Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.793 exploits
GitHub PoC
UNTESTED unofficial PHP 5.4.45 FPM image with a backport of the php2shell (CVE-2026-109618/109619) mitigation
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 3
Scanner, interim mitigation and hunting tool for php2shell (CVE-2026-109618 / CVE-2026-109619). No exploit code.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
Interactive Bash audit & remediation tool for PHP2Shell (CVE-2026-109618/109619). Features live Docker inspection, reversible BSI mitigations, and split-screen TUI.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 8
Pre-auth RCE chain for CVE-2026-109618 / CVE-2026-109619 — PHP session.upload_progress exploitation (PHP 5.4.0–8.5.x)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
Verifica se um servidor Linux está vulnerável ao php2shell (CVE-2026-109618 / CVE-2026-109619)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Read-only PHP2Shell inventory scanner that checks servers over SSH and optional HTTP/HTTPS, identifies potentially vulnerable PHP versions, and exports a CSV report to help teams prioritize patching for CVE-2026-109618 and CVE-2026-109619.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Patched PHP 7.4 packages for Ubuntu 20.04 (focal) fixing CVE-2026-109618 / CVE-2026-109619: Ondřej Surý's 7.4.33-31 rebuilt for focal, with an installer that detects the server's PHP, upgrades it and can roll back.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Read-only checker for PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. Assess server versions and configuration using an authenticated collector, with JSON reports and remediation guidance.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
CVE-2026-109618 PoC - PHP session upload_progress heap UAF to pre-auth RCE. Docker one-liner demo included.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Exploit tooling and vulnerability research for CVE-2026-109618 and CVE-2026-109619 — two critical unauthenticated remote code execution (RCE) vulnerabilities patched in PHP 8.4.27, 8.3.36, 8.2.35, and 8.5.12 (released October 21, 2026).
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
php70-security-backport/php-7.0.33-CVE-2026-109618-109619.patch
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Free scanner for PHP2Shell (CVE-2026-109618 and CVE-2026-109619)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Microsoft Defender Advanced Hunting queries that track PHP versions in a tenant and flag CVE-2026-109618 and CVE-2026-109619 exposure.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
Пассивные Nuclei-шаблоны для обнаружения версий PHP и PHP-приложений в рамках проверки CVE-2026-109618 и CVE-2026-109619 (PHP2Shell)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Unofficial security backports for PHP 7.4 on Ubuntu 20.04 (focal): fixes CVE-2026-109618 and CVE-2026-109619 for servers without Ubuntu Pro
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 3
Unofficial fix for CVE-2026-109618 / CVE-2026-109619 (php2shell) for the end-of-life PHP 5.4 / 5.3 packages of RHEL, CentOS and Oracle Linux 7 / 6
RCE via OOM corruption
100RISCO
abrir ↗VulnCheck XDB
client-side
Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitra
71RISCO
abrir ↗GitHub PoC
XAMPP for Windows の PHP を PHP2Shell（CVE-2026-109618 / CVE-2026-109619）修正版の PHP 8.2.35 に入れ替える非公式スクリプト
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
Claude Code skill: PHP2Shell (CVE-2026-109618/109619) exposure report from the Tenable Hexa AI MCP as HTML, PDF and CSV
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Reproducible audit trail for the Log4Shell (CVE-2021-44228) and follow-up (CVE-2021-45046) study-group walkthrough
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗GitHub PoC
Research brief on Log4Shell (CVE-2021-44228) for an internal security awareness session. Every claim is backed by linked primary sources.
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗GitHub PoC★ 6
CVE-2026-111497 — Node.js Brotli Decoder OOB Write: Deep Analysis & Structural Unreachability Proof. MLEN_MAX = BLOCK_SIZE_CAP = 2^24 makes RCE structurally unreachable.
Out-of-Bounds Write in Google Brotli Decoder
70RISCO
abrir ↗GitHub PoC
Quick and dirty hunting script for PHP2Shell (CVE-2026-109618 and CVE-2026-109619) on ISPConfig servers.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
Unofficial patches for PHP CVE-2026-109618 / CVE-2026-109619 (RCE, CVSS 9.2) on EOL platforms: PHP 7.3 on CentOS/RHEL 7 (Remi), PHP 5.4 on Amazon Linux 2, PHP 5.3 on Amazon Linux 1
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
CVE-2026-109618 / CVE-2026-109619 (php2shell) toolkit - session.upload_progress + LFI RCE proof and OOM precondition detection. Authorised testing only.
RCE via OOM corruption
100RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.