Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.402exploits catalogados

39.049CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.184Exploit-DB 24.485GitHub PoC 16.124VulnCheck XDB 9617Nuclei 4473Metasploit 3519✓ solo verificadosrecientes populares riesgo

16.124 exploits

GitHub PoC

Vulhub joomla/CVE-2023-23752: Joomla Webservice Improper Access Check (CVE-2023-23752), run with Isoloom

CVE-2023-23752MEDIUMbajo ataque08 oct 2026

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

abrir ↗

GitHub PoC

Vulhub php/CVE-2012-1823: PHP-CGI Query String Argument Injection (CVE-2012-1823), run with Isoloom

CVE-2012-1823CRITICALbajo ataque08 oct 2026

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not

100RIESGO

abrir ↗

GitHub PoC

Vulhub openssl/CVE-2014-0160: Heartbleed on nginx with OpenSSL 1.0.1c, run with Isoloom

CVE-2014-0160HIGHbajo ataque08 oct 2026

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RIESGO

abrir ↗

GitHub PoC

DOS infinite-loop Vulnerability POC

CVE-2026-102253HIGH07 oct 2026

iperf3 < 3.22 UDP Receive Worker Infinite Loop DoS

41RIESGO

abrir ↗

GitHub PoC

Hunt-Benito/the-cookie-in-the-error-message-cve-2026-102489-zammad-session-hijack-to-rce

CVE-2026-102489HIGHbajo ataque07 oct 2026

Undisclosed RCE in Zammad v6.3 and higher

71RIESGO

abrir ↗

GitHub PoC★ 8

CVE-2026-21589 detector for Atlassian Data Center webresource traversal. Pre-auth webroot file read confirm for Jira, Confluence and Bitbucket.

CVE-2026-21589CRITICAL07 oct 2026

This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft

63RIESGO

abrir ↗

GitHub PoC★ 2

CVE-2026-13043 - Exploiting Panda / WatchGuard pskmad.sys authentication bypass for privileged IOCTL access, MSR disclosure and arbitrary process memory reads.

CVE-2026-13043CRITICAL07 oct 2026

WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access

48RIESGO

abrir ↗

GitHub PoC★ 2

CVE-2026-102782 — OrdaSoft Joomla Simple Membership <7.4.0 unauth SQLi (CWE-89, CVSS 4.0 9.3). PoCbit PoC: checkLoginPass + login param extractvalue error leak. check/exploit/mass, hits.txt & exploited.txt. Fix 7.4.0+. https://pocbit.org/pocs/cve-2026-102782

CVE-2026-102782CRITICAL07 oct 2026

Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership < 7.4.0

48RIESGO

abrir ↗

GitHub PoC

MCPJam Inspector Remote Code Execution

CVE-2026-23744CRITICAL07 oct 2026

REC in MCPJam inspector due to HTTP Endpoint exposes

75RIESGO

abrir ↗

GitHub PoC

cve-2026-87902 lab

CVE-2026-87902HIGHbajo ataque07 oct 2026

An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph

98RIESGO

abrir ↗

GitHub PoC

sungue1/CVE-2025-29927

CVE-2025-29927CRITICAL07 oct 2026

Authorization Bypass in Next.js Middleware

85RIESGO

abrir ↗

GitHub PoC

Benign, offline reproduction of CVE-2026-93355 — LiteLLM unverified-email JWT account takeover (runs LiteLLM's real code)

CVE-2026-93355HIGH07 oct 2026

LiteLLM Weak JWT Authentication via Email-Based User Lookup

41RIESGO

abrir ↗

GitHub PoC

CVE-2026-102422 POC

CVE-2026-102422CRITICAL07 oct 2026

shell-quote `quote()` command injection via a line terminator in a token after a `{ comment }` token

48RIESGO

abrir ↗

GitHub PoC

CVE-2026-21589

CVE-2026-21589CRITICAL07 oct 2026

This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft

63RIESGO

abrir ↗

GitHub PoC

Atlassian Arbitrary File Read

CVE-2026-21589CRITICAL07 oct 2026

This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft

63RIESGO

abrir ↗

GitHub PoC★ 179

CVE-2026-63030 + CVE-2026-60137 exploit RCE chain

CVE-2026-63030CRITICALbajo ataque07 oct 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

98RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2026-59358 - Cloud Foundry UAA - High - Remote - Privilege leftover - user PKCE token as client_credentials Bearer

CVE-2026-59358HIGH07 oct 2026

UAA OAuth Token Endpoint Vulnerability allows user access token reuse for client_credentials grant type

41RIESGO

abrir ↗

GitHub PoC

BimBoxH4/CVE-2026-21589

CVE-2026-21589CRITICAL07 oct 2026

This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft

63RIESGO

abrir ↗

GitHub PoC

0xCyp1337/CVE-2026-81780

CVE-2026-81780CRITICAL07 oct 2026

WordPress Hash Form plugin <= 1.4.2 - Arbitrary File Upload vulnerability

48RIESGO

abrir ↗

GitHub PoC★ 1

Privilege Escalation vulnerability

CVE-2026-96451HIGH07 oct 2026

WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability

41RIESGO

abrir ↗

GitHub PoC

DirtyFrag CVE-2026-43284 research for 5.4-qgki devices

CVE-2026-43284HIGH07 oct 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

56RIESGO

abrir ↗

GitHub PoC

在AI辅助下利用cve-2019-2215 完成OPPO A77t提权

CVE-2019-2215HIGHbajo ataque07 oct 2026

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

100RIESGO

abrir ↗

GitHub PoC

CVE-2021-38759 — Raspberry Pi OS Default Credentials Exploit

CVE-2021-38759—07 oct 2026

Raspberry Pi OS through 5.10 has the raspberry default password for the pi account. If not changed, attackers can gain a

28RIESGO

abrir ↗

GitHub PoC★ 2

CVE-2026-105844 — Payload CMS @payloadcms/plugin-import-export <3.88.0 unauth prototype pollution (CWE-1321, CVSS 4.0 9.3). PoCbit PoC: POST /api/exports/export-preview fields __proto__.overrideAccess → ACL bypass / data leak. check/exploit/mass. Fix 3.88.0+. https://pocbit.org/pocs/cve-2026-105844

CVE-2026-105844CRITICAL07 oct 2026

Payload: Prototype pollution in Payload Import Export plugin

48RIESGO

abrir ↗

GitHub PoC★ 2

Smarty is vulnerable to code injection through template inheritance. Crafted assigned data can inject a forged SmartyNocache marker into regenerated PHP cache files, potentially allowing attackers to execute arbitrary PHP code. The issue affects Smarty 4.5.7 and earlier, and 5.8.4 and earlier.

CVE-2026-82531CRITICAL07 oct 2026

Smarty before 4.5.8 and 5.x before 5.8.5 PHP Code Injection via extends: Inheritance Cache

48RIESGO

abrir ↗

GitHub PoC★ 4

Independent PoC and reproducible lab for CVE-2026-97332 — User Private Files < 2.2.0 unauthenticated private file disclosure on WordPress Multisite.

CVE-2026-97332MEDIUM07 oct 2026

User Private Files < 2.2.0 - Unauthenticated Private File Disclosure via .htaccess Rewrite Rule Bypass (Multisite)

33RIESGO

abrir ↗

GitHub PoC

Clean Login < 1.19 - Unauthenticated CAPTCHA Bypass via Empty Session Comparison

CVE-2026-90977MEDIUM07 oct 2026

Clean Login < 1.19 - Unauthenticated CAPTCHA Bypass via Empty Session Comparison

33RIESGO

abrir ↗

GitHub PoC

Telnet 2.7 Authentication Bypass and Privilege Escalation | Telnet 2.7 Kimlik doğrulama Zafiyeti Ve Yetki Yükseltme Saldırısı

CVE-2026-24061CRITICALbajo ataque07 oct 2026

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment

100RIESGO

abrir ↗

GitHub PoC

Authentication Bypass and Remote Code Execution in Remote Access and Site-to-Site VPN

CVE-2026-85102CRITICALbajo ataque07 oct 2026

Improper Certificate Validation in Quantum Security Gateway

78RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2026-57967 PoC — Apache ActiveMQ Artemis unauthenticated session hijacking via SESSION_REATTACH (2.50.0–2.56.0)

CVE-2026-57967CRITICAL06 oct 2026

Apache Artemis, Apache ActiveMQ Artemis: Missing authentication on CORE protocol session reattachment

48RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.