Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

84,150cataloged exploits

39,601CVEs with public exploitation

24,695lab-tested

All Referência 25,629Exploit-DB 24,485GitHub PoC 16,343VulnCheck XDB 9,680Nuclei 4,488Metasploit 3,525✓ verified onlyrecent popular risk

16,313 exploits

GitHub PoC★ 1

CVE-2026-21589 — Atlassian DC pre-auth arbitrary file read (CVSS 4.0 9.3). PoCbit PoC: atlassian-plugins-webresource ..:: traversal on /download/resources/ for Jira, Confluence, Bitbucket. check + exploit (WEB-INF/web.xml, crowd.properties). Batch JSONL, hits.txt. Not RCE. https://pocbit.org/pocs/cve-2026-21589

CVE-2026-21589CRITICALunder attack08 Oct 2026

This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft

98RISK

GitHub PoC

Vulhub tomcat/CVE-2020-1938: Apache Tomcat AJP Ghostcat (CVE-2020-1938), run with Isoloom

CVE-2020-1938CRITICALunder attack08 Oct 2026

When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc

100RISK

GitHub PoC

Vulhub rails/CVE-2019-5418: Ruby on Rails Accept Header File Disclosure (CVE-2019-5418), run with Isoloom

CVE-2019-5418HIGHunder attack08 Oct 2026

There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where spe

100RISK

GitHub PoC

theendofabbys/CVE-2026-48907

CVE-2026-48907CRITICALunder attack08 Oct 2026

Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5

98RISK

GitHub PoC

Analisi e sfruttamento pratico della CVE-2026-46300 (Fragnesia) per l'ottenimento di Initial Access in un ambiente di test.

CVE-2026-46300HIGH08 Oct 2026

net: skbuff: preserve shared-frag marker during coalescing

56RISK

GitHub PoC★ 1

CVE-2026-105192 is a critical (CVSS 9.8) vulnerability in LMCache, an open-source distributed key-value cache for LLM inference engines like vLLM.

CVE-2026-105192CRITICAL08 Oct 2026

LMCache Unauthenticated RCE in multiprocess mode via pickle deserialization

48RISK

GitHub PoC

CVE-2026-21589 is a critical (CVSS 9.3) arbitrary file access vulnerability affecting all versions of eight Atlassian Data Center products, including Jira, Confluence, Bitbucket, Bamboo, Crowd, Crucible, Fisheye, and Jira Service Management.

CVE-2026-21589CRITICALunder attack08 Oct 2026

This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft

98RISK

GitHub PoC

Vulhub gitlab/CVE-2021-22205: GitLab CE 13.10.1 ExifTool unauthenticated RCE, run with Isoloom

CVE-2021-22205CRITICALunder attackransomware08 Oct 2026

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati

100RISK

GitHub PoC

Vulhub supervisor/CVE-2017-11610: Supervisord XML-RPC RCE (CVE-2017-11610), run with Isoloom

CVE-2017-11610—08 Oct 2026

The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows rem

60RISK

GitHub PoC

Vulhub weblogic/CVE-2017-10271: WebLogic wls-wsat XMLDecoder RCE, run with Isoloom

CVE-2017-10271HIGHunder attackransomware08 Oct 2026

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte

100RISK

GitHub PoC

Vulhub glassfish/CVE-2017-1000028: GlassFish 4.1 Admin Console Arbitrary File Read (CVE-2017-1000028), run with Isoloom

CVE-2017-1000028—08 Oct 2026

Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Trave

60RISK

GitHub PoC

Vulhub activemq/CVE-2016-3088: ActiveMQ Fileserver Arbitrary File Write (CVE-2016-3088), run with Isoloom

CVE-2016-3088CRITICALunder attack08 Oct 2026

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitr

100RISK

GitHub PoC

Vulhub cacti/CVE-2022-46169: Cacti remote_agent.php Command Injection (CVE-2022-46169), run with Isoloom

CVE-2022-46169CRITICALunder attack08 Oct 2026

Unauthenticated Command Injection

100RISK

GitHub PoC

Vulhub drupal/CVE-2018-7600: Drupalgeddon 2 on Drupal 8.5.0, run with Isoloom

CVE-2018-7600CRITICALunder attackransomware08 Oct 2026

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISK

GitHub PoC

CVE-2021-38759 — Raspberry Pi OS Default Credentials Exploit

CVE-2021-38759—07 Oct 2026

Raspberry Pi OS through 5.10 has the raspberry default password for the pi account. If not changed, attackers can gain a

