Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
87.513exploits catalogados
40.739CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.463Exploit-DB 24.489GitHub PoC 18.194VulnCheck XDB 10.251Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
87.515 exploits
GitHub PoC★ 4
Unofficial rebuild of PHP 7.4 for EL7 (CentOS/RHEL 7) with the php2shell fix (CVE-2026-109618/109619). A stopgap for EOL stacks — upgrading is the real fix.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Security Ways for AI coding agents. First member audits Node.js repos for the Oct 21, 2026 security release (CVE-2026-111497 Brotli RCE) and opens a patch PR only if affected.
Out-of-Bounds Write in Google Brotli Decoder
70RIESGO
abrir ↗GitHub PoC★ 1
Honeypot to attract attacks for php2shell (CVE-2026-109618 and CVE-2026-109619)
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Detecteur CVE-2026-109618 / CVE-2026-109619 (php2shell) pour image Docker ou binaire PHP
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
PHP2Shell (CVE-2026-109618/109619) one-click detect & fix tool
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC★ 3
CVE-2026-111497: Node.js Brotli decoder OOB write — analysis, PoC, Docker lab
Out-of-Bounds Write in Google Brotli Decoder
70RIESGO
abrir ↗GitHub PoC
Rebuilds of patched ondrej/php PHP 8.1, 8.0, 7.4, 7.3 and 5.6 packages for Ubuntu 20.04 (CVE-2026-109618, CVE-2026-109619)
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Nuclei template for php2shell (CVE-2026-109618 / CVE-2026-109619) - version-based detection, no exploitation
RCE via OOM corruption
100RIESGO
abrir ↗VulnCheck XDB
initial-access
Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver
100RIESGO
abrir ↗GitHub PoC★ 194
PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Security advisory and PoC for CVE-2026-107079 affecting Systrome Validation & Certification 1.0.
An issue in Systrome Validation & Certification 1.0 allows an attacker to cause a denial of service via the t URL parame
33RIESGO
abrir ↗GitHub PoC★ 1
Agent skill + zero-dependency script: check a Node.js project against the Oct 2026 Node.js security release (Brotli RCE CVE-2026-111497 and 9 more) and bump version pins to the patched release
Out-of-Bounds Write in Google Brotli Decoder
70RIESGO
abrir ↗GitHub PoC
Chrome extension for Blue Teams: passively identify a site's PHP version and PHP2Shell (CVE-2026-109618/109619) exposure.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
CVE-2026-110264 — GitLab Unauthenticated RCE (Onigmo regex repeat-ID overflow, CVSS 10.0). Docker-verified crash PoC on ruby 3.4.11 + measured heap analysis. Crash-level, non-weaponized.
Integer Overflow or Wraparound in GitLab
48RIESGO
abrir ↗GitHub PoC
Go app using Coraza WAF (CVE-2026-114101 bypass)
Coraza before 3.8.1 Multipart filename* Charset Handling FILES Rule Bypass
33RIESGO
abrir ↗GitHub PoC
Node.js app using adm-zip (CVE-2026-114102 DoS)
adm-zip before 0.6.1 Denial of Service via inflateAsync Unhandled Error Event
41RIESGO
abrir ↗GitHub PoC
Quick and dirty hunting script for PHP2Shell (CVE-2026-109618 and CVE-2026-109619) on ISPConfig servers.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Detect PHP2Shell (CVE-2026-109618, CVE-2026-109619) PHP RCE exploitation attempts by inspecting POST request bodies with nginx mirror
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
php2shell-checker Checks any website or internal service for PHP vulnerabilities relating to CVE-2026-109618 and CVE-2026-109619
RCE via OOM corruption
100RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.