Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
87.899exploits catalogados
40.763CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.463Exploit-DB 24.489GitHub PoC 18.324VulnCheck XDB 10.507Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
87.899 exploits
GitHub PoC★ 1
Safe, reversible interim hardening for critical PHP vulnerabilities while you wait for patched builds. One opt-in module per advisory, dry run by default, auto rollback, one-command revert. Current: CVE-2026-109618 / CVE-2026-109619 (Oct 2026). Not a fix: update PHP.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC★ 2
Proof-of-concept for CVE-2026-109618 and CVE-2026-109619 (PHP upload-progress RCE)
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC★ 1
Blue-team detection signatures and interim mitigations for php2shell (CVE-2026-109618/109619) PHP pre-auth RCE pair. Detection and hardening only.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Reproducer for CVE-2026-85317 — Apache Camel camel-http OAuth2 token cache confusion (CWE-524). Camel Spring Boot.
Apache Camel: Camel-HTTP OAuth2 Token Confusion via an Under-Keyed JVM-Global Token Cache
33RIESGO
abrir ↗GitHub PoC
Reproducer for CVE-2026-91858 — Apache Camel camel-fop XML External Entity (XXE) via a third-party TransformerFactory (CWE-611). Camel Spring Boot + Camel Quarkus.
Apache Camel: Camel-FOP Resolves External DTDs and Entities From Untrusted XSL-FO Input When a Third-Party JAXP TransformerFactory Is Present
33RIESGO
abrir ↗GitHub PoC
Reproducer for CVE-2026-88900 — Apache Camel camel-jgroups unsafe Java deserialization of cluster messages (CWE-502, HIGH). Camel Spring Boot.
Apache Camel: Camel-JGroups: Unsafe Java Deserialization of Cluster Messages in the JGroups Consumer Can Lead to Remote Code Execution
41RIESGO
abrir ↗GitHub PoC
PHP2Shell Censys Query (CVE-2026-109618 / CVE-2026-109619 )
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Read-only triage for the Oct 2026 PHP RCE advisory (CVE-2026-109618/109619)
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
PHP2Shell (CVE-2026-109618/109619) exposure check: find which of your accounts sit on sites running PHP, rank the risk, and know what to delete first. Passive only.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC★ 1
Detection, mitigation, patching and fleet automation for the PHP2Shell RCE pair (CVE-2026-109618 / CVE-2026-109619)
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
haobachang-1/php2shell-CVE-2026-109618-CVE-2026-109619
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Read-only checker for PHP2Shell (CVE-2026-109618, CVE-2026-109619): finds vulnerable PHP, services still running old code after an update, and signs of attack. Linux, macOS, BSD, containers, Windows, shared hosting.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Cybersecurity assignment on CVE-2026-97859, severity analysis, patching, and the Cyber Kill Chain.
Gitea API disclosure of private user social graph, keys and stars
33RIESGO
abrir ↗GitHub PoC★ 4
Script para parchear PHP y verificar versión antes/después — nacido del incidente CVE-2026-109618/109619
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
php:7.4-fpm drop-in rebuilt with the CVE-2026-109618/109619 fix (PHP2Shell)
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC★ 1
Non-destructive detection toolkit + version-differential oracle for PHP2Shell (CVE-2026-109618/109619). Leak oracle verified 4/4 on PHP 8.5.11 vs 0/4 on 8.5.12. Docker lab included.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC★ 8
PHP 7.4 for Windows with CVE-2026-109618 / CVE-2026-109619 Backport
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC★ 2
Passive PHP2Shell (CVE-2026-109618, CVE-2026-109619) exposure checker with branded HTML reports. Single-file Python, no dependencies, no exploit payloads.
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
Passive PHP version checker for CVE-2026-109618 / CVE-2026-109619 (php2shell)
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC
dave-ojumoola/CYB-401-CVE-2021-44228-Log4Shell
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RIESGO
abrir ↗GitHub PoC
AVA-CEO/CVE-2018-10933-Assessment-
A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul
85RIESGO
abrir ↗GitHub PoC★ 41
Proof of concept for CVE-2026-109618/CVE-2026-109619: PHP2Shell
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC★ 2
Non-destructive network scanner for php2shell (CVE-2026-109618/CVE-2026-109619): version fingerprint + session-write oracle, Docker lab + test suite
RCE via OOM corruption
100RIESGO
abrir ↗GitHub PoC★ 1
Free, read-only checker for PHP2Shell (CVE-2026-109618 / CVE-2026-109619). Finds every PHP build, detects vendor back-ports and unrestarted services, and prints next steps.
RCE via OOM corruption
100RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.