Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,001cataloged exploits

40,084CVEs with public exploitation

24,696lab-tested

All Referência 25,989Exploit-DB 24,488GitHub PoC 17,519VulnCheck XDB 9,945Nuclei 4,531Metasploit 3,529✓ verified onlyrecent popular risk

17,519 exploits

GitHub PoC★ 6

Complete fix collection for the CVE-2026-53359 guest-to-host escape vulnerability in the KVM/x86 shadow MMU. From zero-downtime livepatch to kernel upgrade — covers every operational scenario. / KVM/x86 shadow MMU 虚拟机逃逸漏洞（CVE-2026-53359）的完整修复方案集合。从零停机热修复到内核升级，覆盖所有运维场景。

CVE-2026-53359HIGH07 Jul 2026

KVM: x86: Fix shadow paging use-after-free due to unexpected role

41RISK

GitHub PoC★ 2

Linux 内核升级指南 - 修复 CVE-2026-53359

CVE-2026-53359HIGH07 Jul 2026

KVM: x86: Fix shadow paging use-after-free due to unexpected role

41RISK

GitHub PoC★ 1

A17-ba/CVE-2026-51119

CVE-2026-51119CRITICAL07 Jul 2026

An issue in Invixium IXM WEB v.2.3.85.25 allows an attacker to escalate privileges via the /SystemUsers/CreateAppUser co

48RISK

GitHub PoC

NEO-SQLi — exploit Django _connector SQL Injection (CVE-2025-64459) | canal RedTeam Brasil

CVE-2025-64459CRITICAL07 Jul 2026

Potential SQL injection via _connector keyword argument in QuerySet and Q objects

53RISK

GitHub PoC★ 1

Stored Cross-Site Scripting (XSS) in osTicket via Vulnerable Bootstrap Tooltip Component

CVE-2026-36214MEDIUM07 Jul 2026

osTicket versions from 1.10 up to 1.17.7 and from 1.18.0 up to 1.18.3 are vulnerable to a stored XSS due to a vulnerable

33RISK

GitHub PoC★ 24

imbas007/CVE-2026-48282

CVE-2026-48282CRITICALunder attack06 Jul 2026

ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

100RISK

GitHub PoC★ 4

Early Attestation Considered Very Harmful (CVE-2026-100833 of CVSS 9.6, CVE-2026-108265 of CVSS 9.1, CVE-2026-108266 of CVSS 9.1, CVE-2026-108267 of CVSS 9.1, CVE-2026-108268 of CVSS 9.1, CVE-2026-108269 of CVSS 9.1, CVE-2026-100835 of CVSS 9.1, CVE-2026-92701 of CVSS 9.1, CVE-2026-92702 of CVSS 9.1, CVE-2026-33697 of CVSS 7.5, and more to come)

CVE-2026-100833HIGH06 Jul 2026

Contrast before 1.23.1 Image Substitution via Policy Generation

41RISK

GitHub PoC

AF_ALG/splice 기반 Linux Page Cache 변조 취약점 분석 및 대응 실습

CVE-2026-31431HIGHunder attack06 Jul 2026

crypto: algif_aead - Revert to operating out-of-place

100RISK

GitHub PoC

Rust-based DLL hijacking loader for MobaXterm (CVE-2026-6421) with persistence

CVE-2026-6421HIGH06 Jul 2026

Mobatek MobaXterm Home Edition msimg32.dll uncontrolled search path

41RISK

GitHub PoC

CVE-2026-24061-PoC

CVE-2026-24061CRITICALunder attack06 Jul 2026

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment

100RISK

GitHub PoC

HTB "Abducted" write-up. Exploit CVE-2026-4480 (Samba RCE) → SMB wide links → systemd → root. Full methodology and flags.

CVE-2026-4480CRITICAL06 Jul 2026

Samba: samba: remote code execution in printing subsystem via unescaped job description

68RISK

GitHub PoC

OpenBullet2 through version 0.3.2 contains an authentication bypass vulnerability in the API key authentication middleware that allows unauthenticated attackers to gain admin access by supplying an empty X-Api-Key header value.

