Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.655exploits catalogados

39.248CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.347Exploit-DB 24.485GitHub PoC 16.178VulnCheck XDB 9644Nuclei 4478Metasploit 3523✓ solo verificadosrecientes populares riesgo

16.178 exploits

GitHub PoC

ghostpels/CVE-2026-13610

CVE-2026-13610HIGH15 ago 2026

KiviCare < 4.5.2 - Unauthenticated Privilege Escalation via Registration

41RIESGO

abrir ↗

GitHub PoC★ 1

This repository contains a conceptual patch demonstrating the mitigation for CVE-2026-68820, a critical Use-After-Free (UAF) vulnerability in the Windows Ancillary Function Driver for WinSock (`afd.sys`).

CVE-2026-68820HIGHbajo ataque15 ago 2026

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

71RIESGO

abrir ↗

GitHub PoC★ 2

SambaCry Explanation and Exploitation Demo with POC

CVE-2017-7494CRITICALbajo ataqueransomware15 ago 2026

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allo

100RIESGO

abrir ↗

GitHub PoC

PoC for CVE-2026-9090 — Casdoor SAML signature bypass (CWE-347). Reproduction-only; coordinated via CERT/CC VU#780781.

CVE-2026-9090CRITICAL15 ago 2026

CVE-2026-9090

48RIESGO

abrir ↗

GitHub PoC★ 2

CVE-2026-43499 (GhostLock) rt_mutex stack-UAF privilege escalation research on Honor BVL-AN16 (Magic6 Pro, SM8650, kernel 6.1.128). Includes analysis docs, reverse-engineering scripts, disassembly artifacts, and exploit source with honor-BVL-AN16 target adaptation.

CVE-2026-43499HIGH15 ago 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RIESGO

abrir ↗

GitHub PoC

Full root in kernel domain with selinux permissive **MOVED TO THIS REPO https://github.com/CamsShaft/IonStack-S22 WILL DELETE THIS ONE SOON**

CVE-2026-43499HIGH15 ago 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RIESGO

abrir ↗

GitHub PoC

Hunt-Benito/bring-your-own-key-cve-2026-73678-unauthenticated-rce-in-mindsdb-cowork

CVE-2026-73678CRITICAL15 ago 2026

MindsDB Minds Platform v26.1.0 Unauthenticated RCE via scratchpad exec()

48RIESGO

abrir ↗

GitHub PoC

CVE-2026-64638 adalah kerentanan Pre-Auth Reflected Cross-Site Scripting (XSS) di WordPress yang ditemukan pada tahun 2026. Kerentanan ini memungkinkan penyerang untuk menyisipkan kode JavaScript berbahaya ke halaman login WordPress (/wp-login.php) tanpa perlu autentikasi terlebih dahulu.

CVE-2026-64638HIGH15 ago 2026

WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially crafted malici

56RIESGO

abrir ↗

GitHub PoC

Alixploit22/CVE-2026-53587

CVE-2026-53587HIGH15 ago 2026

libgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_data

41RIESGO

abrir ↗

GitHub PoC

CS50's Introduction to Cybersecurity final project on React2Shell (CVE-2025-55182)

CVE-2025-55182CRITICALbajo ataqueransomware14 ago 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RIESGO

abrir ↗

GitHub PoC

jeffmarlonmandela/CVE-2021-4034-PwnKit

CVE-2021-4034HIGHbajo ataqueransomware14 ago 2026

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

GitHub PoC

KovachVL/CVE-2026-54356

CVE-2026-54356HIGH14 ago 2026

Budibase authenticated arbitrary S3 signed upload URL issuance via `/api/attachments/:datasourceId/url`

41RIESGO

abrir ↗

GitHub PoC

Mohaimenul370/Perform-an-RDP-exploitation-using-the-BlueKeep-vulnerability-CVE-2019-0708-on-Windows

