Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
87.464exploits catalogados
40.695CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4.577Metasploit 3.539✓ só verificadosrecentespopularesrisco
86.991 exploits
GitHub PoC
Analisa e corrige as vulnerabilidades php2shell do PHP (CVE-2026-109618 e CVE-2026-109619) no Ubuntu
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
CVE-2026-54523 Kyverno cross-namespace resource generation PoC and exploit
Kyverno: NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including kube-system
48RISCO
abrir ↗GitHub PoC
CVE-2026-119712 (CVSS 8.5 High) — PipesHub < 0.10.0 SSRF via image URLs in indexed documents (CWE-918). Verified PoC.
PipesHub before 0.10.0 SSRF via Image URLs in Indexed Documents
33RISCO
abrir ↗GitHub PoC★ 1
Baron Samedit (CVE-2021-3156): sudo heap-based buffer overflow giving local root. PoC packaged with a static/musl launcher so it runs against older-glibc (2.31) targets.
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RISCO
abrir ↗GitHub PoC★ 1
by yora cve-2020-5902
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic
100RISCO
abrir ↗GitHub PoC
krevetkqqq/CVE-2019-7256
Linear eMerge E3-Series devices allow Command Injections.
100RISCO
abrir ↗GitHub PoC★ 4
CVE-2026-98432 (Linux IPv4 TCP use-after-free): how to check your server, apply a stopgap, and clean up after the fix
ipv4: free inet_opt and ireq_opt after an RCU grace period
48RISCO
abrir ↗GitHub PoC★ 49
PoC & panic evidence for CVE-2026-112705: AppleAVE2 kernel OOB write on iOS 27.0.1 (fixed in 27.2) via VideoToolbox NumberOfTemporalLayers. Independent reproduction; original discovery by Calif / Chollima team.
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 2
33RISCO
abrir ↗GitHub PoC
Suricata rules + CI-proven regression suite for the php2shell PHP RCE chain (CVE-2026-109619 / CVE-2026-109618)
RCE via stale global state
100RISCO
abrir ↗GitHub PoC
Diagnosis and remediation prompt for PHP2Shell (CVE-2026-109618/109619), the Node.js Oct 2026 security release and Brotli CVE-2026-111497. EN + PT-BR. Facts as of 29 Oct 2026.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Responsible exposure assessment and version fingerprinting for PHP core vulnerabilities CVE-2026-109618 & CVE-2026-109619 (PHP2Shell) - detection-only, no RCE payload.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Open-source hotfix for PAN-OS firewall chain attack PHP2Shell and Fragnesia CVE-2026-109618 and CVE-2026-46300
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
PHP file-upload / code-exec toolkit → shell + PHP2Shell CVE-2026-109618/109619 modules
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Pre-auth PHP RCE framework for CVE-2026-109618/619 — ArchonX_DeadLock_Security
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
PHP脆弱性（PHP2Shell: CVE-2026-109618 / CVE-2026-109619）緊急対応プランのランディングページ
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
PHP2Shell CVE-2026-109618 and CVE-2026-109619 research and isolated RCE lab
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Is the PHP in your container image really fixed for PHP2Shell (CVE-2026-109618, CVE-2026-109619)? Finds PHP builds inside an image without running it, with backport-aware verdicts and evidence.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
QT Analytics — Operation Fire Pole: Free 60-Second Emergency Defense & Reverse-Proxy Shield for PHP2Shell (CVE-2026-109618 / 109619)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
davtur19/PoC-CVE-2026-89020-PrivEsc
MikroTik RouterOS Stack Buffer Overflow via TFTP URL Path
33RISCO
abrir ↗GitHub PoC★ 1
Detection-only vulnerability scanner for Synology DSM — CVE-2024-10441 (SA-24:20, ransomware-exploited) and CVE-2026-13684/13639 (SA-26:13). Read-only fingerprinting, no exploits. Python 3.9+, zero dependencies.
An improper encoding or escaping of output vulnerability in SCGI in Synology DiskStation Manager (DSM) before 7.2.1-6905
48RISCO
abrir ↗GitHub PoC
krevetkqqq/CVE-2026-61515
Puwell IP Camera 2.x - 4.x Unauthenticated Command Injection via DebugShell
48RISCO
abrir ↗GitHub PoC★ 1
CVE-2026-109384: IvyForms <= 1.5.1 unauthenticated arbitrary file upload to RCE. PoC by NOXCRYPT (noxcrypt-x).
The Innovative Form Builder <= 1.5.1 - Authenticated (Custom+) Arbitrary File Upload via 'allowedFileExtensions' Configuration + Public /form/submission/ Multipart Upload
41RISCO
abrir ↗GitHub PoC
Hunt-Benito/the-unguarded-first-day-cve-2026-103409-juniper-session-smart-router
Session Smart Router: An attacker obtains administrative privileges when an unauthenticated internal endpoint is accessed
28RISCO
abrir ↗GitHub PoC
Nucklear/CVE-2026-111497-working
Out-of-Bounds Write in Google Brotli Decoder
70RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.