Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

88,056cataloged exploits

40,804CVEs with public exploitation

24,696lab-tested

All Referência 26,494Exploit-DB 24,489GitHub PoC 18,351VulnCheck XDB 10,605Nuclei 4,578Metasploit 3,539✓ verified onlyrecent popular risk

88,056 exploits

GitHub PoC

CVE-2026-85984 PoC: WordPress miniOrange OTP ≤5.5.5 unauth admin bypass (mo_wp_login_intent=otp + empty password). Check/exploit, user enum, colored CLI. https://pocbit.org/pocs/cve-2026-85984

CVE-2026-85984CRITICAL28 Sep 2026

miniOrange OTP Login, Verification and SMS Notifications <= 5.5.5 - Unauthenticated Authentication Bypass via 'mo_wp_login_intent' Parameter

48RISK

GitHub PoC

CVE-2026-38526 - Authenticated RCE exploit for Krayin CRM <= 2.2.x. Upload arbitrary PHP via /admin/tinymce/upload and gain remote code execution. Python PoC for security researchers, CTF players and bug bounty hunters. Tested on HTB Nexus.

CVE-2026-38526CRITICAL28 Sep 2026

An authenticated arbitrary file upload vulnerability in the /admin/tinymce/upload endpoint of Webkul Krayin CRM v2.2.x a

48RISK

GitHub PoC★ 8

One-click temporary KernelSU root (late-load) for Samsung Galaxy via DirtyFrag (CVE-2026-43284). No Shizuku/PC/ADB.

CVE-2026-43284HIGH28 Sep 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

78RISK

VulnCheck XDB

initial-access

CVE-2026-82901CRITICAL28 Sep 2026

Ultra Addons for Contact Form 7 <= 3.5.50 - Unauthenticated Arbitrary File Upload via Signature Form Field

63RISK

GitHub PoC★ 1

Request a Quote for WooCommerce (Addify) <= 2.9.2 Unauthenticated arbitrary file upload via afrfq_submit_quote_via_popup

CVE-2026-18143CRITICAL28 Sep 2026

Request a Quote for WooCommerce <= 2.9.2 - Unauthenticated Arbitrary File Upload via AJAX Popup Handler

63RISK

GitHub PoC

CVE-2026-100835 PoC: Edgeless Contrast <1.16.0 remote attestation relay (aTLS / CWE-295). Manifest audit (AllowedChipIDs/AllowedPIIDs), version & coordinator probe. https://pocbit.org/pocs/cve-2026-100835

CVE-2026-100835CRITICAL27 Sep 2026

Contrast before 1.16.0 Remote Attestation Relay Attack

48RISK

Metasploit300

Citrix NetScaler Unauthenticated Login Log Command Injection (CVE-2026-88771)

CVE-2026-88773CRITICAL27 Sep 2026

HTTP Request Smuggling

63RISK

GitHub PoC

PHP Object Injection in Profile Builder < 4.0.1

CVE-2026-76547MEDIUM27 Sep 2026

Profile Builder < 4.0.1 - Admin+ PHP Object Injection via Import/Export

33RISK

Metasploit300

Citrix NetScaler Unauthenticated Login Log Command Injection (CVE-2026-88771)

CVE-2026-88771CRITICALunder attack27 Sep 2026

A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands

100RISK

Metasploit300

Citrix NetScaler Unauthenticated Login Log Command Injection (CVE-2026-88771)

CVE-2026-88772CRITICALunder attack27 Sep 2026

Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

100RISK

GitHub PoC

CVE-2026-71963 - Hermes Agent 0.18.2-0.21.0 RCE via a repository-delivered .git/config (core.fsmonitor). Stdlib-only Python, verified on real 0.21.0 with a clean negative control on the fixed build.

CVE-2026-71963HIGH27 Sep 2026

Hermes Agent 0.18.2 - 0.21.0 RCE via git core.fsmonitor Config Injection

41RISK

GitHub PoC★ 1

CVE-2026-100740 PoC: D-Link DIR-895L A1_102b07 L2TP Host Name AVP out-of-bounds write in tunnel_set_params (UDP 1701). Device fingerprint + optional OOB trigger packet for authorized lab testing. https://pocbit.org/pocs/cve-2026-100740

CVE-2026-100740CRITICAL27 Sep 2026

D-Link DIR-895L L2TP Control Channel tunnel.c tunnel_set_params out-of-bounds write

48RISK

GitHub PoC★ 1

Reproduction and root cause analysis of CVE-2026-39987 Marimo pre-auth WebSocket RCE in a local Docker lab.

