Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
87.464exploits catalogados
40.695CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
87.464 exploits
GitHub PoC★ 1
CVE-2026-109619 - PHP session.upload_progress File Poisoning + LFI RCE (CVSS 9.2)
RCE via stale global state
100RIESGO
abrir ↗VulnCheck XDB
info-leak
YouDataSum CPAS Audit Management System V4 Path Traversal via downPlugs fileId
41RIESGO
abrir ↗GitHub PoC★ 1
node2shell-detector - local + network detections for Node2Shell (CVE-2026-111497) by IONSEC. Python CLI: runtime posture, Brotli decoder fingerprints, dependency exposure, log fingerprints, opt-in self-test; plus Sigma, Suricata, ModSecurity, YARA rules and edge/app snippets.
Out-of-Bounds Write in Google Brotli Decoder
70RIESGO
abrir ↗VulnCheck XDB
initial-access
Improper encoding or escaping of output vulnerability in the system plugin daemon in Synology BeeStation OS (BSM) before
48RIESGO
abrir ↗VulnCheck XDB
initial-access
CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unle
100RIESGO
abrir ↗GitHub PoC★ 1
CVE-2026-109618 / 109619 research & exploit tooling (mod_php + FPM Chain-E)
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Checks that Tenable scanning is set up to detect PHP2Shell (CVE-2026-109618, CVE-2026-109619) on every PHP host: plugin feed, credentials, and scan settings. Lists the hosts to rescan and flags end-of-life PHP. Works with Tenable Vulnerability Management, Security Center, and .nessus files. Claude Code skill or standalone script.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
CVE-2026-86426 CHECK
LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion
63RIESGO
abrir ↗GitHub PoC
BigFix YARA-X discovery Fixlets and shared Analysis for Node.js Brotli CVE-2026-111497 on Windows, Linux and macOS.
Out-of-Bounds Write in Google Brotli Decoder
70RIESGO
abrir ↗GitHub PoC★ 1
A read-only Site Health check that compares the PHP version your site is running with the releases that fix PHP2Shell (CVE-2026-109618 and CVE-2026-109619)
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Hassham1/CVE-2026-112866-woo-product-filter-sqli-poc
WordPress Product Filter by WBW plugin <= 3.4.6 - SQL Injection vulnerability
63RIESGO
abrir ↗GitHub PoC
php:7.4.33-fpm-alpine + official PHP patch for CVE-2026-109618/109619
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC★ 2
A local Docker-based research lab for investigating PHP2Shell (CVE-2026-109618 and CVE-2026-109619), comparing PHP 8.4.26 and 8.4.27, and validating upstream security fixes and regression tests.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
CVE-2026-25262 (Qualcomm BootROM) deep-dive on the Black Hat Asia 2026 'A journey through Sahara' talk + read-only Sahara/EDL recon harness. GPLv3.
Write-what-where Condition in Primary Bootloader
33RIESGO
abrir ↗GitHub PoC★ 2
Build script for PHP (7.2 - 8.1) binaries mitigating PHP2Shell (CVE-2026-109618, CVE-2026-109619) on RunCloud Ubuntu servers.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC★ 1
Exact-build PHP 5.6 research and reproducible labs for CVE-2026-109618 and CVE-2026-109619
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Fork of datfooldive/DFRoot (DirtyFrag CVE-2026-43284, ReSukiSU) + GitHub Actions APK build
xfrm: esp: avoid in-place decrypt on shared skb frags
78RIESGO
abrir ↗GitHub PoC
This is a Docker Image of php:7.4-fpm which is **CVE-2026-109618-109691-free**.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
CVE-2026-83548 — SonicWall SMA1000 Work Place pre-auth SSRF
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended altern
93RIESGO
abrir ↗GitHub PoC★ 3
Curated IoCs, detection engineering rules, and automated threat intel feeds for PHP2Shell (CVE-2026-109618 & CVE-2026-109619).
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
C.A.S-Exploit — Python-based security research and proof-of-concept toolkit for CVE-2017-5689 (Intel AMT authentication bypass), featuring Shodan discovery, HTTP/WS-Management testing, batch scanning, and vulnerability logging.
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Mana
100RIESGO
abrir ↗GitHub PoC
php:8.0.30-fpm-alpine + official PHP patch for CVE-2026-109618/109619
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC★ 2
Proof of Concept (PoC) demonstrating Argument Injection in Pillow's Ghostscript call (Pillow < 13.0.0) potentially leading to arbitrary command execution (RCE).
Pillow: Argument Injection in Ghostscript call, potentially leading into RCE
48RIESGO
abrir ↗GitHub PoC
PHP2Shell Monitor - Real-time detection for CVE-2026-109618/109619 exploitation attempts
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC★ 1
CVE-2026-109618 PHP session.upload_progress detection & authorized testing toolkit
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
lucasbarros097/PHP2Shell__CVE-2026-109618__CVE2026-109619
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
This is a Docker Image of php:7.4-fpm which is **CVE-2026-109618-109691-patched**.
RCE via OOM corruption
100RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.