Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
87,464cataloged exploits
40,695CVEs with public exploitation
24,696lab-tested
AllReferência 26,426Exploit-DB 24,489GitHub PoC 18,182VulnCheck XDB 10,251Nuclei 4,577Metasploit 3,539✓ verified onlyrecentpopularrisk
87,464 exploits
VulnCheck XDB
initial-access
Shenzhen Aitemi M300 MT02 Unauthenticated OS Command Injection via protocol.csp
48RISK
open ↗VulnCheck XDB
initial-access
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗VulnCheck XDB
initial-access
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISK
open ↗VulnCheck XDB
initial-access
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISK
open ↗GitHub PoC
paktiko1986/CVE-2026-82474
Sudo through 1.9.17p2 Intercept Policy Bypass via execveat
41RISK
open ↗GitHub PoC
A Python-based security scanner designed to identify potential exposure to critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619, which may lead to Out-of-Memory (OOM) conditions and Remote Code Execution (RCE).
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 1
Walkthrough TryHackMe room php2shell — PHP-FPM memory disclosure & pre-auth RCE via upload_progress UAF (CVE-2026-109618, CVE-2026-109619).
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Read-only scanner for PHP2Shell (CVE-2026-109618 / CVE-2026-109619): finds vulnerable PHP, stale processes and webshells, and prints a remediation plan
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Rule Wazuh untuk mendeteksi eksploitasi PHP2Shell (CVE-2026-109618 / CVE-2026-109619) pada server web berbasis PHP (Apache/`mod_php`, Nginx + PHP-FPM)
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Mitigates CVE-2026-98432 via firewall rules
ipv4: free inet_opt and ireq_opt after an RCU grace period
48RISK
open ↗GitHub PoC
Safe kernel upgrade for CVE-2026-98432 on Ubuntu 24.04 with NVIDIA, and an analysis of the bug
ipv4: free inet_opt and ireq_opt after an RCU grace period
48RISK
open ↗GitHub PoC
CVE-2026-110447 — Collabora Online "Built-in CODE Server"
Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution
100RISK
open ↗GitHub PoC★ 1
CVE-2026-98432: Linux Kernel TCP/IPv4 Race Condition Use-After-Free (CVSS 9.8) — PoC, Scanner, Detection Rules
ipv4: free inet_opt and ireq_opt after an RCU grace period
48RISK
open ↗GitHub PoC
xxhjkl/cve-2026-98432-check
ipv4: free inet_opt and ireq_opt after an RCU grace period
48RISK
open ↗GitHub PoC★ 1
CVE-2026-98432 - Linux IPv4/TCP lab root-shell kit (by thiscitze)
ipv4: free inet_opt and ireq_opt after an RCU grace period
48RISK
open ↗VulnCheck XDB
denial-of-service
Remote Procedure Call Runtime Remote Code Execution Vulnerability
70RISK
open ↗VulnCheck XDB
initial-access
D-Link DIR-816 A2_v1.10CNB04.img is vulnerable to Command Injection via /goform/SystemCommand. After the user passes in
23RISK
open ↗VulnCheck XDB
local
The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o
98RISK
open ↗GitHub PoC★ 5
One-tap Android root for Samsung Galaxy devices, built around the CVE-2026-98260 timer exploit.
exec: Cleanup POSIX timers right after de_thread()
41RISK
open ↗GitHub PoC
CVE-2026-88773 - NetScaler nsppe 32-bit chunk-size accumulator wrap (HTTP Request Smuggling)
HTTP Request Smuggling
63RISK
open ↗GitHub PoC★ 1
基于CVE-2026-98260漏洞开发的提权项目
exec: Cleanup POSIX timers right after de_thread()
41RISK
open ↗GitHub PoC
PHP 5.6.40 RPM packages with PHP2Shell security patches for CVE-2026-109618 and CVE-2026-109619 on EL6.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Incident Response Case Study: Zero-Day RCE Vulnerability Mitigation & Zero-Downtime Container Hotfix on AWS + Docker (CVE-2026-109618)
RCE via OOM corruption
100RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.