Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
87.464exploits catalogados
40.695CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
87.464 exploits
GitHub PoC
Offline Docker CopyEscape evidence checker for CVE-2026-17106. Docker version and build-configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
Tar extraction in moby/go-archive can write outside the destination directory via link following
41RIESGO
abrir ↗GitHub PoC
Offline Node.js evidence checker for CVE-2026-56848: HTTP/2 reentrant send use-after-free. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.
A flaw in Node.js HTTP/2 handling allows `nghttp2_session_mem_send()` to be called re-entrantly while `nghttp2_session_m
41RIESGO
abrir ↗GitHub PoC
Offline Flowise evidence checker for CVE-2026-69254. Flowise version and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override
48RIESGO
abrir ↗GitHub PoC
Unofficial EL7 rebuild of Remi's php74 SCL packages with the PHP2Shell fix (CVE-2026-109618, CVE-2026-109619). Not supported by SUSE, Red Hat or Remi.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Multi-tool passive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP memory-corruption RCE pair). Cross-checks 6 independent detection tools, CMS-aware, no exploitation.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Offline Node.js evidence checker for CVE-2026-58044: HTTP header-limit request smuggling. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.
A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding proxies that rebuild ou
28RIESGO
abrir ↗GitHub PoC
Offline Node.js evidence checker for CVE-2026-58045: zlib synchronous API spoofed TypedArray crash. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.
A flaw in Node.js allows a spoofed `TypedArray` `byteLength` to trigger a reachable assertion in the synchronous `node:z
33RIESGO
abrir ↗GitHub PoC
regex2shell (CVE-2026-110264 + family) — GitLab/Onigmo unauth regex RCE research: safe differential detector, deterministic interpreter kill, match-time write primitive
Integer Overflow or Wraparound in GitLab
48RIESGO
abrir ↗GitHub PoC
Claude Code skill + scripts to find, patch and verify PHP2Shell (CVE-2026-109618, CVE-2026-109619) on any PHP server
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Correção e verificação de PHP 7.4 (CVE-2026-109618/109619) por bind, Apache e nginx/FPM
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Offline Node.js evidence checker for CVE-2026-58041: SQLite cached iterator write replay. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.
A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSync#createTagStore() to cont
33RIESGO
abrir ↗GitHub PoC
Offline Node.js evidence checker for CVE-2026-106071: Permission Model wildcard path over-grant. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.
A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not match a wildcard `--allo
28RIESGO
abrir ↗GitHub PoC
Offline Node.js evidence checker for CVE-2026-105483: TLS fullwidth-IP hostname validation bypass. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.
A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenticate a con
41RIESGO
abrir ↗GitHub PoC★ 2
Passive Node2Shell (CVE-2026-111497) exposure checker and offline Node.js runtime assessment with branded HTML reports. Python 3.10+, no dependencies, no exploit payloads.
Out-of-Bounds Write in Google Brotli Decoder
70RIESGO
abrir ↗GitHub PoC★ 1
Nuclei template for CVE-2026-76504 — Cisco vManage authentication bypass
Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability
90RIESGO
abrir ↗GitHub PoC★ 27
Target-specific Android CVE-2026-98260 research port for Xiaomi popsicle
exec: Cleanup POSIX timers right after de_thread()
41RIESGO
abrir ↗GitHub PoC
Standalone defensive checker project for CVE-2026-102255: SonicWall SMA1000 (6210, 7210, 8200v): Pre-authentication server-side request forgery. One exploit per repository; implementation pending.
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended altern
48RIESGO
abrir ↗GitHub PoC
Offline Node.js evidence checker for CVE-2026-58042: DNS resolveAny process abort. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.
A flaw in Node.js can cause dns.resolveAny() Aborts the Node.js Process When a DNS Response Contains More Than 256 A Rec
33RIESGO
abrir ↗GitHub PoC
CVE-2026-76504 — Cisco Catalyst SD-WAN Manager Auth Bypass Exploit
Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability
90RIESGO
abrir ↗GitHub PoC
Patched PHP 7.3 RPMs for EL8 / Rocky Linux 8 (Remi php73-php-*) fixing CVE-2026-109618 / CVE-2026-109619, with an installer that detects the server's PHP, upgrades it and can roll back.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Check a PHP install for the PHP2Shell fixes (CVE-2026-109618, CVE-2026-109619), including Ubuntu backports, and show interim mitigations.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Offline Node.js evidence checker for CVE-2026-56846: HTTP/2 retained header memory exhaustion. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.
A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory and enable remote memor
41RIESGO
abrir ↗GitHub PoC
Multi-method remote PHP version detector with PHP2Shell (CVE-2026-109618/109619) triage
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Standalone defensive checker project for CVE-2026-105445: Docker Hub account-conversion PAT reassignment. One exploit per repository; implementation pending.
Docker Hub account conversion could reassign an active personal access token to another user
48RIESGO
abrir ↗GitHub PoC
Standalone defensive checker project for CVE-2026-102256: SonicWall SMA1000 (6210, 7210, 8200v): Authenticated remote code execution. One exploit per repository; implementation pending.
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerabi
41RIESGO
abrir ↗GitHub PoC★ 1
debjit604/PHP2Shell-CVE-2026-109618-CVE-2026-109619
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
PHP2Shell(CVE-2026-109618/109619) 취약점 점검·대응 도구와 한국어 런북 (비공식, 방어용). Defensive check & response toolkit: Linux/Unix/Windows/containers, patch plans, virtual patches.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
PoC for CVE-2026-94293 — missing authentication (CWE-306) in Asset Administration Shell submodel API (CERT-VDE VDE-2026-108). Unauthenticated GET reads and PATCH overwrites industrial digital twin data. Verified on Python 3.14, stdlib only.
Missing authentication for critical function in the aas-edge-client REST API
28RIESGO
abrir ↗GitHub PoC★ 1
Passive, self-hosted PHP vulnerability exposure scanner (PHP2Shell CVE-2026-109618/109619, CVE-2026-115560) with a plain-English patch report. PWA, CLI, Docker. Zero dependencies.
RCE via OOM corruption
100RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.