Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.530 exploits
GitHub PoC
Read-only checker for PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. Assess server versions and configuration using an authenticated collector, with JSON reports and remediation guidance.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 6
Wazuh detection content for PHP2Shell (CVE-2026-109618 and CVE-2026-109619): 6 rules, 3 decoders, Apache LogFormat and an SCA policy. Validated on Wazuh 4.14.8 (4.14.x series), Ubuntu 24.04.5, Apache 2.4.58 and PHP 8.3.6.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
eMudhra CA Compromise CVE-2026-111943 CVE-2026-114406 CVE-2026-91403 CVE-2026-113812
Distrust compromised intermediate certificates in crypto/x509
33RISCO
abrir ↗GitHub PoC
PoC and verification material for CVE-2026-96652 (Plex Media Server timeline SSRF, owner-token disclosure chain)
Plex Media Server SSRF
83RISCO
abrir ↗GitHub PoC
Profile-driven php2shell chain (CVE-2026-109619 class) for stock php:*-apache images; loopback lab only.
RCE via stale global state
100RISCO
abrir ↗GitHub PoC★ 1
CVE-2026-109618 / CVE-2026-109619 - one-shot pre-auth RCE on stock PHP 8.4.26 (Apache mod_php), single-file pure-HTTP PoC
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
PHP 5.6.40 packages for Debian 7 wheezy with the CVE-2026-109618 / CVE-2026-109619 fix (unofficial rebuild of the jessie packaging)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Read-only Windows & macOS scripts to find PHP and flag versions vulnerable to PHP2Shell (CVE-2026-109618 / CVE-2026-109619)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
A lightweight Python CLI to assess PHP2Shell (CVE-2026-109618 & CVE-2026-109619) exposure via version checks.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
PHP2Shell (CVE-2026-109618/109619) fix for PHP 5.6: Sury 0261 port, analysis, Remi rebuild spec diff, verify script
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Analysis of an Apache Struts vulnerability and cybersecurity response.
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha
100RISCO
abrir ↗GitHub PoC
UNTESTED unofficial PHP 7.2.34 Apache/mod_php image with a backport of the php2shell (CVE-2026-109618/109619) mitigation
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Guide, self-assessment form and read-only Linux check script for php2shell (CVE-2026-109618 / CVE-2026-109619): find out if you're exposed, patch, and check whether you were compromised.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
🛡️ CVE-2026-109618 / CVE-2026-109619 PHP Exploit Scanner | *A unified scanner and exploitation tool for critical PHP vulnerabilities*
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Log4Shell (CVE-2021-44228) audit, research notes, and remediation tracking for quarterly security briefing
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗GitHub PoC
A lightweight Python CLI to assess PHP2Shell (CVE-2026-109618 & CVE-2026-109619) exposure via version checks.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
The Skill I have been using to patch PHP servers for the vulnerability PHP2Shell (CVE-2026-109618 y CVE-2026-109619)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 3
PHP2Shell — CVE-2026-109618/109619 exploit toolkit: 6 RCE chains, memory disclosure, scanner, detection rules, WAF mitigations, Docker labs. Authorized testing only.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Detection + remediation scanner for php2shell (CVE-2026-109618/109619) and react2shell (CVE-2025-55182).
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗GitHub PoC
Lightweight, non-intrusive asset scanner designed to audit public and perimeter network assets for vulnerable PHP versions susceptible to php2shell RCE vectors (CVE-2026-109618 / CVE-2026-109619).
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
Fix PHP2Shell (CVE-2026-109618 & CVE-2026-109619) PHP RCE vulnerabilities and automatically convert any WordPress or PHP website to a fast Next.js site.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Chrome extension for Blue Teams: passively identify a site's PHP version and PHP2Shell (CVE-2026-109618/109619) exposure.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
Guided one-file PHP wizard for PHP2Shell (CVE-2026-109618 / CVE-2026-109619). Checks if your PHP is patched, applies php.net’s temporary mitigations with backup & undo. Run: curl -fsSL wasdthedebugger.github.io/php2shell/fix | php
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
PoC and verification material for CVE-2026-63077 (JetBrains TeamCity agent-polling deserialization RCE)
In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent pollin
100RISCO
abrir ↗GitHub PoC★ 2
A temporary shield for **UISP servers running the CRM**, against the **PHP2Shell** vulnerabilities (CVE-2026-109618 and CVE-2026-109619, published 21 October 2026), until Ubiquiti ships a UISP update with a patched PHP.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
In-depth technical verification, ASLR boundary analysis, and memory defaults impact for CVE-2026-109618 & CVE-2026-109619 (PHP2Shell) CVE-2026-115560
RCE via OOM corruption
100RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.