Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.816 exploits
Exploit-DB
Keycloak 26.7.2 - Unauthenticated Account Takeover
Keycloak-services: keycloak-services: unauthenticated account takeover via reset-credentials flow bypass
63RISCO
abrir ↗GitHub PoC
adriyansyah-mf/CVE-2026-109618-109619-PHP-session.upload_progress-Exploit-
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 4
Script para parchear PHP y verificar versión antes/después — nacido del incidente CVE-2026-109618/109619
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
PHP2Shell CVE-2026-109618·109619 보고서 나무위키 형식 파인만 풀이 페이지
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Reproducer for CVE-2026-88901 — Apache Camel camel-smooks XML External Entity (XXE) processing (CWE-611, HIGH). Camel Spring Boot.
Apache Camel: Camel-Smooks XML External Entity Processing, external entities resolved by default
41RISCO
abrir ↗VulnCheck XDB
client-side
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RISCO
abrir ↗GitHub PoC★ 4
Working local PoC for the php2shell PHP RCE pair (CVE-2026-109618, CVE-2026-109619): unauthenticated remote code execution via session.upload_progress multipart OOM in Apache mod_php. Docker A/B lab (8.4.26 vs 8.4.27), exploit patch for emulated x86-64, and patch-verification methodology.
RCE via OOM corruption
100RISCO
abrir ↗VulnCheck XDB
initial-access
/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.
100RISCO
abrir ↗GitHub PoC★ 5
Unofficial backport of the PHP2Shell fixes (CVE-2026-109618, CVE-2026-109619) to PHP 5.6.40 - experimental
RCE via OOM corruption
100RISCO
abrir ↗VulnCheck XDB
initial-access
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗GitHub PoC
Non-destructive testing toolkit for php2shell (CVE-2026-109618 / CVE-2026-109619) - Compatible with PHP 5.2+
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 5
Unofficial mitigation patches for CVE-2026-109618/109619 on EOL PHP 5.x
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
Pterodactyl PHP security updater for Ubuntu 24.04 and Debian 12/13. AppliePHP security updates for CVE-2026-109618 and CVE-2026-109619 (critical RCE vulnerabilities).
RCE via OOM corruption
100RISCO
abrir ↗VulnCheck XDB
local
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
68RISCO
abrir ↗VulnCheck XDB
initial-access
FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca
60RISCO
abrir ↗GitHub PoC★ 1
Non destructive scanner for PHP instances vulnerable to CVE-2026-109618 and CVE-2026-109619
RCE via OOM corruption
100RISCO
abrir ↗VulnCheck XDB
local
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RISCO
abrir ↗GitHub PoC★ 2
Pre-auth RCE lab for CVE-2026-109618/CVE-2026-109619 - PHP session.upload_progress heap chain
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
php2shell defense tools. safechecks, suricata/snort rules, mod_sec for CVE-2026-109618 and CVE-2026-109619
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Non-intrusive PHP2Shell assessment for CVE-2026-109618 and CVE-2026-109619
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 2
php:7.4-fpm rebuilt from source with the official PHP2Shell backport (CVE-2026-109618 / CVE-2026-109619): the three things that break a 7.4 build in 2026, fixed
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
Stensel8/check-for-CVE-2026-109618-CVE-2026-109619
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
Validation & defense toolkit for PHP2Shell (CVE-2026-109618 / CVE-2026-109619): safe exposure checker, stack-wide mitigations, detection, isolated lab. Defense-first, no weaponized exploit.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Docker lab for reproducing CVE-2026-109618 and CVE-2026-109619 (php2shell), OOM corruption and stale global state RCE in PHP core
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Runtime probe for MCP cross-tenant response leaking via JSON-RPC id collision (CVE-2026-111770)
Model Context Protocol TypeScript SDK: Shared transport or server instances delivered one HTTP client's messages to another
41RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.