Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
87.933exploits catalogados
40.796CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.326VulnCheck XDB 10.507Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.464 exploits
GitHub PoC★ 14
PHP2Shell: version-aware research toolkit for CVE-2026-109618 / CVE-2026-109619 — pre-auth RCE in PHP session.upload_progress (mod_php). Build profiles, labs, heap calibration and detection guidance for authorized security testing.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
PHP2Shell (CVE-2026-109618 / CVE-2026-109619) exposure scanner - flags unpatched PHP version pins across composer/Docker/CI plus attack-surface amplifiers
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 2
Passive, evidence-first Chrome extension for PHP2Shell (CVE-2026-109618 / CVE-2026-109619) exposure assessment
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Standalone defensive checker project for CVE-2026-58042: Node.js: DNS resolveAny process abort. One exploit per repository; implementation pending.
A flaw in Node.js can cause dns.resolveAny() Aborts the Node.js Process When a DNS Response Contains More Than 256 A Rec
33RISCO
abrir ↗GitHub PoC
PHP2Shell Sentinel is an intelligent, zero-dependency, low-resource cross-platform defense daemon to detect, log, prevent, and actively mitigate php2shell exploits (CVE-2026-109618 & CVE-2026-109619, plus CVE-2024-4577) on both Linux and Windows servers
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Standalone defensive checker project for vm2 CVE-2026-92935. One exploit per repository; implementation pending.
vm2 NodeVM Remote Code Execution via Array-Shaped Require
48RISCO
abrir ↗GitHub PoC
Standalone defensive checker project for CVE-2026-88773: Citrix NetScaler ADC / Gateway: HTTP request smuggling. One exploit per repository; implementation pending.
HTTP Request Smuggling
63RISCO
abrir ↗GitHub PoC
Standalone defensive checker project for CVE-2026-88774: Citrix NetScaler ADC / Gateway: URL-expression policy bypass. One exploit per repository; implementation pending.
Feature policy bypass due to improper HTTP URL based expression usage
41RISCO
abrir ↗GitHub PoC
Offline Node.js evidence checker for CVE-2026-106069: TLS leading-zero IPv4 resolver mismatch. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.
A flaw in Node.js TLS hostname verification can cause a server certificate to be validated against a different IP addres
41RISCO
abrir ↗GitHub PoC★ 2
Apache Tomcat WebSocket security constraint bypass (CVE-2026-76183) reproduction
Apache Tomcat: Bypass of security constraints for WebSocket endpoints
48RISCO
abrir ↗GitHub PoC
Correção e verificação de PHP 7.4 (CVE-2026-109618/109619) por bind, Apache e nginx/FPM
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Claude Code skill + scripts to find, patch and verify PHP2Shell (CVE-2026-109618, CVE-2026-109619) on any PHP server
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Standalone defensive checker project for CVE-2026-58040: Node.js: HTTPS Agent TLS session identity-policy bypass. One exploit per repository; implementation pending.
An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across ident
33RISCO
abrir ↗GitHub PoC★ 1
php2shell-detector - local + network detections for PHP2Shell (CVE-2026-109618 / CVE-2026-109619) by IONSEC. Python CLI: host posture, access-log fingerprints, binary drift; plus Sigma, Suricata, ModSecurity rules and curated references.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
php7-security-backports-for-PHP2Shell，(CVE-2026-109618 、 CVE-2026-109619)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Single-file PoC for CVE-2026-109618/109619 (PHP session upload_progress OOM UAF -> RCE). Authorized internal testing only.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
CVE-2026-109618 / CVE-2026-109619 本地复现笔记：UAF 原语验证、利用链边界分析、加固方案
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Standalone defensive checker project for CVE-2026-19490: Citrix NetScaler ADC / Gateway: Gateway / AAA alternate-path authentication bypass. One exploit per repository; implementation pending.
NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490
90RISCO
abrir ↗GitHub PoC
Standalone defensive checker project for CVE-2026-58041: Node.js: SQLite cached iterator write replay. One exploit per repository; implementation pending.
A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSync#createTagStore() to cont
33RISCO
abrir ↗GitHub PoC
Offline Node.js evidence checker for CVE-2026-58040: HTTPS Agent TLS session identity-policy bypass. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.
An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across ident
33RISCO
abrir ↗GitHub PoC
PHP2Shell — CVE-2026-109618/109619 exploit toolkit: 6 RCE chains, memory disclosure, scanner, detection rules, WAF mitigations, Docker labs. Authorized testing only.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Authorized loopback-only Docker firing range for CVE-2026-110264 (Onigmo regex integer-overflow, unauth RCE) research + detection engineering
Integer Overflow or Wraparound in GitLab
48RISCO
abrir ↗GitHub PoC
scanner CVE-2026-109618/CVE-2026-109619. write with bun
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Read-only defensive auditor (no exploit code or PoC, zero dependencies) for PHP2Shell CVE-2026-109618, CVE-2026-109619, and Node.js CVE-2026-111497.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
CentOS 7 Remi PHP 7.4/8.3 rebuild for CVE-2026-109618/109619
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 68
Claude Code and Codex skill for finding potentially vulnerable Brotli copies and guiding updates for CVE-2026-111497.
Out-of-Bounds Write in Google Brotli Decoder
70RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.