Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.899 exploits
GitHub PoC
PHP Portal Audit: URL-only risk signals for CVE-2026-109618 / CVE-2026-109619, runtime assessment and optional multipart reachability evidence. No exploitation.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Passive check for Claude whether a website or server runs a PHP version affected by PHP2Shell (CVE-2026-109618, CVE-2026-109619)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 41
Proof of concept for CVE-2026-109618/CVE-2026-109619: PHP2Shell
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 8
PHP 7.4 for Windows with CVE-2026-109618 / CVE-2026-109619 Backport
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
Non destructive scanner for PHP instances vulnerable to CVE-2026-109618 and CVE-2026-109619
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
synapes620/CVE-2026-110899
WordPress Ninja Forms plugin <= 3.15.5 - Cross Site Scripting (XSS) vulnerability
41RISCO
abrir ↗GitHub PoC
Non-intrusive PHP2Shell assessment for CVE-2026-109618 and CVE-2026-109619
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Reproducer for CVE-2026-85315 — Apache Camel camel-grpc consumer exception disclosure (CWE-209). Camel Spring Boot + Camel Quarkus.
Apache Camel: Camel-gRPC Information Disclosure via Unmuted Consumer Exceptions
33RISCO
abrir ↗GitHub PoC
Detection and inventory tool for PHP core CVE-2026-109618 and CVE-2026-109619: finds PHP installs, checks versions and mitigating settings, never triggers the bugs. Python 3 standard library only.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 6
Patches, Docker images and proofs for CVE-2026-109618 / CVE-2026-109619 on PHP 5.0 to 8.1 without an official release
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 3
Pre-auth remote code execution & reverse shell PoC for CVE-2026-109618 / CVE-2026-109619 - PHP core session upload-progress. One URL in, a reverse shell out.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Read-only on-host detection for PHP2Shell CVE-2026-109618 / CVE-2026-109619 across panels, containers, backports and un-restarted workers
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Non-destructive affected-version checker for CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) PHP UAF
RCE via stale global state
100RISCO
abrir ↗GitHub PoC★ 1
Es un script bastante simple que ayuda a determinar la posibilidad de explotación de la vulnerabilidad php2shell (CVE-2026-109618 / CVE-2026-109619)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
PHP2Shell PHP CVE-2026-109618 and CVE-2026-109619 dorks
RCE via OOM corruption
100RISCO
abrir ↗VulnCheck XDB
initial-access
WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
98RISCO
abrir ↗GitHub PoC★ 1
PHP2Shell · CVE-2026-109618 / CVE-2026-109619 的 PHP RCE 源码审计与补丁分析 | PHP remote code execution source audit, request lifecycle analysis and upstream patch review
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
PHP の重大な脆弱性(CVE-2026-109618 / CVE-2026-109619)の確認の手順。読むだけで何も変更しない
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Serverbrede noodblokkade voor PHP2Shell (CVE-2026-109618 / CVE-2026-109619) voor DirectAdmin, Plesk, cPanel en kale Apache/nginx/LiteSpeed-servers
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Notbetrieb für PHP, das sich nicht patchen lässt. Kein Fix für CVE-2026-109618 und CVE-2026-109619.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
php:7.4-fpm drop-in rebuilt with the CVE-2026-109618/109619 fix (PHP2Shell)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
Non-destructive detection toolkit + version-differential oracle for PHP2Shell (CVE-2026-109618/109619). Leak oracle verified 4/4 on PHP 8.5.11 vs 0/4 on 8.5.12. Docker lab included.
RCE via OOM corruption
100RISCO
abrir ↗VulnCheck XDB
initial-access
WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
98RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.