CVE-2019-0708CRITICALbajo ataqueransomware14 ago 2026

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau

100RIESGO

abrir ↗

GitHub PoC

CVE-2026-53365

CVE-2026-53365HIGH14 ago 2026

vsock/virtio: fix zerocopy completion for multi-skb sends

41RIESGO

abrir ↗

GitHub PoC

PoC for RefluXFS

CVE-2026-64600HIGH14 ago 2026

xfs: resample the data fork mapping after cycling ILOCK

41RIESGO

abrir ↗

GitHub PoC

CVE-2026-54433 Roundcube plain-text email stored XSS PoC

CVE-2026-54433HIGH14 ago 2026

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, there is Stored Cross-Site Scripting (XSS) via a crafted plai

41RIESGO

abrir ↗

GitHub PoC

Kentox493/CVE-2026-46300_Fragnesia

CVE-2026-46300HIGH14 ago 2026

net: skbuff: preserve shared-frag marker during coalescing

56RIESGO

abrir ↗

GitHub PoC★ 64

CVE-2026-8452 PreAuth RCE

CVE-2026-8452HIGHbajo ataque14 ago 2026

Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service

71RIESGO

abrir ↗

GitHub PoC★ 5

KSuRoot 2.2.0 — One-click KernelSU rooting based on CVE-2026-43499. Synced from Root-My-Galaxy v0.2.6 with custom payload (.so) import. Mod by hmascs

CVE-2026-43499HIGH14 ago 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RIESGO

abrir ↗

GitHub PoC★ 1

This package is not a complete root. It flips SELinux to Permissive and holds reclaim long enough for follow-on work. Host `uid=0` is not achieved here.

CVE-2026-43499HIGH14 ago 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RIESGO

abrir ↗

GitHub PoC

PoC funcional de CVE-2026-52715 (GeoLeak): SQLi no autenticada en GEO my WordPress <= 4.5.5 via swlatlng/nelatlng. Laboratorio Docker + exploit time-based/boolean-based + exfiltracion sin comas en payload.

CVE-2026-52715CRITICAL14 ago 2026

WordPress GEO my WordPress plugin <= 4.5.5 - SQL Injection vulnerability

48RIESGO

abrir ↗

GitHub PoC

Proof of Concept (PoC) for CVE-2026-64638, a reflected XSS in WordPress Core < 7.0.3.

CVE-2026-12345MEDIUM14 ago 2026

Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory

33RIESGO

abrir ↗

GitHub PoC

CVE-2021-41773 Exploit Lab

CVE-2021-41773HIGHbajo ataqueransomware14 ago 2026

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

abrir ↗

GitHub PoC

CVE-2026-72550 — Friendica Unauthenticated Stacked-Query SQL Injection PoC (CVSS 9.8 Critical)

CVE-2026-72550CRITICAL14 ago 2026

Friendica Friendica - SQL Injection

48RIESGO

abrir ↗

GitHub PoC

sonalisarkar-2003/FTP-vsFTPD-CVE-2011-2523-VAPT-Report

CVE-2011-2523—13 ago 2026

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

60RIESGO

abrir ↗

GitHub PoC

nullwhisper/CVE-2026-14840

CVE-2026-14840MEDIUM13 ago 2026

YOP Poll < 7.0.6 - Unauthenticated Vote Restriction Bypass via IP Header Spoofing

33RIESGO

abrir ↗

GitHub PoC

WordPress Core <= 7.0.3 - Authenticated (Author+) Remote Code Execution via Malicious File Upload

CVE-2026-65640HIGH13 ago 2026

WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level

41RIESGO

abrir ↗

GitHub PoC★ 272

A cPanel and WHM authentication bypassing tool

CVE-2026-41940CRITICALbajo ataqueransomware13 ago 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RIESGO

abrir ↗

GitHub PoC

josephfarah-ciso/CVE-2026-9999-exploit

CVE-2026-9999HIGH13 ago 2026

Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to execu

41RIESGO

abrir ↗

GitHub PoC

pimpamebanihah/cve-2026-43499-app.so

CVE-2026-43499HIGH13 ago 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.