Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,001cataloged exploits

40,084CVEs with public exploitation

24,696lab-tested

All Referência 25,989Exploit-DB 24,488GitHub PoC 17,519VulnCheck XDB 9,945Nuclei 4,531Metasploit 3,529✓ verified onlyrecent popular risk

17,519 exploits

GitHub PoC

caspy123/CVE-2026-43499

CVE-2026-43499HIGH10 Jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

open ↗

GitHub PoC

CVE-2026-28992 IOHIDFamily FastPathUserClient race condition PoC — security research

CVE-2026-28992MEDIUM10 Jul 2026

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7

33RISK

open ↗

GitHub PoC

Reproducer for CVE-2026-40860 — Apache Camel camel-jms/sjms/amqp JMS ObjectMessage unsafe deserialization (RCE)

CVE-2026-40860CRITICAL10 Jul 2026

Apache Camel: Unsafe Deserialization of JMS ObjectMessage in camel-jms, camel-sjms, camel-sjms2 and camel-amqp

48RISK

open ↗

GitHub PoC

oPanel Authanticated Remote Code Execution via 'advenced/curl' Component

CVE-2026-50979HIGH10 Jul 2026

A command injection vulnerability in the 'advanced/curl' component of Osbil Technology oPanel v1.19.50 and earlier allow

41RISK

open ↗

GitHub PoC

unpredictable21/halo-2.25.4-backup-write-CVE-2026-67920

CVE-2026-67920HIGH10 Jul 2026

An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the run.halo.app.migration.impl.Migration

41RISK

open ↗

GitHub PoC

Exploitability PoC for CVE-2026-9558 (SSTI Mautic Theme)

CVE-2026-9558CRITICAL10 Jul 2026

A Server-Side Template Injection (SSTI) vulnerability exists in Mautic's theme engine. The platform renders uploaded Twi

48RISK

open ↗

GitHub PoC

oPanel DNS-Based Cross-Site Scripting (XSS) & Session Hijacking

CVE-2026-50980MEDIUM10 Jul 2026

Cross-Site Scripting (XSS) vulnerability in the DNS lookup/management component of oPanel before v1.20.25 allows remote

33RISK

open ↗

GitHub PoC

Exploit for CVE-2022-26134

CVE-2022-26134CRITICALunder attackransomware10 Jul 2026

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISK

open ↗

GitHub PoC

nvicloud/CVE-2026-12948

CVE-2026-12948MEDIUM10 Jul 2026

Stored Cross-Site Scripting (XSS)

33RISK

open ↗

GitHub PoC

Reproducer for CVE-2026-40859 — Apache Camel camel-netty-http / camel-vertx-http producer-side unsafe deserialization of HTTP response bodies (RCE)

CVE-2026-40859HIGH10 Jul 2026

Apache Camel: Camel-Vertx-Http: Unsafe Java deserialization of HTTP response bodies via a raw ObjectInputStream when transferException is enabled

41RISK

open ↗

GitHub PoC★ 1

CVE-2026-54519 / GHSA-qv97-83w4-ff86: ai-agent-automation memory authorization advisory landing page

CVE-2026-54519HIGH09 Jul 2026

AI Agent Automation: Missing ownership checks in memory APIs allow cross-user memory read and deletion

41RISK

open ↗

GitHub PoC★ 9

tc3650/CVE-2026-43499-armv7

CVE-2026-43499HIGH09 Jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

open ↗

GitHub PoC

Public disclosure for CVE-2026-52100 (CSRF) & CVE-2026-52101 (SSRF) in linx-server. MITRE assigned the CVEs; this repo provides a public reference and helps affected users understand the risk.

