Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
87.464exploits catalogados
40.695CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4.577Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.464 exploits
GitHub PoC★ 1
CVE-2026-114148 - .NET Linux Tarball Local Privilege Escalation PoC & Exploit
ASP.NET Core Elevation of Privilege Vulnerability
41RISCO
abrir ↗GitHub PoC★ 49
6.12.69-android16-6-g242e1a07f878
exec: Cleanup POSIX timers right after de_thread()
41RISCO
abrir ↗GitHub PoC
PHP2Shell (CVE-2026-109618/109619) exposure sweep and takeover assessment across 56 vulnerable TZ/KE hosts
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
PwnKit CVE-2021-4034 Mitigation work (Ansible Role)
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗GitHub PoC
Unofficial backport of the CVE-2026-109618 / CVE-2026-109619 (php2shell) fixes to Ubuntu 12.10 php5 5.4.6-1ubuntu1.8, with chroot build, regression tests, rollback and step-by-step deploy scripts for Apache 2.2 + mod_php. Stopgap only: PHP 5.4 is end-of-life.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 3
Check whether a website is affected by PHP2Shell (CVE-2026-109618 / CVE-2026-109619)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
Unauthenticated RCE in PHP via session.upload_progress use-after-free (CVE-2026-109618 / CVE-2026-109619)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 6
REDMI K90 Max在OS4.0.5.0.XAACNXM利用CVE-2026-98260获取ROOT权限并加载KSU模块。
exec: Cleanup POSIX timers right after de_thread()
41RISCO
abrir ↗GitHub PoC★ 1
node2shell-detector - local + network detections for Node2Shell (CVE-2026-111497) by IONSEC. Python CLI: runtime posture, Brotli decoder fingerprints, dependency exposure, log fingerprints, opt-in self-test; plus Sigma, Suricata, ModSecurity, YARA rules and edge/app snippets.
Out-of-Bounds Write in Google Brotli Decoder
70RISCO
abrir ↗GitHub PoC★ 2
Offline Brotli / HTTP2Shell (CVE-2026-111497) exposure and inventory checker across verified ecosystems. Python 3.10+, no dependencies or exploit payloads.
Out-of-Bounds Write in Google Brotli Decoder
70RISCO
abrir ↗GitHub PoC★ 1
CVE-2026-109619 - PHP session.upload_progress File Poisoning + LFI RCE (CVSS 9.2)
RCE via stale global state
100RISCO
abrir ↗VulnCheck XDB
local
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RISCO
abrir ↗GitHub PoC
Offline Python detector for CVE-2026-76466 in Cisco Expressway, using version and clustering evidence with JSON reporting.
Cisco Expressway Series Remote Code Execution Vulnerability
28RISCO
abrir ↗GitHub PoC
PoC / exploit archive for CVE-2026-0303
Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File
28RISCO
abrir ↗GitHub PoC
Cross-platform scanner that finds .NET apps, runtimes and Azure App Service / Functions deployments exposed to CVE-2026-111497 (brotli decoder)
Out-of-Bounds Write in Google Brotli Decoder
70RISCO
abrir ↗GitHub PoC
CVE-2026-90931: LaraDashboard stored XSS via SVG upload — bilingual analysis and safe PoC
LaraDashboard 0.9.0 through 1.2.2 Stored XSS via SVG Upload
33RISCO
abrir ↗GitHub PoC★ 1
CVE-2026-90932: LaraDashboard path traversal to arbitrary file deletion/write — bilingual analysis and safe PoC
LaraDashboard 0.9.2 through 1.2.2 Path Traversal RCE
41RISCO
abrir ↗GitHub PoC
CVE-2026-84589: macOS TCC privacy bypass via FaceTime impersonation. Technical PoC analysis, Apple disclosure timeline, and patch coverage.
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27. An app may
33RISCO
abrir ↗GitHub PoC
Checks that Tenable scanning is set up to detect PHP2Shell (CVE-2026-109618, CVE-2026-109619) on every PHP host: plugin feed, credentials, and scan settings. Lists the hosts to rescan and flags end-of-life PHP. Works with Tenable Vulnerability Management, Security Center, and .nessus files. Claude Code skill or standalone script.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
CVE-2026-109618: Unauthenticated RCE via PHP session upload progress OOM heap corruption (Apache mod_php)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Read-only scanner and config patcher to detect and work around CVE-2026-109618 / CVE-2026-109619 on PHP, with a full detection and harening manual.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
CVE-2026-109618 / 109619 research & exploit tooling (mod_php + FPM Chain-E)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Controlled lab pinned to PHP 8.3.35 for reproducing/patch-verifying PHP2Shell (CVE-2026-109618, CVE-2026-109619)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
PHP2Shell — Unauthenticated RCE chain exploiting CVE-2026-109618 (OOM memory corruption) + CVE-2026-109619 (stale global state) in PHP.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Browser-based terminal-style UI for assetnote's php2shell-scanner (CVE-2026-109618 / CVE-2026-109619), with live per-probe SSE activity log and JSON export. Detection engine by assetnote; original discovery by Calif.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Secure REST API with CI/CD security scanning (Bandit SAST + pip-audit SCA) and a reproducible CVE-2017-1000028 lab (GlassFish 4.1)
Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Trave
60RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.