Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.794 exploits
GitHub PoC
Source + build recipe for the php2shell (CVE-2026-109618/109619) backport to CentOS 7 / IUS PHP 7.2
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 7
Node.js Brotli Decoder OOB Write to RCE
Out-of-Bounds Write in Google Brotli Decoder
70RISCO
abrir ↗GitHub PoC
suominen/CVE-2026-97206
DNS-over-QUIC (DoQ) path-migration can lead to use-after-free on multi-threaded deployments.
41RISCO
abrir ↗GitHub PoC★ 1
AdapptOnAzure/cve-2026-111497-mitigation
Out-of-Bounds Write in Google Brotli Decoder
70RISCO
abrir ↗GitHub PoC
php2shell (CVE-2026-109618/109619) F5 BIG-IP Advanced WAF check and verification tools
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Temporary php2shell (CVE-2026-109618/109619) mitigation for Ubuntu and AlmaLinux 8 / FastPanel
RCE via OOM corruption
100RISCO
abrir ↗VulnCheck XDB
client-side
Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitra
71RISCO
abrir ↗GitHub PoC
PoC and verification material for CVE-2026-63077 (JetBrains TeamCity agent-polling deserialization RCE)
In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent pollin
100RISCO
abrir ↗GitHub PoC
Bulk SSH scanner that inventories every PHP installation across Linux servers and flags builds affected by php2shell (CVE-2026-109618/109619)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 3
Detect & investigate the PHP session.upload_progress RCE (CVE-2026-109618 / CVE-2026-109619, php2shell): non-destructive remote vulnerability scanner + read-only server forensics for webshells, poisoned sessions & persistence, even after PHP was removed. Zero-dependency Python. | php2shell 漏洞检测与入侵取证工具
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
PHP-Shell is a local-first, wizard-driven passive black-box assessment prototype for PHP runtime exposure to CVE-2026-109618 and CVE-2026-109619. It provides both a browser UI and a terminal wizard using the same Python engine, and exports DOCX/PDF evidence reports.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Rebuilds of patched ondrej/php PHP 8.1, 8.0, 7.4, 7.3 and 5.6 packages for Ubuntu 20.04 (CVE-2026-109618, CVE-2026-109619)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
Detect systems affected by PHP2Shell (CVE-2026-109618 / CVE-2026-109619) on Unix and Windows
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Open-source PHP security assessment tool for CVE-2026-109618 and CVE-2026-109619. Built with React, TypeScript and Cloudflare Workers.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 3
CVE-2026-111497: Node.js Brotli decoder OOB write — analysis, PoC, Docker lab
Out-of-Bounds Write in Google Brotli Decoder
70RISCO
abrir ↗GitHub PoC
Security update for CVE-2026-91403
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE
48RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.