Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.899 exploits
GitHub PoC
Experimental PHP 5.6.40 source backport for CVE-2026-109618 and CVE-2026-109619, with reproduction steps and test evidence. Not an official PHP release.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Reproducer for CVE-2026-85315 — Apache Camel camel-grpc consumer exception disclosure (CWE-209). Camel Spring Boot + Camel Quarkus.
Apache Camel: Camel-gRPC Information Disclosure via Unmuted Consumer Exceptions
33RISCO
abrir ↗GitHub PoC
Detection checkers for CVE-2026-109618 / CVE-2026-109619 (PHP session upload progress RCE): version inventory, session-file and webroot hunts, known-good webroot diff
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
PHP2Shell CVE-2026-109618·109619 보고서 나무위키 형식 파인만 풀이 페이지
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 2
Repo with stuff wrt CVE-2026-109618 backports & workarounds..
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
CVE-2026-86478 - JetBrains YouTrack Helpdesk unauthenticated account takeover via self-asserted email (CVSS 9.8)
In JetBrains YouTrack before 2025.3.161254,
2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthent
48RISCO
abrir ↗GitHub PoC★ 5
Unofficial mitigation patches for CVE-2026-109618/109619 on EOL PHP 5.x
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Non-destructive testing toolkit for php2shell (CVE-2026-109618 / CVE-2026-109619) - Compatible with PHP 5.2+
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Independent PHP2Shell research: CVE-2026-109618/109619 status, source-linked PoC audits, and evidence tracker.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
cve-2018-16763-exploit
FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca
60RISCO
abrir ↗GitHub PoC
CVE-2026-102764 — BeyondTrust Remote Support Exploit
Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support
100RISCO
abrir ↗VulnCheck XDB
initial-access
In Jorani 1.0.0, an attacker could leverage path traversal to access files and execute code on the server.
60RISCO
abrir ↗GitHub PoC★ 1
Pterodactyl PHP security updater for Ubuntu 24.04 and Debian 12/13. AppliePHP security updates for CVE-2026-109618 and CVE-2026-109619 (critical RCE vulnerabilities).
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
Important: PHP 5.6 is an end-of-life release. This patch should only be considered a security measure after its source changes have been reviewed and tested against the original PHP 5.6.40 codebase. Successful application and verification are required before claiming that either vulnerability is fixed.
RCE via OOM corruption
100RISCO
abrir ↗VulnCheck XDB
initial-access
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗VulnCheck XDB
client-side
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 1
90RISCO
abrir ↗GitHub PoC★ 60
Minimal source backports of the PHP core RCE fixes (CVE-2026-109618 / CVE-2026-109619) for EOL PHP 5.4 and 7.3
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
cve-2018-16763-exploit
FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca
60RISCO
abrir ↗VulnCheck XDB
client-side
Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside
71RISCO
abrir ↗VulnCheck XDB
initial-access
/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.
100RISCO
abrir ↗GitHub PoC★ 2
Local Docker trigger reproductions for PHP CVE-2026-109618 and CVE-2026-109619 advisories
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
PHP の重大な脆弱性(CVE-2026-109618 / CVE-2026-109619)の確認の手順。読むだけで何も変更しない
RCE via OOM corruption
100RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.