CVE-2026-25555CRITICAL06 Jul 2026

OpenBullet2 0.3.2 Authentication Bypass via X-Api-Key Header

63RISK

GitHub PoC

Next.js / RSC - Unauthenticated RCE (React2Shell) (CVE-2025-55182)

CVE-2025-55182CRITICALunder attackransomware06 Jul 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISK

GitHub PoC★ 7

jaf0rk/CVE-2026-14382

CVE-2026-14382CRITICAL06 Jul 2026

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to

48RISK

GitHub PoC

CVE-2012-2122 - MySQL Authentication Bypass

CVE-2012-2122—06 Jul 2026

sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x befor

60RISK

GitHub PoC

Reproducer for CVE-2026-40022: Apache Camel camel-platform-http-main authentication bypass on non-root context paths

CVE-2026-40022HIGH06 Jul 2026

Apache Camel Platform HTTP Main: Authentication Bypass on Non-Root Context Paths in camel main runtime

41RISK

GitHub PoC

HTB_Nexus Penetration Test Report – Comprehensive security assessment documenting credential leakage from Gitea, CVE-2026-38526 exploitation in Krayin CRM, and privilege escalation via Gitea template sync directory traversal. Mapped to MITRE ATT&CK and NSA D3FEND frameworks with actionable remediation roadmap and full evidence appendix.

CVE-2026-38526CRITICAL06 Jul 2026

An authenticated arbitrary file upload vulnerability in the /admin/tinymce/upload endpoint of Webkul Krayin CRM v2.2.x a

48RISK

GitHub PoC

Reproducer for CVE-2026-27172: Apache Camel camel-consul ConsulRegistry Java deserialization (RCE)

CVE-2026-27172HIGH06 Jul 2026

Apache Camel: Unsafe Java deserialization in camel-consul ConsulRegistry allows arbitrary code execution via malicious values read from the Consul KV store

41RISK

GitHub PoC

Reproducer for CVE-2026-33453: Apache Camel camel-coap header injection to RCE via camel-exec

CVE-2026-33453CRITICAL06 Jul 2026

Apache Camel: CoAP URI Query Parameter to Exchange Header Injection in camel-coap Allows Single-Packet Pre-Auth Remote Code Execution

63RISK

GitHub PoC★ 3

Early Attestation Considered Very Harmful (CVE-2026-92701, CVE-2026-92702, CVE-2026-33697, and more to come)

CVE-2026-92701CRITICAL06 Jul 2026

Cocos AI: Intra-handshake attested TLS implementation is vulnerable to session-misbinding attacks for Intel TDX verifier path

28RISK

GitHub PoC★ 1

Reproducer for CVE-2026-33454: Apache Camel camel-mail header injection to RCE via camel-exec

CVE-2026-33454CRITICAL06 Jul 2026

Apache Camel: Inbound Header Filter Missing in MailHeaderFilterStrategy Allows Remote Code Execution via MIME Header Injection (CVE-2025-30177 Variant)

48RISK

GitHub PoC★ 1

In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote code execution

CVE-2024-39024HIGH06 Jul 2026

In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote code execution.

41RISK

GitHub PoC

tammin86/4thProject_Team1-CVE-2025-55182-

CVE-2025-55182CRITICALunder attackransomware06 Jul 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISK

GitHub PoC★ 1

Exploitability PoC for CVE-2026-49352 (9router Hardcoded JWT Secret Authentication Bypass)

CVE-2026-49352CRITICAL06 Jul 2026

9Router: Hardcoded Default fallback JWT Secret Allows Authentication Bypass

48RISK

GitHub PoC

Exploit for Authenticated Remote Code Execution (RCE) in Krayin CRM v2.2.x (CVE-2026-38526)

CVE-2026-38526CRITICAL06 Jul 2026

An authenticated arbitrary file upload vulnerability in the /admin/tinymce/upload endpoint of Webkul Krayin CRM v2.2.x a

48RISK

GitHub PoC

This repository contains a professional bug bounty report demonstrating the successful exploitation of a Blind SSRF vulnerability that reached an internal CGI endpoint vulnerable to Shellshock (CVE-2014-6271). Remote command execution was confirmed using an out-of-band (OAST) DNS callback, showcasing the complete attack chain, technical analysis.

CVE-2014-6271CRITICALunder attack05 Jul 2026

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISK

GitHub PoC

Eliot-code/CVE-2026-22874-PoC

CVE-2026-22874CRITICAL05 Jul 2026

Gitea webhook and migration allow-list filtering permits SSRF

48RISK

GitHub PoC★ 1

Offline jQuery CVE-2020-11023 remediation kit for legacy Spring/JSP - Node.js built-ins only (no npm, no internet)

CVE-2020-11023MEDIUMunder attack05 Jul 2026

Potential XSS vulnerability in jQuery

85RISK

GitHub PoC★ 1

CVE-2018-10933 - libssh Authentication Bypass

CVE-2018-10933CRITICAL05 Jul 2026

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul

85RISK

GitHub PoC

MESLIMOHAMEDM22005188/path-traversal-CVE-2026-14628

CVE-2026-14628MEDIUM05 Jul 2026

NousResearch hermes-agent Live Webhook Endpoint base.py extract_media path traversal

33RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.