Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,001cataloged exploits

40,084CVEs with public exploitation

24,696lab-tested

All Referência 25,989Exploit-DB 24,488GitHub PoC 17,519VulnCheck XDB 9,945Nuclei 4,531Metasploit 3,529✓ verified onlyrecent popular risk

17,519 exploits

GitHub PoC

Reproducer for CVE-2026-46453 — Apache Camel camel-elasticsearch-rest-client unprefixed-header injection (operation/query override via inbound HTTP headers)

CVE-2026-46453MEDIUM13 Jul 2026

Apache Camel: Camel-Elasticsearch-Rest-Client: Exchange header constants without the Camel prefix bypass inbound HTTP header filtering, allowing untrusted clients to override the Elasticsearch query and operation

33RISK

GitHub PoC

1beelze/CVE-2026-5118

CVE-2026-5118CRITICAL13 Jul 2026

Divi Form Builder <= 5.1.2 - Unauthenticated Privilege Escalation via 'role'

48RISK

GitHub PoC

CVE-2026-53805 - Draft

CVE-2026-53805CRITICAL13 Jul 2026

NVIDIA SIL GEN3C Unauthenticated RCE via Pickle Deserialization in Inference API

48RISK

GitHub PoC★ 1

CVE-2026-46529 - Atril Evince XReader PDF Clickable Link RCE - PoC & Analysis | CVSS 7.8 HIGH | AMN SECURITY

CVE-2026-46529HIGH13 Jul 2026

PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

41RISK

GitHub PoC

Reproducer for CVE-2026-43866 — Apache Camel camel-jms forged DefaultExchangeHolder bypass of the CVE-2026-40860 deserialization filter (Exchange-state injection)

CVE-2026-43866HIGH12 Jul 2026

Apache Camel, Apache Camel: Camel JMS - CVE-2026-40860 fix bypass via DefaultExchangeHolder

41RISK

GitHub PoC

luongchivi/Preproduce-CVE-2019-0232

CVE-2019-0232—12 Jul 2026

When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0

60RISK

GitHub PoC★ 1

CVE-2019-0232 - Apache Tomcat CGIServlet enableCmdLineArguments RCE - PoC Exploit

CVE-2019-0232—12 Jul 2026

When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0

60RISK

GitHub PoC

cve-2021-41773

CVE-2021-41773HIGHunder attackransomware12 Jul 2026

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISK

GitHub PoC

Reproducer for CVE-2026-43865 — Apache Camel camel-hazelcast default-configured instance unsafe Java deserialization (RCE)

CVE-2026-43865HIGH12 Jul 2026

Apache Camel: Camel-Hazelcast: Unsafe Java deserialization in default-configured managed Hazelcast instances enables remote code execution

41RISK

GitHub PoC★ 1

CVE research-to-detection-signature engineering project: fingerprinting the vsftpd 2.3.4 backdoor (CVE-2011-2523) externally, at scale, with validated false-positive/negative handling - built in Python

CVE-2011-2523—12 Jul 2026

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

60RISK

GitHub PoC★ 2

CVE-2025-24813 - Apache Tomcat RCE via Session Deserialization - PoC Exploit

CVE-2025-24813CRITICALunder attack12 Jul 2026

Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

100RISK

GitHub PoC★ 2

Wordpress Plugin Planyo Online Reservation System <= 3.0 - Arbitrary File Read via SSRF

CVE-2026-3576HIGH12 Jul 2026

Planyo online reservation system <= 3.0 - Unauthenticated Server-Side Request Forgery via 'ulap_url' Parameter

56RISK

GitHub PoC

CVE-2023-4911 (Looney Tunables) analysis report and Docker reproduction lab

CVE-2023-4911HIGHunder attack12 Jul 2026

Glibc: buffer overflow in ld.so leading to privilege escalation

98RISK

GitHub PoC

Write-up and exploitation steps for the pedit COW vulnerability (CVE-2026-46331)

CVE-2026-46331HIGH12 Jul 2026

net/sched: fix pedit partial COW leading to page cache corruption

41RISK

GitHub PoC

Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection Cockpit versions 327 – 359 | CVSS 9.8 Critical | CWE-78

CVE-2026-4631CRITICAL12 Jul 2026

Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection

68RISK

GitHub PoC★ 269

GhostLock (CVE-2026-43499) kernel exploit for OnePlus devices with locked bootloader

CVE-2026-43499HIGH12 Jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

GitHub PoC★ 94

基于 CVE-2026-43499 的 8E5 机型自动化解锁辅助工具，仅限授权安全研究与自有设备使用。

CVE-2026-43499HIGH12 Jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

GitHub PoC★ 3

GhostLock - CVE-2026-43499 backport patch for openVZ 7

CVE-2026-43499HIGH12 Jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

GitHub PoC★ 2

Hunt-Benito/samsung-bixby-command-execution-cve-2026-21055-improper-component-export

CVE-2026-21055HIGH12 Jul 2026

Improper export of android application components in Bixby prior to version 4.0.70.8 allows local attackers to execute a

41RISK

GitHub PoC★ 226

CVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k

CVE-2026-43499HIGH12 Jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

GitHub PoC

An unauthenticated SQL injection vulnerability exists in the Vendure Shop API. A user-controlled query string parameter is interpolated directly into a raw SQL expression without parameterization or validation, allowing an attacker to execute arbitrary SQL against the database.

CVE-2026-40887CRITICAL11 Jul 2026

@vendure/core has a SQL Injection vulnerability

43RISK

GitHub PoC

jini135wii/CVE-2019-15107

CVE-2019-15107CRITICALunder attackransomware11 Jul 2026

An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera

100RISK

GitHub PoC

MW-HF/Drupal-CVE-2026-9082

CVE-2026-9082CRITICALunder attack11 Jul 2026

Drupal core - Highly critical - SQL injection - SA-CORE-2026-004

100RISK

GitHub PoC★ 1

CVE-2026-23744 MCPJam Inspector unauthenticated RCE PoC

CVE-2026-23744CRITICAL11 Jul 2026

REC in MCPJam inspector due to HTTP Endpoint exposes

75RISK

GitHub PoC★ 6

Termux Privilege Escalation Tool & Root Manager - CVE-2026-43501

CVE-2026-43501CRITICAL11 Jul 2026

ipv6: rpl: reserve mac_len headroom when recompressed SRH grows

48RISK

GitHub PoC★ 1

RustDesk < 1.4.9 - Missing Session-Scope Enforcement Allows Out-of-Scope Control Message Injection

CVE-2026-57850HIGH11 Jul 2026

RustDesk Missing Session Scope Enforcement Allows Out-of-Scope Control Message Injection

41RISK

GitHub PoC

Instant Appointment <= 1.2 — Unauthenticated Arbitrary File Upload to RCE via add_service_front AJAX | CVSS 9.8

CVE-2026-15282CRITICAL11 Jul 2026

Instant Appointment <= 1.2 - Unauthenticated Arbitrary File Upload

48RISK

GitHub PoC

PoC for jenkins 2.63 CVE-2019-1003030

CVE-2019-1003030CRITICALunder attack11 Jul 2026

A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src/main/java/org/

100RISK

GitHub PoC

OS Command Injection in Health Check → Remote Code Execution

CVE-2026-59734HIGH11 Jul 2026

Coolify: OS Command Injection in Health Check Configuration Allows Remote Code Execution

41RISK

GitHub PoC

Wazuh + Suricata SOC lab detecting real exploits (CVE-2011-2523) and brute-force attacks, with custom detection rules for gaps in default IDS signatures.

CVE-2011-2523—11 Jul 2026

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

60RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.