Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
87.949exploits catalogados
40.798CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.342VulnCheck XDB 10.507Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.464 exploits
GitHub PoC
Offline Tinypool evidence checker for CVE-2026-104849. Worker-pool package and options evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
Tinypool: Prototype Pollution Gadget to RCE in run() options
48RISCO
abrir ↗GitHub PoC
Offline FortiMail evidence checker for CVE-2026-104286. FortiMail version and deployment evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.
78RISCO
abrir ↗GitHub PoC
Offline NetScaler ADC / Gateway evidence checker for CVE-2026-88778. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
TCP Initial Sequence Number (ISN) prediction
41RISCO
abrir ↗GitHub PoC
Offline simple-git evidence checker for CVE-2026-102826. Git configuration and package evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
simple-git allows command execution through unblocked Git configuration includes
41RISCO
abrir ↗GitHub PoC
Offline Atlassian Data Center evidence checker for CVE-2026-21589. Self-managed product and version evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft
100RISCO
abrir ↗GitHub PoC
Offline BeyondTrust Remote Support evidence checker for CVE-2026-102764. Remote Support version and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support
100RISCO
abrir ↗GitHub PoC
CVE-2026-112403: Pillow heap buffer overflow in ImagingJpegDecode via lossless JPEG thumbnail. One POST, 100% crash rate.
Pillow: Heap buffer overflow in ImagingJpegDecode
48RISCO
abrir ↗GitHub PoC★ 1
Root-cause analysis and PoC for CVE-2026-109715: an unguarded CacheIR stub for global-lexical SetGName in Firefox's SpiderMonkey JIT, yielding a cross-object slot-confused Value write from plain JavaScript.
Incorrect boundary conditions in the JavaScript Engine component
41RISCO
abrir ↗GitHub PoC
Offline Ivanti Connect Secure evidence checker for CVE-2026-104935. Connect Secure build and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arb
100RISCO
abrir ↗GitHub PoC
Offline Docker Hub PAT evidence checker for CVE-2026-105445. Supplied evidence only; no token collection, login or API requests. JSON/CSV/HTML reports.
Docker Hub account conversion could reassign an active personal access token to another user
48RISCO
abrir ↗GitHub PoC
Security reading group demo: Pillow GHSA-5x8w-8jj5-q52h (CVE-2026-112398) heap buffer overflow research note
Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution
48RISCO
abrir ↗GitHub PoC
Standalone defensive checker project for vm2 CVE-2026-92935. One exploit per repository; implementation pending.
vm2 NodeVM Remote Code Execution via Array-Shaped Require
48RISCO
abrir ↗GitHub PoC
Guard for PHP 7.4: native Linux package remediation for CVE-2026-109618/109619, with verified build recipes and deployment checks.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 5
Critical Vulnerabilities in PHP Core (CVE-2026-109618/CVE-2026-109619) Recon → Passive Fingerprinting → Behavioral Probing → WAF Diagnostics) and separately opt-in exploit/shell functions.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
isaca0315/cve-2026-109618-109619-session-upload-progress-trigger
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
Risk-reduction WordPress plugin for the PHP2Shell exploit (CVE-2026-109618 / CVE-2026-109619) on sites that cannot update PHP yet. A shield, not a cure.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Aplikasi yang berguna untuk mengecek versi PHP dan apakah versi yang lu Pake, kena CVE-2026-109618 & CVE-2026-109619
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 6
PHP2Shell (CVE-2026-109618/109619) security research and PoC validation using OrcaCyber Zero & Ultra. Includes technical analysis, RCE evidence, and defensive verification tools.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 2
Apache Tomcat WebSocket security constraint bypass (CVE-2026-76183) reproduction
Apache Tomcat: Bypass of security constraints for WebSocket endpoints
48RISCO
abrir ↗GitHub PoC
Offline Tinypool evidence checker for CVE-2026-104849. Worker-pool package and options evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
Tinypool: Prototype Pollution Gadget to RCE in run() options
48RISCO
abrir ↗GitHub PoC
Offline FortiMail evidence checker for CVE-2026-104286. FortiMail version and deployment evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.
78RISCO
abrir ↗GitHub PoC★ 2
Proof of concept exploit for CVE-2026-106173, a path traversal file write leading to RCE for Fortinet FortiSIEM
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5
48RISCO
abrir ↗GitHub PoC★ 1
Backport-aware PHP2Shell (CVE-2026-109618/109619) checker for installed PHP packages; knows distro and vendor fixed builds, incl. patched PHP 5.6-8.4 for CentOS 7
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Live tracker: how fast is the internet patching PHP against PHP2Shell (CVE-2026-109618/-109619)? Hourly, anonymized.
RCE via OOM corruption
100RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.