Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
87.464exploits catalogados
40.695CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
87.331 exploits
GitHub PoC
Offline Node.js evidence checker for CVE-2026-58042: DNS resolveAny process abort. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.
A flaw in Node.js can cause dns.resolveAny() Aborts the Node.js Process When a DNS Response Contains More Than 256 A Rec
33RIESGO
abrir ↗GitHub PoC
Offline Flowise evidence checker for CVE-2026-69254. Flowise version and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override
48RIESGO
abrir ↗GitHub PoC
Standalone defensive checker project for CVE-2026-104935: Ivanti Connect Secure: Authentication bypass by spoofing. One exploit per repository; implementation pending.
Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arb
100RIESGO
abrir ↗GitHub PoC★ 1
Defense guide + static scanner for CVE-2026-108551 (openapi-typescript-codegen code injection).
openapi-typescript-codegen through 0.31.0 Code Injection via Handlebars Templates
48RIESGO
abrir ↗GitHub PoC
Offline vm2 evidence checker for CVE-2026-92935. Sandbox package and nesting evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
vm2 NodeVM Remote Code Execution via Array-Shaped Require
48RIESGO
abrir ↗GitHub PoC
Offline Sharp / librsvg evidence checker for CVE-2026-96889. Sharp and librsvg version and build evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
Librsvg: use-after-free when xml includes have duplicated entities
41RIESGO
abrir ↗GitHub PoC
Offline NetScaler ADC / Gateway evidence checker for CVE-2026-88773. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
HTTP Request Smuggling
63RIESGO
abrir ↗GitHub PoC
Offline NetScaler ADC / Gateway evidence checker for CVE-2026-88775. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service
41RIESGO
abrir ↗GitHub PoC★ 1
manual driver mapper that abuses ThrottleStop.sys (CVE-2025-7771) for physical r/w. pdb symbols, pfn va->pa map, NtAddAtom trampoline, calls DriverEntry.
Code Execution / Escalation of Privileges in ThrottleStop
41RIESGO
abrir ↗GitHub PoC
Offline BeyondTrust Remote Support evidence checker for CVE-2026-102764. Remote Support version and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support
100RIESGO
abrir ↗GitHub PoC★ 1
Root-cause analysis and PoC for CVE-2026-109715: an unguarded CacheIR stub for global-lexical SetGName in Firefox's SpiderMonkey JIT, yielding a cross-object slot-confused Value write from plain JavaScript.
Incorrect boundary conditions in the JavaScript Engine component
41RIESGO
abrir ↗GitHub PoC
PoC for CVE-2026-94293 — missing authentication (CWE-306) in Asset Administration Shell submodel API (CERT-VDE VDE-2026-108). Unauthenticated GET reads and PATCH overwrites industrial digital twin data. Verified on Python 3.14, stdlib only.
Missing authentication for critical function in the aas-edge-client REST API
28RIESGO
abrir ↗GitHub PoC
Standalone defensive checker project for CVE-2026-102255: SonicWall SMA1000 (6210, 7210, 8200v): Pre-authentication server-side request forgery. One exploit per repository; implementation pending.
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended altern
48RIESGO
abrir ↗GitHub PoC
Offline Ivanti Connect Secure evidence checker for CVE-2026-104935. Connect Secure build and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arb
100RIESGO
abrir ↗GitHub PoC
Offline Docker Hub PAT evidence checker for CVE-2026-105445. Supplied evidence only; no token collection, login or API requests. JSON/CSV/HTML reports.
Docker Hub account conversion could reassign an active personal access token to another user
48RIESGO
abrir ↗GitHub PoC★ 25
Target-specific Android CVE-2026-98260 research port for Xiaomi popsicle
exec: Cleanup POSIX timers right after de_thread()
41RIESGO
abrir ↗GitHub PoC★ 5
Target-specific Android CVE-2026-98260 research port for Xiaomi nezha
exec: Cleanup POSIX timers right after de_thread()
41RIESGO
abrir ↗GitHub PoC★ 1
FahrihFatahilah/CVE-2026-91403-eMudhra-Java-Scanner
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE
48RIESGO
abrir ↗GitHub PoC
Offline Node.js evidence checker for CVE-2026-56846: HTTP/2 retained header memory exhaustion. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.
A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory and enable remote memor
41RIESGO
abrir ↗GitHub PoC
Offline Node.js evidence checker for CVE-2026-58042: DNS resolveAny process abort. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.
A flaw in Node.js can cause dns.resolveAny() Aborts the Node.js Process When a DNS Response Contains More Than 256 A Rec
33RIESGO
abrir ↗GitHub PoC
Offline Flowise evidence checker for CVE-2026-69254. Flowise version and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override
48RIESGO
abrir ↗GitHub PoC
Offline Node.js evidence checker for CVE-2026-56848: HTTP/2 reentrant send use-after-free. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.
A flaw in Node.js HTTP/2 handling allows `nghttp2_session_mem_send()` to be called re-entrantly while `nghttp2_session_m
41RIESGO
abrir ↗GitHub PoC
Offline Docker CopyEscape evidence checker for CVE-2026-17106. Docker version and build-configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
Tar extraction in moby/go-archive can write outside the destination directory via link following
41RIESGO
abrir ↗GitHub PoC
Offline NetScaler ADC / Gateway evidence checker for CVE-2026-19489. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
Vulnerability in NetScaler ADC and NetScaler Gateway.
This issue affects ADC: from 14.1 through 73.32 and from 13.1 thr
41RIESGO
abrir ↗GitHub PoC
Offline NetScaler ADC / Gateway evidence checker for CVE-2026-19490. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490
90RIESGO
abrir ↗GitHub PoC
Offline vm2 evidence checker for CVE-2026-92935. Sandbox package and nesting evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
vm2 NodeVM Remote Code Execution via Array-Shaped Require
48RIESGO
abrir ↗GitHub PoC
Offline Sharp / librsvg evidence checker for CVE-2026-96889. Sharp and librsvg version and build evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
Librsvg: use-after-free when xml includes have duplicated entities
41RIESGO
abrir ↗GitHub PoC
Offline NetScaler ADC / Gateway evidence checker for CVE-2026-88771. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands
100RIESGO
abrir ↗GitHub PoC
Offline NetScaler ADC / Gateway evidence checker for CVE-2026-88772. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
Memory overflow vulnerability leading to Remote Code Execution or Denial of Service
100RIESGO
abrir ↗GitHub PoC
Offline Docker Hub PAT evidence checker for CVE-2026-105445. Supplied evidence only; no token collection, login or API requests. JSON/CSV/HTML reports.
Docker Hub account conversion could reassign an active personal access token to another user
48RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.