Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
87.464exploits catalogados
40.695CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4.577Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.464 exploits
GitHub PoC★ 1
Find every PHP version your repositories pin, and what PHP2Shell (CVE-2026-109618, CVE-2026-109619) means for each. One POSIX sh script; reads files only.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Reads the Brotli decoder inside every Node, Bun, Electron app and AI coding tool on your machine: which still carry CVE-2026-111497. Executes nothing.
Out-of-Bounds Write in Google Brotli Decoder
70RISCO
abrir ↗GitHub PoC
Masriyan/Exploit-CVE-2026-110264-GitLab-CE-EE-RCE
Integer Overflow or Wraparound in GitLab
48RISCO
abrir ↗GitHub PoC★ 2
越狱助手 · RootKit for Honor Magic9 (CVE-2026-64560 → cred 写 → 自制内核模块 → KernelSU)，Flutter + Shizuku 一键 root
posix-cpu-timers: Prevent UAF caused by non-leader exec() race
41RISCO
abrir ↗GitHub PoC
Unofficial backports of the PHP2Shell fix (CVE-2026-109618, CVE-2026-109619) to end-of-life PHP 7.0–7.3, with regression-tested patches and rebuilt packages for CentOS 7 (Remi), Debian 10 and Ubuntu 18.04 (Sury).
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Desktop tool to find, audit, and remediate the PHP2Shell CVEs (CVE-2026-109618/109619) on your own infrastructure — network scan, SSH/SFTP checks, guided upgrades, and log analysis.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
A clean, modular, and extensively documented reimplementation of the Assetnote php2shell scanner for detecting CVE-2026-109618 and CVE-2026-109619 in PHP environments.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
Standalone detection probe for PHP2Shell (CVE-2026-109618 / CVE-2026-109619): passive version fingerprint by default, opt-in active crash probe via Nuclei.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 3
NSA Ghidra contains a numeric truncation vulnerability in PackedDecode::skipAttribute and skipAttributeRemaining in marshal.cc.
Ghidra before 12.2 Integer Truncation in PackedDecode::skipAttribute Decompiler Parser
28RISCO
abrir ↗GitHub PoC
Lab-only exact-profile RCE/DoS validator for CVE-2026-111497; refuses non-loopback targets
Out-of-Bounds Write in Google Brotli Decoder
70RISCO
abrir ↗GitHub PoC★ 52
CVE-2026-111497 Node2Shell — Node.js Brotli OOB Write RCE PoC (CVSS 9.2)
Out-of-Bounds Write in Google Brotli Decoder
70RISCO
abrir ↗GitHub PoC
utkarsssh17/cve-2026-111497-brotli-poc
Out-of-Bounds Write in Google Brotli Decoder
70RISCO
abrir ↗GitHub PoC
CVE-2026-109618 & CVE-2026-109619 — PHP Pre-Auth RCE Exploit & Detection Toolkit
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
CVE-2026-86076 — n8n expression sandbox escape via class-field __sanitize rebinding (backend RCE). Verified v2.37.6 (uid=node) / v2.37.7.
n8n: Expression Sandbox Escape in Editor-UI Enables Stored Cross-User JavaScript Execution
41RISCO
abrir ↗GitHub PoC
Harmless fingerprint scanner for PHP CVE-2026-109618 / CVE-2026-109619 (CLI + Web UI)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Production-grade detection engineering suite (Sigma rules & Wazuh XML) and DFIR triage scripts for CVE-2026-109618 / CVE-2026-109619 (PHP2Shell).
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Check if your server is vulnerable for latest PHP2Shell (CVE-2026-109618,CVE-2026-109619, CVE-2026-115560)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Hunt-Benito/one-salt-to-forge-them-all-cve-2026-114612-forged-admin-session-in-litellm
LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key
48RISCO
abrir ↗GitHub PoC★ 11
exploit php2shell (CVE-2026-109618 / CVE-2026-109619) for educational purposes
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
vintage-alt/CVE-2026-109618-and-CVE-2026-109619-php2shell-burpproxy
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
PHP Runtime Vulnerability Assessment Toolkit — CVE-2026-109618 & CVE-2026-109619
RCE via OOM corruption
100RISCO
abrir ↗VulnCheck XDB
initial-access
Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability
90RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.