Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.799 exploits
GitHub PoC★ 2
CVE-2026-109618 / CVE-2026-109619, PHP session handler stale-pointer RCE PoC, diagnostic tool, and detection rules (Sigma/Suricata). CVSS 9.2 Critical.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
AriaWave PHP2Shell (CVE-2026-109618 & CVE-2026-109619) Defensive Readiness, SAPI, Apache RLimitMEM & INI Override Scanner + Autonomous Agent Skill (SKILL.md)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 4
Unofficial rebuild of PHP 7.4 for EL7 (CentOS/RHEL 7) with the php2shell fix (CVE-2026-109618/109619). A stopgap for EOL stacks — upgrading is the real fix.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 2
Порт официального чекера PHP2Shell (CVE-2026-109618/109619) на Python 3: проверка версии PHP сайта или локального бинарника на уязвимость
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
quick and simple powershell based Internal PHP Version Assessment Checks for PHP versions potentially vulnerable to: CVE-2026-109618 / CVE-2026-109619 (PHP2Shell)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
PHP 5.6.40 fix for CVE-2026-109618 and CVE-2026-109619 (PHP2Shell)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 3
Reproducible Docker lab + PoC: Keycloak manage-users -> realm-admin escalation via composite roles (CVE-2026-94000 variant). Validated on 26.8.1.
Keycloak-services: keycloak-services: delegated admin with manage-users can escalate to realm-admin via group membership
33RISCO
abrir ↗GitHub PoC
Public, version/fingerprint-based (non-exploitation) PHP php2shell CVE scanner (CVE-2026-109618/109619). sadrobot.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
Read-only PHP2Shell package checker for Debian 12/13 (CVE-2026-109618, CVE-2026-109619).
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 194
PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
PHP2Shell (CVE-2026-109618/CVE-2026-109619) multi-server scanner, guarded Linux/Windows remediation scripts, incident report and rollback guidance.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 6
CVE-2026-111497 — Node.js Brotli Decoder OOB Write: Deep Analysis & Structural Unreachability Proof. MLEN_MAX = BLOCK_SIZE_CAP = 2^24 makes RCE structurally unreachable.
Out-of-Bounds Write in Google Brotli Decoder
70RISCO
abrir ↗GitHub PoC
Read-only auditor for CVE-2026-109618 / CVE-2026-109619 — seven independent PHP exposure axes across distro backports, Docker, cPanel and LiteSpeed stacks.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Layered AWS WAF virtual patch for the PHP2Shell RCE vulnerabilities (CVE-2026-109618 / CVE-2026-109619): Terraform, managed + custom rules, Count-to-Block rollout, detection and tests
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
All-in-one scanner for CVE-2026-109618 / CVE-2026-109619 (php2shell). Domain → subdomain enum → DNS resolve → passive PHP version check.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
PHP vulnerability checker for PHP2Shell (CVE-2026-109618/109619): audits servers, Docker images & CI. Backport-aware, zero-dep.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Production-grade defensive CLI to audit, patch, and hunt PHP2Shell (CVE-2026-109618/19) memory-safety exploits without downtime.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
PHP2Shell (CVE-2026-109618 / CVE-2026-109619) Two critical, unauthenticated Remote Code Execution (RCE) bugs in PHP core. Triggered while PHP parses a request, before any application code runs.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
Detection for the critical PHP RCE flaws CVE-2026-109618 and CVE-2026-109619. Reports vulnerable/patched/EOL PHP runtimes by version and config.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Vulnerabilidad CVE-2018-7600,injection command
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi
100RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.