Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

85,682cataloged exploits

39,953CVEs with public exploitation

24,696lab-tested

All Referência 25,887Exploit-DB 24,488GitHub PoC 17,378VulnCheck XDB 9,888Nuclei 4,513Metasploit 3,528✓ verified onlyrecent popular risk

17,378 exploits

GitHub PoC

Security Advisory: Negative Chunk-Size Parsing Causes Memory Corruption in facil.io

CVE-2026-66731HIGH24 Jul 2026

facil.io 0.7.5 - 0.7.6 HTTP/1.1 Chunked Transfer Encoding Parser Crash DoS

41RISK

open ↗

GitHub PoC

manfredgabriel/cve-2021-43798-lab

CVE-2021-43798HIGHunder attack24 Jul 2026

Grafana path traversal

100RISK

open ↗

GitHub PoC

kxom9ks/CVE-2024-27198-TeamCity

CVE-2024-27198CRITICALunder attackransomware24 Jul 2026

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

100RISK

open ↗

GitHub PoC

blue-chocolates/CVE-2016-10033

CVE-2016-10033CRITICALunder attack24 Jul 2026

The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra para

100RISK

open ↗

GitHub PoC★ 1

Security Advisory: Out-of-Bounds Read in facil.io MIME Parser leads to Server crash

CVE-2026-66729HIGH24 Jul 2026

facil.io 0.6.0 - 0.7.6 Integer Underflow DoS via Multipart MIME Body Parser

41RISK

open ↗

GitHub PoC★ 3

IBM Langflow Unauthenticated RCE via Auto-Login Bypass

CVE-2026-9198CRITICALunder attack24 Jul 2026

Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation

98RISK

open ↗

GitHub PoC★ 1

React2Shell is a proof-of-concept exploit for CVE-2025-55182 affecting vulnerable React Server Components (RSC) implementations in Next.js

CVE-2025-55182CRITICALunder attackransomware24 Jul 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISK

open ↗

GitHub PoC

ange-primiterra/CVE-2026-47761

CVE-2026-47761HIGH24 Jul 2026

TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` injection

41RISK

open ↗

GitHub PoC★ 1

Security Advisory: Camaleon CMS - Authenticated RCE via `select_eval` Custom Field

CVE-2026-66748HIGH24 Jul 2026

Camaleon CMS 2.1.1 - 2.9.1 Authenticated RCE via select_eval Custom Field

41RISK

open ↗

GitHub PoC

kxom9ks/CVE-2024-27198

CVE-2024-27198CRITICALunder attackransomware24 Jul 2026

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

100RISK

open ↗

GitHub PoC★ 1

Discuz! X5.0 Authentication Bypass Exploit Framework (CVE-2026-49952) - Critical vulnerability allowing unauthenticated database backup access via UC_KEY encryption oracle token reuse. CVSS 9.1. Full-featured tool with version detection, multi-payload attacks, interactive shell, and automated exploitation. Authorized testing only.

CVE-2026-49952CRITICAL24 Jul 2026

Discuz! X5.0 Authentication Bypass via dbbak.php Encryption Oracle

63RISK

open ↗

GitHub PoC★ 2

Exploit for CVE-2026-64560, kernelctf-lts-6.12.95

CVE-2026-64560HIGH23 Jul 2026

posix-cpu-timers: Prevent UAF caused by non-leader exec() race

41RISK

open ↗

GitHub PoC

ghostpels/CVE-2026-13001

CVE-2026-13001CRITICAL23 Jul 2026

Podlove Podcast Publisher <= 4.5.1 - Unauthenticated Arbitrary File Upload via podlove_image_cache_url Parameter

63RISK

open ↗

GitHub PoC★ 332

Certighost POC

CVE-2026-54121HIGH23 Jul 2026

Active Directory Certificate Services Elevation of Privilege Vulnerability

41RISK

open ↗

GitHub PoC

CVE Reproduction: cve-2026-63030_60137-wordpress_rce_reproduction

CVE-2026-63030CRITICALunder attack23 Jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