CVE-2026-52100HIGH09 Jul 2026

Cross Site Request Forgery vulnerability in andreimarcu linux-server v.1.0 through v.2.3.8 allows a remote attacker to e

41RISK

open ↗

GitHub PoC★ 1

0x00phantom-hat/CVE-2026-12400-Exploit

CVE-2026-12400MEDIUM09 Jul 2026

FlowForms <= 1.1.1 - Authenticated (Contributor+) Insecure Direct Object Reference to Arbitrary Form Modification via REST API '/flowforms/v1/forms/{id}' Endpoints

33RISK

open ↗

GitHub PoC★ 1

Offical PoC for this cve

CVE-2026-56876HIGH09 Jul 2026

extract-zip unvalidated symlink path traversal

41RISK

open ↗

GitHub PoC★ 1

CVE-2026-54520 / GHSA-cm8g-8jfq-887p: ai-agent-automation workflow path traversal advisory landing page

CVE-2026-54520HIGH09 Jul 2026

AI Agent Automation: Workflow file step path traversal allows read and write outside the expected directory

41RISK

open ↗

GitHub PoC★ 154

yellow key bitlocker yellow screen bitlocker bitlocker recovery key CVE-2026-45585 microsoft account secure boot bypass command prompt windows 11 windows 10 surface pro uefi firmware encryption key data recovery troubleshoot boot loop cmd unlock drive setup guide tutorial

CVE-2026-45585MEDIUM09 Jul 2026

Windows BitLocker Security Feature Bypass Vulnerability

33RISK

open ↗

GitHub PoC★ 1

CVE-2026-50131 / GHSA-xw9q-2mv6-9fr8: Fedify incomplete SSRF mitigation advisory landing page

CVE-2026-50131HIGH09 Jul 2026

Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges

41RISK

open ↗

GitHub PoC

Librebooking Admin RCE PoC CVE-2026-61343

CVE-2026-61343HIGH09 Jul 2026

LibreBooking path traversal

41RISK

open ↗

GitHub PoC★ 61

OPPO Find N2 GhostLock (CVE-2026-43499) exploit adaptation

CVE-2026-43499HIGH09 Jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

open ↗

GitHub PoC★ 1

CVE-2026-4257 - Contact Form by Supsystic <= 1.7.36 # SSTI to RCE

CVE-2026-4257CRITICAL09 Jul 2026

Contact Form by Supsystic <= 1.7.36 - Unauthenticated Server-Side Template Injection via Prefill Functionality

75RISK

open ↗

GitHub PoC

包括能执行的命令探测和一键getshell（需要服务器部署服务）

CVE-2026-8037CRITICALunder attack09 Jul 2026

OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF

100RISK

open ↗

GitHub PoC

PoC for CVE-2026-49230: Apache APISIX jwe-decrypt authentication bypass (missing AES-GCM tag validation, CWE-354, CVSS 9.1)

CVE-2026-49230MEDIUM09 Jul 2026

Apache APISIX: Authentication bypass in jwe-decrypt

33RISK

open ↗

GitHub PoC

CVE-2026-41089 checker: unauthenticated, non-destructive detection for the Netlogon CLDAP stack buffer overflow (CVSS 9.8). Reports whether a domain controller's domain is long enough to crash, without sending the overflow. The binary-verified analysis the public PoCs got wrong.

CVE-2026-41089CRITICAL09 Jul 2026

Windows Netlogon Remote Code Execution Vulnerability

70RISK

open ↗

GitHub PoC

johnwickakash12/CVE-2021-41773

CVE-2021-41773HIGHunder attackransomware09 Jul 2026

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISK

open ↗

GitHub PoC★ 1

CVE-2026-50181 / GHSA-fg23-3346-88f5: Langroid path traversal advisory landing page

CVE-2026-50181HIGH09 Jul 2026

Langroid: Path traversal in the file tools allows read/write outside configured current directory

41RISK

open ↗

GitHub PoC

Control Web Panel (CWP) vulnerability scenario related to CVE-2026-57517

CVE-2026-57517CRITICAL09 Jul 2026

Control Web Panel < 0.9.8.1225 Blind SQL Injection via userRes Parameter

48RISK

open ↗

GitHub PoC

Whitehat School 4기 CVE-2021-4034 분석 및 POC 작성

CVE-2021-4034HIGHunder attackransomware09 Jul 2026

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISK

open ↗

GitHub PoC

CVE-2026-50746... - Draft

CVE-2026-50746CRITICAL09 Jul 2026

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Conne

48RISK

open ↗

GitHub PoC★ 2

CVE-2026-53359漏洞补丁

CVE-2026-53359HIGH09 Jul 2026

KVM: x86: Fix shadow paging use-after-free due to unexpected role

41RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.