Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
88,056cataloged exploits
40,804CVEs with public exploitation
24,696lab-tested
AllReferência 26,494Exploit-DB 24,489GitHub PoC 18,351VulnCheck XDB 10,605Nuclei 4,578Metasploit 3,539✓ verified onlyrecentpopularrisk
88,056 exploits
GitHub PoC★ 1
CVE-2026-87796 - Multi Uploader for Gravity Forms <= 1.1.9; Unauthorized RCE (CRITICAL 9.8)
Multi Uploader for Gravity Forms <= 1.1.9 - Unauthenticated Arbitrary File Upload via Chunked File Upload
48RISK
open ↗GitHub PoC
isaca0315/CVE-2026-44840-poc
Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query
41RISK
open ↗GitHub PoC★ 1
exploit para reverse shell en MCPJamInspector v1.4.2< por endpoint mal configurado
REC in MCPJam inspector due to HTTP Endpoint exposes
75RISK
open ↗GitHub PoC
CVE-2026-48908 SP Page Builder (Joomla) unauth RCE suite — authorized testing only
Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2
100RISK
open ↗GitHub PoC
Educational cyber range for CVE-2026-59827 (Metabase H2 unsafe deserialization / CWE-502). Isolated Docker lab — training only, not for attacking production Metabase.
Metabase: Unsafe Deserialization of H2 Query Results
48RISK
open ↗VulnCheck XDB
initial-access
Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2
100RISK
open ↗GitHub PoC★ 1
Forensic Analysis and Local Replication of the OpenAI-Artifactory Privilege Escalation Incident (CVE-2026-65616)
Potential privilege escalation to JFrog administrator privileges
41RISK
open ↗VulnCheck XDB
info-leak
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
100RISK
open ↗GitHub PoC
A Python-based security tool for checking sudo versions for potential exposure to CVE-2021-3156 (Baron Samedit). Designed for authorized security testing and learning.
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RISK
open ↗GitHub PoC★ 2
Unbounded memory allocation in NanaZip's UFS handler via an attacker-controlled `fs_bsize` field.
NanaZip: Unbounded memory allocation (DoS) in NanaZip UFS parser via unvalidated fs_bsize/fs_fsize superblock fields
28RISK
open ↗GitHub PoC
CVE-2026-85706
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
100RISK
open ↗GitHub PoC
CVE-2026-12793 - JetFormBuilder Unauthorized RCE (CRITICAL 9.8)
JetFormBuilder <= 3.6.2 - Unauthenticated Privilege Escalation via '_jet_engine_booking_form_id' Parameter
48RISK
open ↗GitHub PoC
SangSenimanWartefak/CVE-2026-80467
Advanced Custom Fields: Extended 0.9.2.2 - 0.9.2.6 - Unauthenticated Privilege Escalation via Front-End User Insert Action
41RISK
open ↗GitHub PoC★ 1
CVE-2026-87930 Joomla Multi-CVE RCE suite — authorized testing only
MaxSite CMS through 109.6 PHP Object Injection via ci_session
48RISK
open ↗GitHub PoC
CVE-2026-19975 - Draft or TODO
Azuriom CMS Money Transfer ProfileController.php transferMoney toctou
28RISK
open ↗GitHub PoC
Isolated educational FreePBX-compatible cyber range for CVE-2025-57819 (CWE-89/CWE-288). Docker lab — not official Sangoma FreePBX.
FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE
100RISK
open ↗VulnCheck XDB
initial-access
WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Arbitrary File Upload vulnerability
48RISK
open ↗GitHub PoC★ 2
CVE-2026-76460
Cisco Identity Services Engine Authentication Bypass Vulnerability
100RISK
open ↗GitHub PoC★ 3
Unbounded memory allocation in NanaZip's UFS handler via an attacker-controlled `fs_bsize` field.
NanaZip: Unbounded memory allocation (DoS) in NanaZip UFS parser via unvalidated fs_bsize/fs_fsize superblock fields
28RISK
open ↗GitHub PoC
Issabel pbxapi hard coded JWT RCE POC
Issabel Framework Hard-coded JWT Key RCE via pbxapi/manager/originate
63RISK
open ↗GitHub PoC
UVdesk unauth wizard super-admin POC
UVdesk Community Skeleton through 1.1.8 Missing Authentication on the Installation Wizard
28RISK
open ↗GitHub PoC★ 1
My first CVE
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoi
33RISK
open ↗VulnCheck XDB
info-leak
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RISK
open ↗GitHub PoC
avergnaud/flight-sql-jdbc-driver-cve-2026-54512
jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation
41RISK
open ↗GitHub PoC
Unofficial Apache Doris Spark connector 26.1.0 security fork for Java / Spark 3.5.1 / Scala 2.12; patched shaded Jackson for CVE-2026-54512.
jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation
41RISK
open ↗GitHub PoC★ 1
Issabel pbxapi hard coded JWT RCE POC
Issabel Framework Hard-coded JWT Key RCE via pbxapi/manager/originate
63RISK
open ↗VulnCheck XDB
initial-access
Issabel Framework Hard-coded JWT Key RCE via pbxapi/manager/originate
63RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.