28RISK

GitHub PoC

DirtyFrag CVE-2026-43284 research for 5.4-qgki devices

CVE-2026-43284HIGH07 Oct 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

78RISK

GitHub PoC

CVE-2026-21589

CVE-2026-21589CRITICALunder attack07 Oct 2026

This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft

98RISK

GitHub PoC

MCPJam Inspector Remote Code Execution

CVE-2026-23744CRITICAL07 Oct 2026

REC in MCPJam inspector due to HTTP Endpoint exposes

75RISK

GitHub PoC★ 1

Privilege Escalation vulnerability

CVE-2026-96451HIGH07 Oct 2026

WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability

41RISK

GitHub PoC★ 2

CVE-2026-102782 — OrdaSoft Joomla Simple Membership <7.4.0 unauth SQLi (CWE-89, CVSS 4.0 9.3). PoCbit PoC: checkLoginPass + login param extractvalue error leak. check/exploit/mass, hits.txt & exploited.txt. Fix 7.4.0+. https://pocbit.org/pocs/cve-2026-102782

CVE-2026-102782CRITICAL07 Oct 2026

Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership < 7.4.0

48RISK

GitHub PoC

在AI辅助下利用cve-2019-2215 完成OPPO A77t提权

CVE-2019-2215HIGHunder attack07 Oct 2026

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

100RISK

GitHub PoC★ 2

CVE-2026-105844 — Payload CMS @payloadcms/plugin-import-export <3.88.0 unauth prototype pollution (CWE-1321, CVSS 4.0 9.3). PoCbit PoC: POST /api/exports/export-preview fields __proto__.overrideAccess → ACL bypass / data leak. check/exploit/mass. Fix 3.88.0+. https://pocbit.org/pocs/cve-2026-105844

CVE-2026-105844CRITICAL07 Oct 2026

Payload: Prototype pollution in Payload Import Export plugin

48RISK

GitHub PoC

Telnet 2.7 Authentication Bypass and Privilege Escalation | Telnet 2.7 Kimlik doğrulama Zafiyeti Ve Yetki Yükseltme Saldırısı

CVE-2026-24061CRITICALunder attack07 Oct 2026

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment

100RISK

GitHub PoC

Clean Login < 1.19 - Unauthenticated CAPTCHA Bypass via Empty Session Comparison

CVE-2026-90977MEDIUM07 Oct 2026

Clean Login < 1.19 - Unauthenticated CAPTCHA Bypass via Empty Session Comparison

33RISK

GitHub PoC

0xCyp1337/CVE-2026-81780

CVE-2026-81780CRITICAL07 Oct 2026

WordPress Hash Form plugin <= 1.4.2 - Arbitrary File Upload vulnerability

48RISK

GitHub PoC

cve-2026-87902 lab

CVE-2026-87902HIGHunder attack07 Oct 2026

An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph

98RISK

GitHub PoC★ 2

CVE-2026-13043 - Exploiting Panda / WatchGuard pskmad.sys authentication bypass for privileged IOCTL access, MSR disclosure and arbitrary process memory reads.

CVE-2026-13043CRITICAL07 Oct 2026

WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access

48RISK

GitHub PoC★ 4

Independent PoC and reproducible lab for CVE-2026-97332 — User Private Files < 2.2.0 unauthenticated private file disclosure on WordPress Multisite.

CVE-2026-97332MEDIUM07 Oct 2026

User Private Files < 2.2.0 - Unauthenticated Private File Disclosure via .htaccess Rewrite Rule Bypass (Multisite)

33RISK

GitHub PoC

DOS infinite-loop Vulnerability POC

CVE-2026-102253HIGH07 Oct 2026

iperf3 < 3.22 UDP Receive Worker Infinite Loop DoS

41RISK

GitHub PoC★ 8

CVE-2026-21589 detector for Atlassian Data Center webresource traversal. Pre-auth webroot file read confirm for Jira, Confluence and Bitbucket.

CVE-2026-21589CRITICALunder attack07 Oct 2026

This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft

98RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.