Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.809 exploits
GitHub PoC
CVE-2026-109618 — PHP pre-auth UAF RCE: root-cause analysis (EN/FR), Nuclei detection, transcript. Defensive/educational.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Advanced Pre-Auth RCE Exploit for PHP session.upload_progress (CVE-2026-109618 & 109619) by Farhad Hosen.
RCE via stale global state
100RISCO
abrir ↗GitHub PoC
Divineokoduwa/CVE-2020-1472-Zerologon-Vulnerability-Assessment
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir ↗GitHub PoC
Detection and inventory tool for PHP core CVE-2026-109618 and CVE-2026-109619: finds PHP installs, checks versions and mitigating settings, never triggers the bugs. Python 3 standard library only.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Non-destructive affected-version checker for CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) PHP UAF
RCE via stale global state
100RISCO
abrir ↗GitHub PoC
Serverbrede noodblokkade voor PHP2Shell (CVE-2026-109618 / CVE-2026-109619) voor DirectAdmin, Plesk, cPanel en kale Apache/nginx/LiteSpeed-servers
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
PHP Serializable var_hash UAF -> RCE (CVE-2026-109618/619): independent reproduction, 7.4-8.5 weaponization matrix, session-decode path, offset probe, ASAN evidence, and the fake-writeup falsification
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
PHP の重大な脆弱性(CVE-2026-109618 / CVE-2026-109619)の確認の手順。読むだけで何も変更しない
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 9
Nodejs漏洞 CVE-2026-105482 POC
A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently truncated by the dns.resolve*() f
41RISCO
abrir ↗GitHub PoC
AVA-CEO/CVE-2018-10933-Assessment-
A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul
85RISCO
abrir ↗GitHub PoC
php2shell (CVE-2026-109618 / CVE-2026-109619) — PHP core unauth RCE research: safe differential detector, deterministic worker DoS, in-lab RCE port
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
The supplied report identifies `CVE-2026-109618` and `CVE-2026-109619` and targets PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35. At the time this helper was prepared, those claims could not be confirmed from an official PHP advisory; do not treat a script message as proof of mitigation.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Find every PHP on a host, in its containers and in popular images, and prove it has the PHP2Shell fix (CVE-2026-109618, CVE-2026-109619). Version and config checks only.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 2
Unofficial minimal source backport of CVE-2026-109618 and CVE-2026-109619 (php2shell) for PHP 7.0.33
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 2
php:7.4-fpm rebuilt from source with the official PHP2Shell backport (CVE-2026-109618 / CVE-2026-109619): the three things that break a 7.4 build in 2026, fixed
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
php2shell defense tools. safechecks, suricata/snort rules, mod_sec for CVE-2026-109618 and CVE-2026-109619
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 2
Pre-auth RCE lab for CVE-2026-109618/CVE-2026-109619 - PHP session.upload_progress heap chain
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Reproducer for CVE-2026-85316 — Apache Camel camel-platform-http unintended proxy mode from a path prefix (CWE-1220). Camel Spring Boot + Camel Quarkus.
Apache Camel: Camel-Platform-HTTP Unintended Proxy Mode via Prefix Path Matching
33RISCO
abrir ↗GitHub PoC
Reproducer for CVE-2026-88901 — Apache Camel camel-smooks XML External Entity (XXE) processing (CWE-611, HIGH). Camel Spring Boot.
Apache Camel: Camel-Smooks XML External Entity Processing, external entities resolved by default
41RISCO
abrir ↗GitHub PoC
PHP2Shell Evaluación de CVE-2026-109618 and CVE-2026-109619
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 4
Working local PoC for the php2shell PHP RCE pair (CVE-2026-109618, CVE-2026-109619): unauthenticated remote code execution via session.upload_progress multipart OOM in Apache mod_php. Docker A/B lab (8.4.26 vs 8.4.27), exploit patch for emulated x86-64, and patch-verification methodology.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
WAF rules, PHP hardening & detection for CVE-2026-109618/109619 (PHP2Shell). Lab-tested bridge until you patch - review before production use.
RCE via OOM corruption
100RISCO
abrir ↗VulnCheck XDB
initial-access
/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.
100RISCO
abrir ↗VulnCheck XDB
initial-access
WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
98RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.