Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
87,822cataloged exploits
40,763CVEs with public exploitation
24,696lab-tested
AllReferência 26,463Exploit-DB 24,489GitHub PoC 18,247VulnCheck XDB 10,507Nuclei 4,577Metasploit 3,539✓ verified onlyrecentpopularrisk
87,822 exploits
GitHub PoC
Independent PHP2Shell research: CVE-2026-109618/109619 status, source-linked PoC audits, and evidence tracker.
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 3
Crónica y PoC del patch-day de PHP (21-oct-2026): CVE-2026-109618 / CVE-2026-109619 — RCE pre-auth en mod_php. Primitiva reproducida en stock 8.5.11 y en Nextcloud real. Lab-only.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Patched PHP 7.0 RPMs for CentOS 7 (Remi php-* and php70-php-*) fixing CVE-2026-109618 / CVE-2026-109619, with an installer that detects the server's PHP, upgrades it and can roll back.
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 1
PoC for Gitea versions before 1.27.1 is vulnerable to Path Traversal (CWE-22), which leads to unauthenticated arbitrary file read / information disclosure leading to RCE CVSS 9.8
Gitea Org-mode file disclosure and code execution
68RISK
open ↗GitHub PoC★ 1
Defensive Detector + Bounded Offensive Impact-Evidence Builder for CVE-2026-109618 / CVE-2026-109619 ("PHP2Shell")
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 1
Escáner defensivo por versión para detectar servidores PHP afectados por PHP2Shell (CVE-2026-109618 / CVE-2026-109619). Comprueba la versión de PHP vía HTTP y la compara con las versiones corregidas. Solo detección, sin exploits.
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 2
PHP 8.2-8.5 Docker images (cli/fpm/apache) patched for CVE-2026-109618 / CVE-2026-109619 (php2shell), multi-arch, on GHCR
RCE via OOM corruption
100RISK
open ↗GitHub PoC
CVE-2026-97629 — nginx TLS session-ticket forgery that can bypass client-certificate (mTLS) authentication. Root cause, one-line patch, proof-of-concept exploit and reproduction evidence. Found and disclosed by PhiNode Labs; credited by F5. Fixed in nginx 1.31.7 / 1.30.6.
NGINX ngx_http_ssl_module vulnerability
41RISK
open ↗GitHub PoC
Material e script de diagnóstico (somente leitura) para as CVE-2026-109618 e CVE-2026-109619 (php2shell)
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Relatório de hardening e laboratório Docker defensivo para a PHP2Shell (CVE-2026-109618 / CVE-2026-109619). Sem PoC ofensivo.
RCE via OOM corruption
100RISK
open ↗VulnCheck XDB
client-side
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RISK
open ↗GitHub PoC
Passive PHP version checker for CVE-2026-109618 / CVE-2026-109619 (php2shell)
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 2
Passive PHP2Shell (CVE-2026-109618, CVE-2026-109619) exposure checker with branded HTML reports. Single-file Python, no dependencies, no exploit payloads.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
php2shell (CVE-2026-109618 / CVE-2026-109619) PHP version checker
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 6
Patches, Docker images and proofs for CVE-2026-109618 / CVE-2026-109619 on PHP 5.0 to 8.1 without an official release
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 2
PHP 8.0.30 backport for CVE-2026-109618 / CVE-2026-109619 (Remi php80, EL7 RPMs)
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 4
Hunting pack for PHP2Shell (CVE-2026-109618/109619): find vulnerable PHP assets and hunt for exploitation with Microsoft Defender, Sentinel and Azure tooling
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 2
Non-destructive network scanner for php2shell (CVE-2026-109618/CVE-2026-109619): version fingerprint + session-write oracle, Docker lab + test suite
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 1
Free, read-only checker for PHP2Shell (CVE-2026-109618 / CVE-2026-109619). Finds every PHP build, detects vendor back-ports and unrestarted services, and prints next steps.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
PHP2Shell CVE-2026-109618·109619 보고서 나무위키 형식 파인만 풀이 페이지
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 1
Es un script bastante simple que ayuda a determinar la posibilidad de explotación de la vulnerabilidad php2shell (CVE-2026-109618 / CVE-2026-109619)
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 2
Local Docker trigger reproductions for PHP CVE-2026-109618 and CVE-2026-109619 advisories
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Audit and interim mitigation scripts for PHP2Shell (CVE-2026-109618/109619) on Forge-managed Ubuntu servers
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Reproducer for CVE-2026-85316 — Apache Camel camel-platform-http unintended proxy mode from a path prefix (CWE-1220). Camel Spring Boot + Camel Quarkus.
Apache Camel: Camel-Platform-HTTP Unintended Proxy Mode via Prefix Path Matching
33RISK
open ↗GitHub PoC
DAS-Bodhi/CVE-2026-110936-Siemens-Attack
A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads
71RISK
open ↗GitHub PoC
CVE-2026-86478 - JetBrains YouTrack Helpdesk unauthenticated account takeover via self-asserted email (CVSS 9.8)
In JetBrains YouTrack before 2025.3.161254,
2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthent
48RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.