Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
87,798cataloged exploits
40,763CVEs with public exploitation
24,696lab-tested
AllReferência 26,463Exploit-DB 24,489GitHub PoC 18,223VulnCheck XDB 10,507Nuclei 4,577Metasploit 3,539✓ verified onlyrecentpopularrisk
87,798 exploits
GitHub PoC
Two small, read-only tools to confirm whether your PHP installations are patched against the critical RCE advisory published 2026-10-21 (CVE-2026-109618 / CVE-2026-109619)
RCE via OOM corruption
100RISK
open ↗GitHub PoC
PHP2Shell (CVE-2026-109618/109619) vendor and Linux distro status - AI-generated, verify before acting
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 1
PHP 5.6 security patch, backports, and mitigations for session.upload_progress Use-After-Free (CVE-2026-109618, CVE-2026-109619).
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Guide, self-assessment form and read-only Linux check script for php2shell (CVE-2026-109618 / CVE-2026-109619): find out if you're exposed, patch, and check whether you were compromised.
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 6
PHP2Shell - CVE-2026-109618/109619 session.upload_progress UAF PoC - multi-target RCE chain - created by 0verDo$ed
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Research notes on CVE-2026-109618 / CVE-2026-109619 (PHP) - defensive analysis
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 16
Exploit tooling and vulnerability research for CVE-2026-109618 and CVE-2026-109619 — two critical unauthenticated remote code execution (RCE) vulnerabilities patched in PHP 8.4.27, 8.3.36, 8.2.35, and 8.5.12 (released October 21, 2026).
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 1
Unofficial PHP 5.4.45 backport for CVE-2026-109618 and CVE-2026-109619, validated with ASan, PHPT, and VC11.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Windows x64 NTS PHP 7.4 security build for CVE-2026-109618 and CVE-2026-109619
RCE via OOM corruption
100RISK
open ↗GitHub PoC
A lightweight Python CLI to assess PHP2Shell (CVE-2026-109618 & CVE-2026-109619) exposure via version checks.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Lightweight, non-intrusive asset scanner designed to audit public and perimeter network assets for vulnerable PHP versions susceptible to php2shell RCE vectors (CVE-2026-109618 / CVE-2026-109619).
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 2
PHP2Shell (CVE-2026-109618 / CVE-2026-109619) — 8-version matrix, Docker labs, and measured boundaries: what works, what does not.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Patched PHP 7.4 packages for Ubuntu 20.04 (focal) fixing CVE-2026-109618 / CVE-2026-109619: Ondřej Surý's 7.4.33-31 rebuilt for focal, with an installer that detects the server's PHP, upgrades it and can roll back.
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 1
Read-only PHP2Shell audit for CVE-2026-109618 and CVE-2026-109619. Discover PHP services and prepare remediation. Linux Bash + Windows PowerShell; EN/PT HTML and CSV reports.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Detect PHP2Shell (CVE-2026-109618, CVE-2026-109619) PHP RCE exploitation attempts by inspecting POST request bodies with nginx mirror
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 61
宝塔面板（BT Panel）上已停止维护的 PHP 版本（5.4 – 8.1）的 PHP2Shell（CVE-2026-109618 / CVE-2026-109619）修复包。仓库里有打好补丁的源码包，以及一键完成编译、替换、回滚的脚本。
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 2
PHP2Shell (CVE-2026-109618/619) exploitation lab — hands-on course container with vulnerable PHP + WordPress
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 1
Check whether a website’s PHP is patched against CVE-2026-109618 / CVE-2026-109619. Works on cPanel ea-php and CloudLinux alt-php without root access
RCE via OOM corruption
100RISK
open ↗GitHub PoC
BIBILZERODAY/CVE-2026-102785---YooTheme-Mass-Exploit-Webshell.Store-
Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52
48RISK
open ↗GitHub PoC
Unofficial PHP 5.3.29 backport of the php2shell fix (CVE-2026-109618, CVE-2026-109619) for Apache mod_php
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 1
Agente de seguridad que detecta y tria php2shell (CVE-2026-109618/109619) en webs y proyectos PHP. Instalable en opencode, Claude Code, Codex, Gemini CLI y otros. Pruebas activas solo con autorización.
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 2
php2shell vulnerability scanner (CVE-2026-109618 / CVE-2026-109619) — detects vulnerable PHP servers even when version is hidden. No exploitation performed.
RCE via OOM corruption
100RISK
open ↗VulnCheck XDB
initial-access
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5
48RISK
open ↗GitHub PoC
Unofficial backport of the official php2shell fix (CVE-2026-109618 / CVE-2026-109619) to PHP 7.3.33. Original fix by Arnaud Le Blanc & Ilija Tovilo (php/php-src).
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Guide opérationnel, outils d’audit et procédure de remédiation pour CVE-2026-109618 et CVE-2026-109619.
RCE via OOM corruption
100RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.