Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
87.950exploits catalogados
40.798CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.343VulnCheck XDB 10.507Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.503 exploits
GitHub PoC★ 2
Script que detecta si tu versión de PHP es vulnerable a PHP2Shell (CVE-2026-109618 / 109619)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Full exploits and PoCs for php2shell (CVE-2026-109618, CVE-2026-109619) and CVE-2024-4577 - PHP critical RCE (CVSS 9.2-9.8)
Argument Injection in PHP-CGI
100RISCO
abrir ↗GitHub PoC★ 1
Defense guide + static scanner for CVE-2026-108551 (openapi-typescript-codegen code injection).
openapi-typescript-codegen through 0.31.0 Code Injection via Handlebars Templates
48RISCO
abrir ↗GitHub PoC
Offline BeyondTrust Remote Support evidence checker for CVE-2026-102764. Remote Support version and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support
100RISCO
abrir ↗GitHub PoC
Standalone defensive checker project for CVE-2026-104935: Ivanti Connect Secure: Authentication bypass by spoofing. One exploit per repository; implementation pending.
Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arb
100RISCO
abrir ↗GitHub PoC
All-in-one scanner for CVE-2026-109618 / CVE-2026-109619 (php2shell). Domain → subdomain enum → DNS resolve → passive PHP version check.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
php2shell (CVE-2026-109618/109619) research toolkit - private preview
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
A complete guide and workflow for integrating Agile sprints with DevOps CI/CD pipelines.
Pillow: Argument Injection in Ghostscript call, potentially leading into RCE
48RISCO
abrir ↗GitHub PoC
PHP2Shell Sentinel is an intelligent, zero-dependency, low-resource cross-platform defense daemon to detect, log, prevent, and actively mitigate php2shell exploits (CVE-2026-109618 & CVE-2026-109619, plus CVE-2024-4577) on both Linux and Windows servers
Argument Injection in PHP-CGI
100RISCO
abrir ↗GitHub PoC★ 2
CVE-2026-71362 — Magento Session Identity Poisoning → Mass Account Takeover (CVSS 9.1, CISA KEV)
Adobe Commerce | Incorrect Authorization (CWE-863)
100RISCO
abrir ↗GitHub PoC
PHP2Shell RCE (CVE-2026-109618 & CVE-2026-109619) defense kit for EOL PHP 7.0–7.4: runtime hardening, Apache/.user.ini/Nginx virtual patches, and diagnostic scanner.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Standalone defensive checker project for CVE-2026-105481: Node.js: HTTP keep-alive premature-response acceptance. One exploit per repository; implementation pending.
A flaw in Node.js HTTP Agent connection reuse can cause a client to accept as valid a response that was sent before the
33RISCO
abrir ↗GitHub PoC
Standalone defensive checker project for CVE-2026-105483: Node.js: TLS fullwidth-IP hostname validation bypass. One exploit per repository; implementation pending.
A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenticate a con
41RISCO
abrir ↗GitHub PoC
Standalone defensive checker project for CVE-2026-106070: Node.js: ZipFile invalid-header content substitution. One exploit per repository; implementation pending.
A flaw in the Node.js `zlib.ZipFile` API can cause it to return bytes that do not belong to the requested entry after th
28RISCO
abrir ↗GitHub PoC
Standalone defensive checker project for CVE-2026-106073: Node.js: Permission Model realpathSync read bypass. One exploit per repository; implementation pending.
A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the required read permissio
28RISCO
abrir ↗GitHub PoC
Unofficial backports of PHP CVE-2026-109618/109619 (OOM RCE) for legacy PHP 5.4, 5.5 and 7.2 + Apache/FPM mitigations
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Offline SonicWall SMA1000 evidence checker for CVE-2026-102255. Reported build and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended altern
48RISCO
abrir ↗GitHub PoC★ 1
Engine-level PHP2SHELL (CVE-2026-109618/109619) lab: stock PHP RCE, interactive exploit, multi-worker/TLS/OOB, Docker evidence.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
A local test environment for PHP2Shell (CVE-2026-109618) on a vulnerable PHP server.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
Read-only Node.js check for the Oct 2026 security release (CVE-2026-111497 Brotli RCE + 9). Finds every install (nvm, fnm, volta, system), what each running process actually uses, restarts needed, and eMudhra CA issues.
Out-of-Bounds Write in Google Brotli Decoder
70RISCO
abrir ↗GitHub PoC
Offline Ivanti Connect Secure evidence checker for CVE-2026-104935. Connect Secure build and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arb
100RISCO
abrir ↗GitHub PoC
Offline SonicWall SMA1000 evidence checker for CVE-2026-102257. Reported build and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extrac
41RISCO
abrir ↗GitHub PoC
Offline NetScaler ADC / Gateway evidence checker for CVE-2026-88774. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
Feature policy bypass due to improper HTTP URL based expression usage
41RISCO
abrir ↗GitHub PoC
Offline NetScaler ADC / Gateway evidence checker for CVE-2026-88771. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands
100RISCO
abrir ↗VulnCheck XDB
initial-access
Laravel TokenGuard authentication bypass through non-string API credentials
63RISCO
abrir ↗GitHub PoC
Standalone defensive checker project for CVE-2026-102826: simple-git configuration include command injection. One exploit per repository; implementation pending.
simple-git allows command execution through unblocked Git configuration includes
41RISCO
abrir ↗GitHub PoC
Offline Node.js evidence checker for CVE-2026-58041: SQLite cached iterator write replay. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.
A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSync#createTagStore() to cont
33RISCO
abrir ↗GitHub PoC
CVE-2026-94300: This analysis and PoC were produced substantially with AI assistance ("AI patchwork"). Every code, diff and measurement claim should be verified against the cited sources before being relied upon.
Concurrent GSS-TSIG messages corrupt memory
41RISCO
abrir ↗GitHub PoC★ 2
Defensive checker for the PHP2Shell RCE (CVE-2026-109618/109619): is the patch actually running, log scan back to Oct 17, WAF/Sigma/Suricata rules. Stdlib Python, no remote probing.
RCE via OOM corruption
100RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.