Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
87.464exploits catalogados
40.695CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
87.464 exploits
GitHub PoC
Standalone defensive checker project for CVE-2026-88778: Citrix NetScaler ADC / Gateway: Predictable TCP initial sequence numbers. One exploit per repository; implementation pending.
TCP Initial Sequence Number (ISN) prediction
41RIESGO
abrir ↗GitHub PoC★ 3
Reverse proxy that blocks PHP parser exploits (CVE-2026-109618/109619) by replaying requests through an 11-version canary array. Compensating control for EOL PHP 5.6–8.1.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
PHP 7.1 security backport for Debian 9 (stretch / buster 2018) fixing CVE-2026-109618 & CVE-2026-109619
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Offline SonicWall SMA1000 evidence checker for CVE-2026-102256. Reported build and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerabi
41RIESGO
abrir ↗GitHub PoC
Check and fix hosts, Docker containers and k8s pods: leaked eMudhra CA trust, and Brotli decoder CVE-2026-111497 scanner
Out-of-Bounds Write in Google Brotli Decoder
70RIESGO
abrir ↗GitHub PoC
Independent, measured check of CVE-2026-93687 (braces stack exhaustion): reproducible cold-process crash under the default 10000 maxLength, and what actually mitigates it.
braces through 3.0.3 Stack Overflow via Deeply Nested Patterns
41RIESGO
abrir ↗GitHub PoC
Audit Linux hosts for CVE-2026-111497 vulnerable brotli (1.0.3-1.2.0, CVSS 4.0 9.2). dpkg/apk/rpm/Node aware. Verified across live containers.
Out-of-Bounds Write in Google Brotli Decoder
70RIESGO
abrir ↗GitHub PoC
Standalone defensive checker project for CVE-2026-58041: Node.js: SQLite cached iterator write replay. One exploit per repository; implementation pending.
A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSync#createTagStore() to cont
33RIESGO
abrir ↗GitHub PoC
Offline vm2 evidence checker for CVE-2026-92935. Sandbox package and nesting evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
vm2 NodeVM Remote Code Execution via Array-Shaped Require
48RIESGO
abrir ↗GitHub PoC★ 1
PHP vulnerability checker and fix: free read-only checker, guided patch script and AI agent skill for PHP2Shell (CVE-2026-109618, CVE-2026-109619). Docker, cPanel, Plesk, DirectAdmin, CloudLinux, shared hosting, VPS. WordPress, Magento, Laravel. PHP 5 to 8.5.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
PHP 8.4.4 Use-After-Free CVE-2026-109618 lab — tested against a real PHP app with mitigation applied
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC★ 1
manual driver mapper that abuses ThrottleStop.sys (CVE-2025-7771) for physical r/w. pdb symbols, pfn va->pa map, NtAddAtom trampoline, calls DriverEntry.
Code Execution / Escalation of Privileges in ThrottleStop
41RIESGO
abrir ↗GitHub PoC★ 2
PHP2Shell (CVE-2026-109618/109619): mod_php pre-auth heap-corruption RCE — working PoC, non-destructive checker, per-build offset recovery for stripped distro packages, lab harness
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
A defensive incident-response scanner for the PHP2Shell vulnerabilities (CVE-2026-109618 / CVE-2026-109619). am-i-infected answers one question: does this server show signs that PHP2Shell was used against it?
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC★ 6
PHP2Shell (CVE-2026-109618/109619) security research and PoC validation using OrcaCyber Zero & Ultra. Includes technical analysis, RCE evidence, and defensive verification tools.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Aplikasi yang berguna untuk mengecek versi PHP dan apakah versi yang lu Pake, kena CVE-2026-109618 & CVE-2026-109619
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Offline NetScaler ADC / Gateway evidence checker for CVE-2026-88773. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
HTTP Request Smuggling
63RIESGO
abrir ↗GitHub PoC
Offline NetScaler ADC / Gateway evidence checker for CVE-2026-88775. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service
41RIESGO
abrir ↗GitHub PoC
Offline SonicWall SMA1000 evidence checker for CVE-2026-102258. Reported build and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SMA1000 Appliance Managem
33RIESGO
abrir ↗GitHub PoC★ 2
Defensive exposure and IOC scanner for PHP2Shell (CVE-2026-109618 / CVE-2026-109619). No exploit traffic.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC★ 2
Black-box pentest lab for the PHP2Shell engine memory-corruption family (CVE-2026-109618 / CVE-2026-109619, CVSS 9.8/9.2). Dual-flag verified attack chain, agent-calibrated. EN/JP/ZH.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Offline NetScaler ADC / Gateway evidence checker for CVE-2026-88776. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service
41RIESGO
abrir ↗GitHub PoC
Offline NetScaler ADC / Gateway evidence checker for CVE-2026-88778. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
TCP Initial Sequence Number (ISN) prediction
41RIESGO
abrir ↗GitHub PoC★ 1
Risk-reduction WordPress plugin for the PHP2Shell exploit (CVE-2026-109618 / CVE-2026-109619) on sites that cannot update PHP yet. A shield, not a cure.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC★ 3
PHP 7.3.33-35 (php2shell fix, CVE-2026-109618/109619) rebuilt for Ubuntu 18.04, 20.04 and Debian 10
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Is your server exposed to PHP2Shell? Free, open-source exposure test and consent-gated exploit validation for CVE-2026-109618 / CVE-2026-109619. Web, API and CLI.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Safe, non-destructive network & VLAN scanner to detect exposed PHP runtimes vulnerable to CVE-2026-109618 / CVE-2026-109619 (PHP2Shell).
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Standalone defensive checker project for CVE-2026-102826: simple-git configuration include command injection. One exploit per repository; implementation pending.
simple-git allows command execution through unblocked Git configuration includes
41RIESGO
abrir ↗GitHub PoC
Free PHP2Shell (CVE-2026-109618, CVE-2026-109619) check skill for Claude Code and Codex. Reads the PHP package and runtime evidence you supply. MIT.
RCE via OOM corruption
100RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.