CVE-2026-39987CRITICALunder attack27 Sep 2026

marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

100RISK

GitHub PoC

Alexandertanay/jenkins-cve-2024-23897-lab

CVE-2024-23897CRITICALunder attackransomware27 Sep 2026

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an

100RISK

GitHub PoC

CVE-2026-8712: Unauthenticated SSRF / Backend URI Override in Wyoming HTTP API via uri Query Parameter

CVE-2026-8712MEDIUM27 Sep 2026

Wyoming < 1.10.2 SSRF via uri Query Parameter

33RISK

GitHub PoC

khanna419/cve-2021-43798-lab

CVE-2021-43798HIGHunder attack27 Sep 2026

Grafana path traversal

100RISK

GitHub PoC★ 1

Defensive WordPress security scanner for CVE-2026-87902 — local filesystem inspection and safe remote HTTP/HTTPS assessment.

CVE-2026-87902HIGHunder attack27 Sep 2026

An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph

100RISK

GitHub PoC★ 2

Exploit para explotar la vulnerabilidad CVE-2026-87902 que se acontece en el core de WordPress

CVE-2026-87902HIGHunder attack27 Sep 2026

An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph

100RISK

GitHub PoC★ 1

CVE-2026-39987 Marimo Pre-auth RCE research, Docker lab reproduction, root cause analysis, and patch validation.

CVE-2026-39987CRITICALunder attack27 Sep 2026

marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

100RISK

GitHub PoC

CVE-2024-4367 proof PDF for cpc docs-preview

CVE-2024-4367MEDIUM27 Sep 2026

A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js c

55RISK

GitHub PoC

snapshot of logpresso/CVE-2021-44228-Scanner at a pinned commit, for cross platform ci legs

CVE-2021-44228CRITICALunder attackransomware27 Sep 2026

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

GitHub PoC★ 13

CVE-2026-88772 PoC: Citrix NetScaler ADC/Gateway DTLS memory overflow (RCE/DoS, CVSS 9.5). Fingerprints Gateway, build vs 14.1-73.37 / 13.1-64.23, UDP/443 DTLS probe. CTX697096; active exploitation reported. https://pocbit.org/pocs/cve-2026-88772

CVE-2026-88772CRITICALunder attack27 Sep 2026

Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

100RISK

GitHub PoC★ 1

Unauthenticated SQL injection PoC and vulnerable lab environment for WP2Shell (CVE-2026-63030 + CVE-2026-60137) — a WordPress REST API batch route confusion chained into a WP_Query SQL injection. Includes Docker Compose lab setup and a Python exploitation script. For authorized security research only.

CVE-2026-63030CRITICALunder attack27 Sep 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

98RISK

GitHub PoC★ 9

CVE-2026-67279 + CVE-2026-86060 – MikroTrick MikroTik RouterOS SSH Pre-Auth Takeover (CVSS 9.2) | Red/Blue Team suite. 2 tools: Full Exploit (rekey bypass, fd-2 policy swap, full-admin shell, plant, mass scan, SOCKS5/Tor, stealth) & SafeDetect (banner/version audit, IoC guidance, JSON/CSV/HTML). Use Ethically & Safety only.

CVE-2026-67279MEDIUMunder attack27 Sep 2026

SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS

63RISK

VulnCheck XDB

initial-access

CVE-2026-12227CRITICAL27 Sep 2026

Visual Composer Website Builder <= 45.16.0 - Unauthenticated Local File Inclusion via 'vcv-template' Parameter

63RISK

GitHub PoC★ 10

三星 Galaxy S25 Ultra（SM-S938B）适配版 DFRoot：开机自动获取 root（DirtyFrag CVE-2026-43284 + CVE-2026-43499 双链路），全中文界面，fork 自 diabl0w/DFRoot

CVE-2026-43284HIGH27 Sep 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

78RISK

GitHub PoC★ 1

CVE-2026-12227 is a critical (CVSS 9.8) unauthenticated Local File Inclusion (LFI) vulnerability in the Visual Composer Website Builder plugin for WordPress, affecting all versions up to and including 45.16.0, This can lead to sensitive data exposure, access control bypass, or even full Remote Code Execution (RCE).

CVE-2026-12227CRITICAL27 Sep 2026

Visual Composer Website Builder <= 45.16.0 - Unauthenticated Local File Inclusion via 'vcv-template' Parameter

63RISK

GitHub PoC

A Windows-friendly, non-destructive Python checker for detecting WordPress installations potentially affected by CVE-2026-14281.

CVE-2026-14281CRITICAL27 Sep 2026

Automation Web Platform <= 4.8.6 - Unauthenticated Privilege Escalation via 'wawp_custom_fields' Parameter

48RISK

GitHub PoC★ 1

Unauthenticated LFI and conditional RCE scanner for CVE-2026-87902 in WordPress Core (4.7.0 – 7.1.1).

CVE-2026-87902HIGHunder attack27 Sep 2026

An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph

100RISK

GitHub PoC

Universal container escape exploit targeting the CRIU container checkpoint/restore system - CVE-2026-18107

CVE-2026-18107HIGH27 Sep 2026

Criu: criu: container escape via rseq critical section hijack during checkpoint/restore

41RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.