Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
87.464exploits catalogados
40.695CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4.577Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.464 exploits
GitHub PoC★ 68
Claude Code and Codex skill for finding potentially vulnerable Brotli copies and guiding updates for CVE-2026-111497.
Out-of-Bounds Write in Google Brotli Decoder
70RISCO
abrir ↗GitHub PoC
PHP2Shell — CVE-2026-109618/109619 exploit toolkit: 6 RCE chains, memory disclosure, scanner, detection rules, WAF mitigations, Docker labs. Authorized testing only.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Audit Linux hosts for CVE-2026-111497 vulnerable brotli (1.0.3-1.2.0, CVSS 4.0 9.2). dpkg/apk/rpm/Node aware. Verified across live containers.
Out-of-Bounds Write in Google Brotli Decoder
70RISCO
abrir ↗GitHub PoC
Standalone defensive checker project for CVE-2026-58041: Node.js: SQLite cached iterator write replay. One exploit per repository; implementation pending.
A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSync#createTagStore() to cont
33RISCO
abrir ↗GitHub PoC
Offline Ivanti Connect Secure evidence checker for CVE-2026-104935. Connect Secure build and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arb
100RISCO
abrir ↗GitHub PoC★ 2
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Offline Docker Hub PAT evidence checker for CVE-2026-105445. Supplied evidence only; no token collection, login or API requests. JSON/CSV/HTML reports.
Docker Hub account conversion could reassign an active personal access token to another user
48RISCO
abrir ↗GitHub PoC
Read-only defensive auditor (no exploit code or PoC, zero dependencies) for PHP2Shell CVE-2026-109618, CVE-2026-109619, and Node.js CVE-2026-111497.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
php2shell CVE-2026-109618 CVE-2026-109619 detection tooling for Linux and Windows
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
debjit604/PHP2Shell-CVE-2026-109618-CVE-2026-109619
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
CVE-2026-112403: Pillow heap buffer overflow in ImagingJpegDecode via lossless JPEG thumbnail. One POST, 100% crash rate.
Pillow: Heap buffer overflow in ImagingJpegDecode
48RISCO
abrir ↗GitHub PoC
Security reading group demo: Pillow GHSA-5x8w-8jj5-q52h (CVE-2026-112398) heap buffer overflow research note
Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution
48RISCO
abrir ↗GitHub PoC
PHP2Shell lab (CVE-2026-109618 / -109619): reach the OOM, read the previous request's stale session state, then measure an attacker-chosen length and an out-of-bounds read. Ships the instrumented-build recipe, not just the conclusion.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Free read-only self-check scripts for PHP2Shell (CVE-2026-109618), the LiteLLM 1.107.0 compromise and the eMudhra CA keys. Runs on your machine; nothing leaves your network.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 3
PHP 7.3.33-35 (php2shell fix, CVE-2026-109618/109619) rebuilt for Ubuntu 18.04, 20.04 and Debian 10
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Use-After-Free on PHP 8.4.26, Apache 2.4.69. RCE pre-auth PoC made for educational purposes
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Offline SonicWall SMA1000 evidence checker for CVE-2026-102256. Reported build and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerabi
41RISCO
abrir ↗GitHub PoC
Guard for PHP 7.4: native Linux package remediation for CVE-2026-109618/109619, with verified build recipes and deployment checks.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Safe, non-destructive network & VLAN scanner to detect exposed PHP runtimes vulnerable to CVE-2026-109618 / CVE-2026-109619 (PHP2Shell).
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Unofficial backports of PHP CVE-2026-109618/109619 (OOM RCE) for legacy PHP 5.4, 5.5 and 7.2 + Apache/FPM mitigations
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Educational HTML/CSS/JS visualization of CVE-2026-109618 — a PHP out-of-memory / longjmp() request-state corruption issue. For security awareness and blue-team training only.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Offline SonicWall SMA1000 evidence checker for CVE-2026-102257. Reported build and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extrac
41RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.