Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
87.464exploits catalogados
40.695CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4.577Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.464 exploits
GitHub PoC
Detect-only PHP2Shell (CVE-2026-109618/109619) exposure check for websites and local network devices
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
PHP2Shell CVE-2026-109618 / CVE-2026-109619 Mitigation work (Ansible Role)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 2
weblogic CVE-2026-70748,CVE-2026-60672,CVE-2026-35301;PHP CVE-2026-109618 CVE-2026-109619,Node.js CVE-2026-111497,NGINX CVE-2026-42945 CVE-2026-42533 CVE-2026-15176 CVE-2026-93479,Apache HTTPD 2.4.66 CVE-2026-23918,IIS CVE-2026-70024,HTTP.sys CVE-2026-47291... RCE CVE scanner
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t
28RISCO
abrir ↗GitHub PoC★ 1
Scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
CVE-2026-111497 - .NET Brotli OOB Write PoC and Exploit (HTTP2Shell) | By Gh0st-Bx1
Out-of-Bounds Write in Google Brotli Decoder
70RISCO
abrir ↗GitHub PoC★ 1
CVE-2026-102785: YOOtheme Pro 5.0.0-5.0.52 unauthenticated RCE via image handler signature reuse + path traversal + JPEG/PHP polyglot. CVSS 10.0. Check script, exploit, detection rules.
Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52
48RISCO
abrir ↗GitHub PoC
PHP2Shell（CVE-2026-109618 / CVE-2026-109619）の修正状況を確認し、PHPのメモリ安全性を研究するためのセキュリティ検証ツール。
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Offline Python detector for CVE-2026-76474 exposure in Cisco UC inventories, with CSV/JSON input, versioned rules, and auditable reports.
Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities
28RISCO
abrir ↗GitHub PoC★ 11
6.6.118-android15-8-g9bc34d5b0c79
exec: Cleanup POSIX timers right after de_thread()
41RISCO
abrir ↗GitHub PoC★ 49
6.12.69-android16-6-g242e1a07f878
exec: Cleanup POSIX timers right after de_thread()
41RISCO
abrir ↗GitHub PoC★ 1
Persistent root for LG webOS 2.x TVs (CVE-2014-3153)
The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two diff
98RISCO
abrir ↗GitHub PoC
Offline Python detector for CVE-2026-76473 release exposure in Cisco UC inventories, with CSV/JSON input and auditable reports.
Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.
28RISCO
abrir ↗GitHub PoC
Offline Python detector for CVE-2023-7356 exposure in upstream Linux kernels, with CSV/JSON inventories and auditable reports.
Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID
21RISCO
abrir ↗GitHub PoC
Offline Python detector for CVE-2026-76475 exposure in Cisco UC inventories, with CSV/JSON input, versioned rules, and auditable reports.
Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities
28RISCO
abrir ↗GitHub PoC
cyb3r-w0lf/CVE-2026-49881
In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the
41RISCO
abrir ↗GitHub PoC
PoC / exploit archive for CVE-2026-77647
SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August
63RISCO
abrir ↗GitHub PoC
Find Plex Media Servers affected by Plex2Shell (CVE-2026-96652 and three more)
Plex Media Server SSRF
83RISCO
abrir ↗GitHub PoC★ 62
CVE-2026-97798 Windows Error Reporting - Command Injection TO SYSTEM
Windows Error Reporting Service Elevation of Privilege Vulnerability
41RISCO
abrir ↗VulnCheck XDB
initial-access
Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52
48RISCO
abrir ↗GitHub PoC
Liquescent-Development/CVE-2026-109618-CVE-2026-109619
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Portable PHP Brotli decoder inventory for WordPress, Drupal and Symfony — CVE-2026-111497
Out-of-Bounds Write in Google Brotli Decoder
70RISCO
abrir ↗GitHub PoC★ 1
Scanner for php2shell (CVE-2026-111497)
Out-of-Bounds Write in Google Brotli Decoder
70RISCO
abrir ↗GitHub PoC
Verification artifacts for 'How I replicated PHP2Shell, and 5 ways we got super lucky' — checkers for every claim: the fix that shipped nowhere, the four-architecture map, the two-gate leak bands, and the blind-fire arithmetic (CVE-2026-109618/109619)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Is your website affected by HTTP2Shell (CVE-2026-111497)?
Out-of-Bounds Write in Google Brotli Decoder
70RISCO
abrir ↗GitHub PoC
Offline Python detector for CVE-2026-94300 exposure in ISC BIND 9, with edition-aware rules, CSV/JSON inventories, and auditable reports.
Concurrent GSS-TSIG messages corrupt memory
41RISCO
abrir ↗GitHub PoC
PoC / exploit archive for CVE-2026-101767
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported
48RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.