98RISK

open ↗

GitHub PoC

CVE Reproduction: cve-2025-55182-react2shell_reproduction

CVE-2025-55182CRITICALunder attackransomware23 Jul 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISK

open ↗

GitHub PoC

0xdak/CVE-2026-63766_exploit

CVE-2026-63766CRITICAL23 Jul 2026

GPT-SoVITS 20250606v2pro OS Command Injection via webui.py

48RISK

open ↗

GitHub PoC

CVE Reproduction: cve-2026-0770-langflow_rce_reproduction

CVE-2026-0770CRITICALunder attack23 Jul 2026

Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability

100RISK

open ↗

GitHub PoC

Dynamo2k1/CVE-2026-33017

CVE-2026-33017CRITICALunder attack23 Jul 2026

Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint

100RISK

open ↗

GitHub PoC

CVE-2026-66374: Knot Resolver 6.3.0 DNS-over-QUIC heap overflow (RCE)

CVE-2026-66374HIGH23 Jul 2026

Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ (DNS-over-QUIC) rece

41RISK

open ↗

GitHub PoC

CVE-2026-64600 - Draft - Check todo

CVE-2026-64600HIGH23 Jul 2026

xfs: resample the data fork mapping after cycling ILOCK

41RISK

open ↗

GitHub PoC

Security analysis and report of CVE-2024-6387 OpenSSH vulnerability, including vulnerability details, CVSS evaluation, and mitigation recommendations.

CVE-2024-6387HIGH23 Jul 2026

Openssh: regresshion - race condition in ssh allows rce/dos

63RISK

open ↗

GitHub PoC★ 2

Exploit for CVE-2026-64560, kernelctf-lts-6.12.95

CVE-2026-64560HIGH23 Jul 2026

posix-cpu-timers: Prevent UAF caused by non-leader exec() race

41RISK

open ↗

GitHub PoC

CVE-2026-42533 Nginx

CVE-2026-42533CRITICAL23 Jul 2026

NGINX Map directive and Regex matching vulnerability

48RISK

open ↗

GitHub PoC

Tproot es una máquina de nivel Muy Fácil de DockerLabs centrada en la explotación manual del servicio vsftpd 2.3.4 (CVE-2011-2523).

CVE-2011-2523—23 Jul 2026

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

60RISK

open ↗

GitHub PoC

Initialized & connected PostgreSQL to Metasploit. Reconnoitered 10.1.16.0/24 with Nmap and imported results. Enumerated hosts/services using SYN, SMB & LDAP scanners. Exploited DC10 via ZeroLogon (CVE-2020-1472), dumped AD NTLM hashes with Impacket, performed Pass-the-Hash, then gained a Meterpreter reverse shell.

CVE-2020-1472MEDIUMunder attackransomware23 Jul 2026

Netlogon Elevation of Privilege Vulnerability

100RISK

open ↗

GitHub PoC

CVE Reproduction: cve-2024-4577-phpcgi_rce_reproduction

CVE-2024-4577CRITICALunder attackransomware23 Jul 2026

Argument Injection in PHP-CGI

100RISK

open ↗

GitHub PoC★ 1

Metabase CVE-2026-59827 Vulnerability Scanner

CVE-2026-59827CRITICAL23 Jul 2026

Metabase: Unsafe Deserialization of H2 Query Results

48RISK

open ↗

GitHub PoC★ 1

CVE Reproduction: cve-2026-41940-cpanel_authbypass_reproduction

CVE-2026-41940CRITICALunder attackransomware23 Jul 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RISK

open ↗

GitHub PoC★ 1

Flowise Windows RCE exploit for CVE-2026-58057. Bypasses environment variable validation via case-sensitive flaw. Uses node_options to inject arbitrary code through MCP stdio. Supports reverse shell, persistence, file upload, credential dumping. For authorized security testing only.

CVE-2026-58057LOW23 Jul 2026

Flowise - Custom MCP Environment Variable Denylist Bypass via Case Sensitivity

28RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.