Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,001cataloged exploits

40,084CVEs with public exploitation

24,696lab-tested

All Referência 25,989Exploit-DB 24,488GitHub PoC 17,519VulnCheck XDB 9,945Nuclei 4,531Metasploit 3,529✓ verified onlyrecent popular risk

17,519 exploits

GitHub PoC★ 2

CVE-2026-48909 - Unauthenticated PHP Object Injection to RCE exploit for Joomla SP LMS extension versions <= 4.1.3. Exploits lmsOrders cookie deserialization to write webshell via Joomla FormattedtextLogger gadget chain. Includes interactive shell, path discovery, and cleanup. For authorized security testing only.

CVE-2026-48909CRITICAL15 Jul 2026

Joomla Extension - joomshaper.com - PHP Object injection in SP LMS extension for Joomla < 4.1.4

63RISK

GitHub PoC★ 21

PoC for CVE-2026-3891 — Unauthenticated Arbitrary File Upload leading to Remote Code Execution in Pix for WooCommerce <= 1.5.0

CVE-2026-3891CRITICAL15 Jul 2026

Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload

75RISK

GitHub PoC★ 1

Samsung libimagecodec.quram.so OOB Write PoC

CVE-2026-21045HIGH15 Jul 2026

Out-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote

41RISK

GitHub PoC★ 28

This repo contains a proof-of-concept exploit for CVE-2026-15409. It establishes non-root remote code execution on SonicWall SMA 1000 by implementing the Erlang protocol expected by localhost:1050 and tunneling it through the websocket for file r/w and arbitrary code execution via RPC calls.

CVE-2026-15409CRITICALunder attackransomware15 Jul 2026

A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A

93RISK

GitHub PoC

Podlove Podcast Publisher Unauthenticated File Upload RCE via is_image() vs extract_file_extension() Mismatch | CVSS 9.8

CVE-2026-13001CRITICAL15 Jul 2026

Podlove Podcast Publisher <= 4.5.1 - Unauthenticated Arbitrary File Upload via podlove_image_cache_url Parameter

63RISK

GitHub PoC

Reproducer for CVE-2026-46588: Apache Camel camel-couchdb CouchDb* header injection (operation confusion) subverting a write-only endpoint into read + delete of arbitrary documents (fixed in 4.14.8/4.18.3/4.21.0)

CVE-2026-46588HIGH15 Jul 2026

Apache Camel: CouchDB: Non-Camel-prefixed Exchange headers bypass HeaderFilterStrategy allowing operation override from untrusted input

41RISK

GitHub PoC

CVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k

CVE-2026-43499HIGH15 Jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

GitHub PoC

The GREENDARK hospital infrastructure was configured by Dr. Gusto Rogue prior to his termination. No further details are provided.

CVE-2021-41773HIGHunder attackransomware15 Jul 2026

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISK

GitHub PoC★ 4

Pix for WooCommerce Unauthenticated File Upload via certificate_crt_path Parameter | CVSS 9.8

CVE-2026-3891CRITICAL15 Jul 2026

Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload

75RISK

GitHub PoC★ 2

CVE-2026-58138 — Conductor (3.21.21..<3.30.2) unauthenticated RCE via INLINE GraalVM evaluator (HostAccess.ALL). Lab + PoC, verified e2e (root).

CVE-2026-58138CRITICAL15 Jul 2026

Orkes Conductor 3.21.21 < 3.30.2 Unauthenticated RCE via GraalVM Script Evaluators

63RISK

GitHub PoC

CVE-2026-15410 - More: https://github.com/HORKimhab/poc-cve-collection

CVE-2026-15410HIGHunder attackransomware15 Jul 2026

Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the S

76RISK

GitHub PoC★ 30

PoC for CVE-2026-58635: Windows Narrator Braille Local Privilege Escalation

CVE-2026-58635HIGH15 Jul 2026

Windows Narrator Braille Elevation of Privilege Vulnerability

41RISK

GitHub PoC

A 16-year-old bug in the Linux kernel lets a rented VM break out and attack the host it runs on. Intel and AMD alike. Januscape is a use-after-free vulnerability in the KVM code that has been sitting there since 2010.

