Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
87.464exploits catalogados
40.695CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4.577Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.464 exploits
GitHub PoC
🛡️ Hands-on defensive Docker lab for the October 2026 RCE week — PHP2Shell (CVE-2026-109618/619), Node.js Brotli & Next.js sharp. See the attack surface and blast radius, and learn to shut them down. No exploits.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
CVE-2026-59248
Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS
41RISCO
abrir ↗GitHub PoC
Non-invasive Python detector for CVE-2026-111497 with Brotli/Node.js version checks, JSON inventories, and CI-ready reports.
Out-of-Bounds Write in Google Brotli Decoder
70RISCO
abrir ↗GitHub PoC★ 1
PHP2Shell: finding and patching affected PHP CVE-2026-109618 and CVE-2026-109619
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
CVE-2026-25262 (Qualcomm BootROM) deep-dive on the Black Hat Asia 2026 'A journey through Sahara' talk + read-only Sahara/EDL recon harness. GPLv3.
Write-what-where Condition in Primary Bootloader
33RISCO
abrir ↗GitHub PoC
asvorg/CVE-2026-116191-poc
Rclone before 1.75.2 Path Traversal via serve webdav MKCOL
41RISCO
abrir ↗GitHub PoC★ 1
CVE-2026-109618 PHP session.upload_progress detection & authorized testing toolkit
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
CVE-2026-116106 - HeyCyan App 1.0.103 (Android) controle de acesso incorreto no FileProvider (CWE-284) - VulDB VDB-426174
HeyCyan App FileProvider access control
33RISCO
abrir ↗GitHub PoC★ 1
Exact-build PHP 5.6 research and reproducible labs for CVE-2026-109618 and CVE-2026-109619
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
Bigfix PHP Vulnerability Scanner Content (CVE-2026-109618, CVE-2026-109619) for Windows, Linux and Mac.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 2
CVE-2026-74580 vhost: reset the vring metadata cache on vring reconfiguration - Exploit
vhost: reset the vring metadata cache on vring reconfiguration
41RISCO
abrir ↗GitHub PoC
CVE-2026-86426 CHECK
LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion
63RISCO
abrir ↗GitHub PoC
Stack-Based Buffer Overflow - FreeFloat FTP Server 1.0
FreeFloat FTP Server NOOP Command buffer overflow
38RISCO
abrir ↗GitHub PoC
This is a Docker Image of php:7.4-fpm which is **CVE-2026-109618-109691-free**.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
CVE-2026-64849 — MLflow SSRF
MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)
98RISCO
abrir ↗GitHub PoC
CVE-2026-116105 - HeyCyan App 1.0.103 (Android) transmissao em texto claro / cleartext transmission (CWE-319) - VulDB VDB-426173
HeyCyan App Network Security Configuration AndroidManifest.xml cleartext transmission
33RISCO
abrir ↗GitHub PoC
CVE-2026-106781 CH341SER Driver Installer Privilege Escalation
An issue in WCH CH340/CH341 USB-to-Serial Windows Driver setup package CH341SER.EXE version 4.0 allows a local attacker
41RISCO
abrir ↗GitHub PoC
lucasbarros097/PHP2Shell__CVE-2026-109618__CVE2026-109619
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 5
Research notes: porting CVE-2026-98260 to vivo/iQOO GKI 6.6.127 (no exploit code; coordinated disclosure planned)
exec: Cleanup POSIX timers right after de_thread()
41RISCO
abrir ↗GitHub PoC★ 89
Shizuku-driven CVE-2026-98260 root + KernelSU runtime LKM loader for Xiaomi yingtian / lhasa (kernel 6.18.21)
exec: Cleanup POSIX timers right after de_thread()
41RISCO
abrir ↗GitHub PoC★ 1
A read-only Site Health check that compares the PHP version your site is running with the releases that fix PHP2Shell (CVE-2026-109618 and CVE-2026-109619)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 2
Build script for PHP (7.2 - 8.1) binaries mitigating PHP2Shell (CVE-2026-109618, CVE-2026-109619) on RunCloud Ubuntu servers.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Patch temporanee per sistemi con versioni di PHP inferiori a 8.2.35 contro CVE-2026-109618 - CVE-2026-109619 - CVE-2026-115560
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 9
A deliberately limited, read-only security scanner for assessing exposure to CVE-2026-109618 (RFC 1867 multipart OOM memory corruption) and CVE-2026-109619 (stale global state use-after-free) in PHP deployments.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
php:8.1.34-fpm-alpine + official PHP patch for CVE-2026-109618/109619
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Fork of datfooldive/DFRoot (DirtyFrag CVE-2026-43284, ReSukiSU) + GitHub Actions APK build
xfrm: esp: avoid in-place decrypt on shared skb frags
78RISCO
abrir ↗GitHub PoC
php:7.4.33-fpm-alpine + official PHP patch for CVE-2026-109618/109619
RCE via OOM corruption
100RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.