Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
87.464exploits catalogados
40.695CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
87.464 exploits
GitHub PoC
Defensive assessment toolkit for CVE-2026-111497 (Brotli OOB write): ecosystem scanner, Python outbound PoC, canary server, CDN amplification analysis, framework defense matrix
Out-of-Bounds Write in Google Brotli Decoder
70RIESGO
abrir ↗GitHub PoC★ 1
Detect php2shell (CVE-2026-109618 / CVE-2026-109619) on remote PHP targets — behavioral multipart probes, version fallback, async CLI in PHP.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Masriyan/Exploit-CVE-2026-110264-GitLab-CE-EE-RCE
Integer Overflow or Wraparound in GitLab
48RIESGO
abrir ↗GitHub PoC
Desktop tool to find, audit, and remediate the PHP2Shell CVEs (CVE-2026-109618/109619) on your own infrastructure — network scan, SSH/SFTP checks, guided upgrades, and log analysis.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Detection and response package for php2shell (CVE-2026-109618 / CVE-2026-109619): Suricata, Zeek, YARA, Sigma, ModSecurity rules, hunting queries, SOC triage, patch matrix. No exploit code.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC★ 1
MOSTAFA JR7 - Custom security research framework targeting PHP 8.4.26 Apache Prefork RCE and ASLR bypass.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC★ 1
CVE-2026-86076 — n8n expression sandbox escape via class-field __sanitize rebinding (backend RCE). Verified v2.37.6 (uid=node) / v2.37.7.
n8n: Expression Sandbox Escape in Editor-UI Enables Stored Cross-User JavaScript Execution
41RIESGO
abrir ↗GitHub PoC
CVE-2026-114509 — Laravel TokenGuard authentication bypass (CVSS 9.2): PoC, root-cause analysis, Docker lab, and reproduction guide
Laravel TokenGuard authentication bypass through non-string API credentials
63RIESGO
abrir ↗GitHub PoC
A clean, modular, and extensively documented reimplementation of the Assetnote php2shell scanner for detecting CVE-2026-109618 and CVE-2026-109619 in PHP environments.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Lab pembelajaran lokal untuk mereproduksi CVE-2026-109618/109619 pada Docker.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Local Docker lab PoC for CVE-2026-109618 / CVE-2026-109619 (php2shell). Authorized use only; local targets.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
PHP 8.5.11 - Critical - Remote - UAF - CVE-2026-109619 PHP2Shell. Same-worker fatal backtrace then INI diagnostic on Apache mod_php. Lab vs 8.5.12. Advisory RCE inferred.
RCE via stale global state
100RIESGO
abrir ↗GitHub PoC★ 1
Gitea LFI to RCE exploit (CVE-2026-59774) — arbitrary file read via Org-mode #+INCLUDE, chained to remote code execution through git hook injection
Gitea Org-mode file disclosure and code execution
68RIESGO
abrir ↗GitHub PoC
High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC★ 4
CVE-2026-111497 – Node.js Brotli Decoder OOB Write (CVSS 9.2) | Red/Blue Team suite for unpatched Node.js 22.x, 24.x, 26.x. 2 tools: Full Exploit (patch detection, remote DoS, Brotli bomb, lab RCE), Blue Team Checker (errno differential, version fingerprint, WAF detection, reporting) Only Use Ethically Only <3
Out-of-Bounds Write in Google Brotli Decoder
70RIESGO
abrir ↗VulnCheck XDB
remote-with-credentials
Adobe Commerce | Incorrect Authorization (CWE-863)
100RIESGO
abrir ↗GitHub PoC★ 11
exploit php2shell (CVE-2026-109618 / CVE-2026-109619) for educational purposes
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC★ 4
Production-ready backported .patch for EOL PHP 5.4,.23 custom 5.x to fix the critical PHP2Shell (OOM) vulnerability (CVE-2026-109618 / CVE-2026-109619).
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC★ 1
Check and patch all installed PHP versions against PHP2Shell (CVE-2026-109618, CVE-2026-109619) on Debian/Ubuntu with PHP from Surý (HestiaCP supported)
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
vintage-alt/CVE-2026-109618-and-CVE-2026-109619-php2shell-burpproxy
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC★ 1
A remote denial of service vulnerability in CrowCPP due to uncontrolled recursion.
Crow before 1.3.4 Denial of Service via Deeply Nested JSON in crow::json::load()
41RIESGO
abrir ↗GitHub PoC★ 3
NSA Ghidra contains a numeric truncation vulnerability in PackedDecode::skipAttribute and skipAttributeRemaining in marshal.cc.
Ghidra before 12.2 Integer Truncation in PackedDecode::skipAttribute Decompiler Parser
28RIESGO
abrir ↗GitHub PoC
CVE-2026-109618 (php2shell part 1): local deterministic memory-safety PoC
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC★ 2
PoC, Docker lab, and technical report for CVE-2026-111497 (Node2Shell) — Node.js Brotli decoder invalid block-switch OOB write; validated errno differential and weaponized remote DoS, RCE analysis included.
Out-of-Bounds Write in Google Brotli Decoder
70RIESGO
abrir ↗GitHub PoC★ 1
Standalone detection probe for PHP2Shell (CVE-2026-109618 / CVE-2026-109619): passive version fingerprint by default, opt-in active crash probe via Nuclei.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC★ 1
PHP Runtime Vulnerability Assessment Toolkit — CVE-2026-109618 & CVE-2026-109619
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC★ 1
my version of an exploit for Krayin CRM v2.2.x - CVE-2026-38526
An authenticated arbitrary file upload vulnerability in the /admin/tinymce/upload endpoint of Webkul Krayin CRM v2.2.x a
48RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.