Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.794 exploits
GitHub PoC
Read-only checker for PHP2Shell (CVE-2026-109618/109619) exposure: local, URL, SSH
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 194
PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
CVE-2026-104935 — Ivanti Connect Secure / Pulse Secure RCE Exploit
Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arb
100RISCO
abrir ↗GitHub PoC★ 991
High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Free scanner for php2shell (CVE-2026-109618/109619): finds PHP installs and flags vulnerable versions, per CISA's alert.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
Agent skill + zero-dependency script: check a Node.js project against the Oct 2026 Node.js security release (Brotli RCE CVE-2026-111497 and 9 more) and bump version pins to the patched release
Out-of-Bounds Write in Google Brotli Decoder
70RISCO
abrir ↗GitHub PoC
Go app using Coraza WAF (CVE-2026-114101 bypass)
Coraza before 3.8.1 Multipart filename* Charset Handling FILES Rule Bypass
33RISCO
abrir ↗GitHub PoC
Bulk SSH scanner that inventories every PHP installation across Linux servers and flags builds affected by php2shell (CVE-2026-109618/109619)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
A single-page, live dashboard of vendors and software affected by the PHP2Shell remote code execution vulnerabilities CVE-2026-109618 and CVE-2026-109619 (fixed in PHP 8.2.35 / 8.3.36 / 8.4.27 / 8.5.12).
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Nuclei template for php2shell (CVE-2026-109618 / CVE-2026-109619) - version-based detection, no exploitation
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
CVE-2026-109618 / CVE-2026-109619 (php2shell) toolkit - session.upload_progress + LFI RCE proof and OOM precondition detection. Authorised testing only.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 3
CVE-2026-111497: Node.js Brotli decoder OOB write — analysis, PoC, Docker lab
Out-of-Bounds Write in Google Brotli Decoder
70RISCO
abrir ↗GitHub PoC★ 1
quick and simple powershell based Internal PHP Version Assessment Checks for PHP versions potentially vulnerable to: CVE-2026-109618 / CVE-2026-109619 (PHP2Shell)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
PHP2Shell (CVE-2026-109618/109619) remediation guide on AWS + AWS WAF CloudFormation template (China regions validated)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Marciano-Morinigo/php2shell-CVE-2026-109618-CVE-2026-109619-PoC-Lab
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
php2shell-scanner Passive version scanner for CVE-2026-109618 / CVE-2026-109619
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
PHP2Shell (CVE-2026-109618/109619) one-click detect & fix tool
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Patched PHP 7.4 RPMs for CentOS 7 (Remi php-* and php74-php-*) fixing CVE-2026-109618 / CVE-2026-109619: Remi's 7.4.33-31 rebuilt for EL7, with an installer that detects the server's PHP, upgrades it and can roll back.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
A lightweight Python CLI to assess PHP2Shell (CVE-2026-109618 & CVE-2026-109619) exposure via version checks.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Production-grade defensive CLI to audit, patch, and hunt PHP2Shell (CVE-2026-109618/19) memory-safety exploits without downtime.
RCE via OOM corruption
100RISCO
abrir ↗VulnCheck XDB
client-side
Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitra
71RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.