Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
87.464exploits catalogados
40.695CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
86.989 exploits
GitHub PoC★ 1
A CVE-2026-98260 adapt for OPPO Pad Air 5
exec: Cleanup POSIX timers right after de_thread()
41RIESGO
abrir ↗GitHub PoC
LB-LINK WR1210M (CVE-2026-19971) 未授权配置泄露漏洞与访客网络扩展攻击链分析
LB-Link WR1210M Backup Endpoint backup.cgi main missing authentication
33RIESGO
abrir ↗GitHub PoC★ 1
基于CVE-2026-98260的iQOO Neo9 Pro 临时Root实现，AwA
exec: Cleanup POSIX timers right after de_thread()
41RIESGO
abrir ↗GitHub PoC★ 1
Evidence-based PHP2Shell assessment for CVE-2026-109618 and CVE-2026-109619.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
PHP2Shell scanner - CVE-2026-109618 and CVE-2026-109619
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Simulasi type juggling & implicit type conversion CVE-2026-114509 pada query autentikasi
Laravel TokenGuard authentication bypass through non-string API credentials
48RIESGO
abrir ↗GitHub PoC
Mervent/cve-2026-98432
ipv4: free inet_opt and ireq_opt after an RCU grace period
48RIESGO
abrir ↗GitHub PoC
Citrix NetScaler RCE/DoS CVE-2026-107406
Memory overflow vulnerability leading to Remote Code Execution or Denial of Service
48RIESGO
abrir ↗GitHub PoC
Xboard 节点后端：基于 Xray-core v26.10.31，单补丁实现设备数/限速，严格对齐 Xboard V2 契约，内置 CVE-2026-98432 缓解
ipv4: free inet_opt and ireq_opt after an RCU grace period
48RIESGO
abrir ↗GitHub PoC
Analysis of buffer overflow in Google Brotli decoder (CVE-2026-111497)
Out-of-Bounds Write in Google Brotli Decoder
70RIESGO
abrir ↗GitHub PoC
Proof-of-Concept for CVE-2026-98258.
posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list
41RIESGO
abrir ↗GitHub PoC★ 3
Independent lab reproduction and post-patch verification tool for CVE-2026-112816 (LXD/MicroCloud mTLS chain bypass).
Improper certificate validation in the HTTPS listener in LXD
48RIESGO
abrir ↗GitHub PoC
CVE-2026-115965
WordPress BuddyPress plugin <= 14.5.2 - SQL Injection vulnerability
41RIESGO
abrir ↗GitHub PoC★ 1
Read-only Node2Shell detection for CVE-2026-111497 using verified Node.js artifact identities.
Out-of-Bounds Write in Google Brotli Decoder
70RIESGO
abrir ↗GitHub PoC★ 1
Dependency-free toolkit that contains, patches and verifies the *2Shell families: PHP2Shell (CVE-2026-109618/109619), HTTP2Shell/Brotli (CVE-2026-111497), CVE-2024-4577, CVE-2019-11043. Cuts exploitation channels at the edge in minutes, applies verified upstream source patches, recycles workers, then re-checks every fix. Unattended: setup.sh --auto
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC★ 2
Interim nftables mitigation for Linux kernel CVE-2026-98432 (IPv4-options UAF in tcp_v4_syn_recv_sock) as a reproducible agent skill
ipv4: free inet_opt and ireq_opt after an RCU grace period
48RIESGO
abrir ↗GitHub PoC★ 1
Bash toolkit that finds and fixes PHP CVEs — PHP2Shell (CVE-2026-109618/109619), CVE-2026-115560, CVE-2024-4577, CVE-2019-11043 — on Linux and macOS. Detects runtimes, audits config, applies source patches, hardens php.ini / FPM / nginx / Apache, hunts compromise, rolls back cleanly. MIT.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
CVE-2026-63686 demo
Apache HTTP Server: mod_xml2enc crash on charset conversion failure
41RIESGO
abrir ↗GitHub PoC
Unauthenticated SQL injection (CVSS 9.8) in the Oracle EBS 12.2.312.2.15 TCF servlet
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported
48RIESGO
abrir ↗GitHub PoC
IPv4 SYN with IP options, one lab target per run, for CVE-2026-98432 research. Header-offset parser, regression tests, and a postmortem of a broken auto-exploiter.
ipv4: free inet_opt and ireq_opt after an RCU grace period
48RIESGO
abrir ↗GitHub PoC★ 1
Stopgap firewall mitigation for CVE-2026-98432 on Ubuntu 16.04/24.04
ipv4: free inet_opt and ireq_opt after an RCU grace period
48RIESGO
abrir ↗GitHub PoC
One-click kernel security update for CVE-2026-98432 on Debian 12/13.
ipv4: free inet_opt and ireq_opt after an RCU grace period
48RIESGO
abrir ↗GitHub PoC
Audit statique de l'exposition d'une application Quarkus au décodeur Brotli vulnérable (CVE-2026-111497). Généré avec Claude Code.
Out-of-Bounds Write in Google Brotli Decoder
70RIESGO
abrir ↗GitHub PoC★ 4
woshigenm/CVE-2026-98937
perf/core: Check kernel access when kernel callchains are requested
23RIESGO
abrir ↗GitHub PoC
CVE-2026-119712 (CVSS 8.5 High) — PipesHub < 0.10.0 SSRF via image URLs in indexed documents (CWE-918). Verified PoC.
PipesHub before 0.10.0 SSRF via Image URLs in Indexed Documents
33RIESGO
abrir ↗GitHub PoC
Detection-only local triage scanner for Linux kernel Fragnesia CVE-2026-46300: grade a running or installed kernel against upstream and distro fixed builds. No payloads, no network.
net: skbuff: preserve shared-frag marker during coalescing
91RIESGO
abrir ↗GitHub PoC
Pillow 13.0.0 wheel rebuilt with Brotli 1.2.1 for CVE-2026-111497, until Pillow 13.1.0 ships
Out-of-Bounds Write in Google Brotli Decoder
70RIESGO
abrir ↗GitHub PoC
Ansible playbook to mitigate CVE-2026-98432
ipv4: free inet_opt and ireq_opt after an RCU grace period
48RIESGO
abrir ↗GitHub PoC
Detector and local lab for CVE-2026-98432 (IPv4 TCP UAF in inet_opt/ireq_opt): static analysis, kprobes, the tcp2kaslr trigger vector, and remote-risk evidence. Not an exploit; no RCE.
ipv4: free inet_opt and ireq_opt after an RCU grace period
48RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.