CVE-2026-53359HIGH15 Jul 2026

KVM: x86: Fix shadow paging use-after-free due to unexpected role

41RISK

GitHub PoC

Panduan mitigasi Januscape (CVE-2026-53359) AlmaLinux 9.5 production-safe + scripts

CVE-2026-53359HIGH15 Jul 2026

KVM: x86: Fix shadow paging use-after-free due to unexpected role

41RISK

GitHub PoC

seqra/cve-2026-58138

CVE-2026-58138CRITICAL15 Jul 2026

Orkes Conductor 3.21.21 < 3.30.2 Unauthenticated RCE via GraalVM Script Evaluators

63RISK

GitHub PoC

arpit-bansal15/cve-2026-48282-pentest-lab

CVE-2026-48282CRITICALunder attack15 Jul 2026

ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

100RISK

GitHub PoC

WhatsWrongAndWhy/CVE-2016-8655

CVE-2016-8655—15 Jul 2026

Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cau

43RISK

GitHub PoC

My portfolio showcasing vulnerability research (CVE-2026-11989, CVE-2026-11395) and automated threat orchestration engineering (Lucius Engine, TalonVigil).

CVE-2026-11989MEDIUM15 Jul 2026

Bit integrations <= 2.8.7 - Unauthenticated Server-Side Request Forgery via Form Field Upload Mapping

33RISK

GitHub PoC

Kanak-CypherX/cve-2024-4577-lab

CVE-2024-4577CRITICALunder attackransomware15 Jul 2026

Argument Injection in PHP-CGI

100RISK

GitHub PoC

WhatsWrongAndWhy/CVE-2016-9793

CVE-2016-9793—15 Jul 2026

The sock_setsockopt function in net/core/sock.c in the Linux kernel before 4.8.14 mishandles negative values of sk_sndbu

23RISK

GitHub PoC

exploit for CVE-2022-42889

CVE-2022-42889—15 Jul 2026

Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults

60RISK

GitHub PoC

Reproducer for CVE-2026-46590: Apache Camel camel-pqc key-lifecycle unsafe deserialization (FileBasedKeyLifecycleManager legacy .key migration via ObjectInputStream), incomplete remediation of CVE-2026-40048 (fixed in 4.18.3/4.21.0)

CVE-2026-46590HIGH15 Jul 2026

Apache Camel: Camel-PQC: The HashiCorp Vault and AWS Secrets Manager key-lifecycle managers deserialize persisted key metadata with java.io.ObjectInputStream and no ObjectInputFilter (incomplete remediation of CVE-2026-40048)

41RISK

GitHub PoC

firstlax6t/CVE-2026-36669-FengOffice

CVE-2026-36669CRITICAL15 Jul 2026

An unauthenticated arbitrary file upload vulnerability in ck_upload_handler.php in Feng Office 3.11.13.11 allows remote

48RISK

GitHub PoC

NeseOS-Corp/CVE-2026-50657

CVE-2026-50657MEDIUM15 Jul 2026

Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability

33RISK

GitHub PoC★ 1

罗技云掌机 · GhostLock CVE-2026-43499 root 尝试

CVE-2026-43499HIGH15 Jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

GitHub PoC★ 2

Samsung libimagecodec.quram.so OOB Write PoC

CVE-2026-21045HIGH15 Jul 2026

Out-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote

41RISK

GitHub PoC★ 2

Raimu0x19/CVE-2026-13001

CVE-2026-13001CRITICAL15 Jul 2026

Podlove Podcast Publisher <= 4.5.1 - Unauthenticated Arbitrary File Upload via podlove_image_cache_url Parameter

63RISK

GitHub PoC★ 12

CVE-2026-56164 EOP Exploit

CVE-2026-56164MEDIUMunder attack15 Jul 2026

Microsoft SharePoint Server Elevation of Privilege Vulnerability

63RISK

GitHub PoC

CVE-2026-15409 - Dectect

CVE-2026-15409CRITICALunder attackransomware15 Jul 2026

A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A

93RISK

GitHub PoC

lamaper/CVE-2026-52199

CVE-2026-52199CRITICAL15 Jul 2026

An issue in Generic OEM UZ801_v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrary code via the sbin/

48RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.