Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
87,464cataloged exploits
40,695CVEs with public exploitation
24,696lab-tested
AllReferência 26,426Exploit-DB 24,489GitHub PoC 18,182VulnCheck XDB 10,251Nuclei 4,577Metasploit 3,539✓ verified onlyrecentpopularrisk
87,464 exploits
GitHub PoC
Patch แบบย่อสำหรับ CVE-2026-109618 และ CVE-2026-109619 เพื่อต่อเวลาไปยังการ Upgrade เป็น PHP รุ่นใหม่กว่า
RCE via OOM corruption
100RISK
open ↗GitHub PoC
PHP2Shell (CVE-2026-109618 / CVE-2026-109619) exposure scanner - flags unpatched PHP version pins across composer/Docker/CI plus attack-surface amplifiers
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 2
Passive, evidence-first Chrome extension for PHP2Shell (CVE-2026-109618 / CVE-2026-109619) exposure assessment
RCE via OOM corruption
100RISK
open ↗GitHub PoC
PHP2Shell Sentinel is an intelligent, zero-dependency, low-resource cross-platform defense daemon to detect, log, prevent, and actively mitigate php2shell exploits (CVE-2026-109618 & CVE-2026-109619, plus CVE-2024-4577) on both Linux and Windows servers
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 3
PHP 7.3.33-35 (php2shell fix, CVE-2026-109618/109619) rebuilt for Ubuntu 18.04, 20.04 and Debian 10
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Use-After-Free on PHP 8.4.26, Apache 2.4.69. RCE pre-auth PoC made for educational purposes
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Safe, non-destructive network & VLAN scanner to detect exposed PHP runtimes vulnerable to CVE-2026-109618 / CVE-2026-109619 (PHP2Shell).
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Free PHP2Shell (CVE-2026-109618, CVE-2026-109619) check skill for Claude Code and Codex. Reads the PHP package and runtime evidence you supply. MIT.
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 1
CVE-2026-109618/109619 (php2shell) PHP exposure classifier and remediation planner. BSD-2-Clause.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
CVE-2026-109618 / CVE-2026-109619 本地复现笔记：UAF 原语验证、利用链边界分析、加固方案
RCE via OOM corruption
100RISK
open ↗GitHub PoC
scanner CVE-2026-109618/CVE-2026-109619. write with bun
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Offline NetScaler ADC / Gateway evidence checker for CVE-2026-88772. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
Memory overflow vulnerability leading to Remote Code Execution or Denial of Service
100RISK
open ↗GitHub PoC
Scan a filesystem for traces of the compromised eMudhra CA certificates (CVE-2026-111943) and get an upgrade plan
Distrust compromised intermediate certificates in crypto/x509
33RISK
open ↗GitHub PoC
Standalone defensive checker project for CVE-2026-58039: Node.js: Permission Model process-report filesystem bypass. One exploit per repository; implementation pending.
A flaw in Node.js Permission Model enforcement allows process.report writes (and overwrites) files outside --allow-fs-wr
28RISK
open ↗GitHub PoC
Offline evidence checker for NetScaler DTLS CVE-2026-88772. Per-vserver configuration and firmware assessment; standalone Python; no exploit payloads.
Memory overflow vulnerability leading to Remote Code Execution or Denial of Service
100RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.