Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.899 exploits
GitHub PoC★ 1
Defensive Detector + Bounded Offensive Impact-Evidence Builder for CVE-2026-109618 / CVE-2026-109619 ("PHP2Shell")
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 16
CVE-2026-109618 / CVE-2026-109619 — unauthenticated RCE in PHP's session.upload_progress handler (CVSS 9.2). Reproducible Docker lab against stock WordPress and Laravel on PHP 8.4.26, plus a read-only on-host audit script.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 63
CVE-2026-109618/109619 PHP2Shell — Heap UAF PoC (crash + RCE framework)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Experimental PHP 5.6.40 source backport for CVE-2026-109618 and CVE-2026-109619, with reproduction steps and test evidence. Not an official PHP release.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Docker lab for reproducing CVE-2026-109618 and CVE-2026-109619 (php2shell), OOM corruption and stale global state RCE in PHP core
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
Escáner defensivo por versión para detectar servidores PHP afectados por PHP2Shell (CVE-2026-109618 / CVE-2026-109619). Comprueba la versión de PHP vía HTTP y la compara con las versiones corregidas. Solo detección, sin exploits.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 3
PHP session.upload_progress attack-surface PoC/verification toolkit (php2shell claims, CVE-2026-109618/109619); for authorized lab testing
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
No warranties vibecoded scanner for CVE-2026-109618 / CVE-2026-109619
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 2
Check if your servers are affected by or compromised via php2shell (CVE-2026-109618 / CVE-2026-109619)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 2
Non-destructive scanner for CVE-2026-109618 and CVE-2026-109619
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Passive exposure check for the PHP October 2026 RCE advisory (CVE-2026-109618 / CVE-2026-109619), with a Claude skill
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
PHP2Shell Censys Query (CVE-2026-109618 / CVE-2026-109619 )
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 152
CVE-2026-109618/109619 PoC — PHP session.upload_progress heap use-after-free (CVSS 9.2)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Material e script de diagnóstico (somente leitura) para as CVE-2026-109618 e CVE-2026-109619 (php2shell)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Relatório de hardening e laboratório Docker defensivo para a PHP2Shell (CVE-2026-109618 / CVE-2026-109619). Sem PoC ofensivo.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 2
PoC for CVE-2025-7771: abuses ThrottleStop.sys for arbitrary physical r/w, turns DSE off, then spoofs the integrity query so it still reports as enabled.
Code Execution / Escalation of Privileges in ThrottleStop
41RISCO
abrir ↗GitHub PoC★ 2
Independent verification of CVE-2026-109618 & CVE-2026-109619 (php2shell): kernel-proven session-lock-leak DoS on PHP 8.4.24, clean on patched 8.4.27, vendor OOM test suite 5-fail vs 0-fail. Lab, PoC scripts and full results - no weaponized exploit :)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Non-destructive PHP scanner for CVE-2026-109618 and CVE-2026-109619
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 290
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 9
Independent verification lab + PoCs: PHP session.upload_progress pre-auth RCE chains (CVE-2026-109618/109619)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Cybersecurity assignment on CVE-2026-97859, severity analysis, patching, and the Cyber Kill Chain.
Gitea API disclosure of private user social graph, keys and stars
33RISCO
abrir ↗GitHub PoC
cve-2018-16763-exploit
FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca
60RISCO
abrir ↗GitHub PoC
Dokploy <=0.29.12 compose branch stored command injection (CVSS 9.9 Critical) — clean-room exploit, swarm lab orchestration, reproduced live against v0.29.12 with host-takeover channel proof
Dokploy: Incomplete fix of CVE-2026-45628: Command Injection via Unvalidated Branch Fields in Compose Deployment Pipeline (server-side regex missing in compose.ts)
63RISCO
abrir ↗GitHub PoC★ 3
Read-only compromise check for PHP CVE-2026-109618 / CVE-2026-109619 (php2shell) on Ubuntu 24.04 and Amazon Linux 2023
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
PhpReaper — GUI vulnerability scanner for CVE-2026-109618 / CVE-2026-109619 (PHP session upload progress RCE)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Detection + mitigation lab for the October 2026 PHP critical release (CVE-2026-109618 / CVE-2026-109619). No exploit code — detection, mitigation testing, and port rehearsal only.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
php2shell (CVE-2026-109618 / CVE-2026-109619) — PHP core unauth RCE research: safe differential detector, deterministic worker DoS, in-lab RCE port
RCE via OOM corruption
100RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.