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override

48RIESGO

GitHub PoC

Offline Node.js evidence checker for CVE-2026-56848: HTTP/2 reentrant send use-after-free. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-56848HIGH23 oct 2026

A flaw in Node.js HTTP/2 handling allows `nghttp2_session_mem_send()` to be called re-entrantly while `nghttp2_session_m

41RIESGO

GitHub PoC

Offline Node.js evidence checker for CVE-2026-105483: TLS fullwidth-IP hostname validation bypass. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-105483HIGH23 oct 2026

A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenticate a con

41RIESGO

GitHub PoC

Offline Node.js evidence checker for CVE-2026-106072: TLS noncanonical-IP DNS SAN acceptance. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-106072MEDIUM23 oct 2026

A flaw in Node.js TLS hostname verification allows a certificate with only a DNS SAN to authenticate an IP endpoint when

33RIESGO

GitHub PoC

Guard for PHP 7.4: native Linux package remediation for CVE-2026-109618/109619, with verified build recipes and deployment checks.

CVE-2026-109618CRITICALbajo ataque23 oct 2026

RCE via OOM corruption

100RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.