Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

88,056cataloged exploits

40,804CVEs with public exploitation

24,696lab-tested

All Referência 26,494Exploit-DB 24,489GitHub PoC 18,351VulnCheck XDB 10,605Nuclei 4,578Metasploit 3,539✓ verified onlyrecent popular risk

88,056 exploits

GitHub PoC

This interactive suite targets CVE-2014-9222 (Misfortune Cookie) in legacy RomPager web servers, alongside modular testing for CVE-2017-17215 (Huawei HG532 RCE), CVE-2018-14847 (MikroTik WinBox credential leak), and the CVE-2021-27101 / CVE-2021-27102 exploit chain (Accellion FTA).

CVE-2017-17215—07 Sep 2026

Huawei HG532 with some customized versions has a remote code execution vulnerability. An authenticated attacker could se

45RISK

GitHub PoC

Log4Shell (CVE-2021-44228) exploitation from a Kali VM against a vulnerable containerized app, with Splunk-based detection engineering and validated remediation. Covers the full attack lifecycle: exploitation, JNDI and host-level auditd detection, and before/after remediation proof.

CVE-2021-44228CRITICALunder attackransomware07 Sep 2026

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

GitHub PoC

Linux Kernel Exploits -> CVE-2005-0736 + CVE-2005-1263

CVE-2005-0736—07 Sep 2026

Integer overflow in sys_epoll_wait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel

23RISK

GitHub PoC

Eliot-code/CVE-2026-85046

CVE-2026-85046HIGHunder attack07 Sep 2026

Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside

71RISK

GitHub PoC

This interactive suite targets CVE-2014-9222 (Misfortune Cookie) in legacy RomPager web servers, alongside modular testing for CVE-2017-17215 (Huawei HG532 RCE), CVE-2018-14847 (MikroTik WinBox credential leak), and the CVE-2021-27101 / CVE-2021-27102 exploit chain (Accellion FTA).

CVE-2018-14847CRITICALunder attack07 Sep 2026

MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated

100RISK

GitHub PoC

BlueGate Exploit validator - RD Gateway validator for CVE-2020-0609 and CVE-2020-0610 (BlueGate) using OpenSSL DTLS over UDP/3391.

CVE-2020-0609—07 Sep 2026

A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated atta

45RISK

GitHub PoC

Buffer overflow in FreeFloat FTP Server 1.0

CVE-2025-5548MEDIUM07 Sep 2026

FreeFloat FTP Server NOOP Command buffer overflow

38RISK

GitHub PoC

Advisory: Cute Editor 6.4 reflected XSS via 'Theme' parameter in colorpicker_more.aspx

CVE-2021-3030MEDIUM06 Sep 2026

Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting caused by improper validation of the Theme G

33RISK

GitHub PoC

A mock app for the GitLab CVE-2023-7028, which allow multile email adresses when ordering a password reset.

CVE-2023-7028CRITICALunder attack06 Sep 2026

Weak Password Recovery Mechanism for Forgotten Password in GitLab

100RISK

GitHub PoC★ 105

CVE-2026-67276 RouterOS SSH public-key authentication bypass lab PoC

CVE-2026-67276CRITICAL06 Sep 2026

SSH user impersonation possible in Mikrotik RouterOS

48RISK

GitHub PoC

CVE-2021-44228 Log4Shell reproduced end to end: exploitation through remediation

CVE-2021-44228CRITICALunder attackransomware06 Sep 2026

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

GitHub PoC

LangGrinch - CVE-2025-68664 demo

CVE-2025-68664CRITICAL06 Sep 2026

LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs

60RISK

GitHub PoC

katranSefa/CVE-2026-19949

CVE-2026-19949HIGH06 Sep 2026

All-in-One WP Migration and Backup <= 7.109 - Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code Execution

41RISK

VulnCheck XDB

initial-access

CVE-2026-67276CRITICAL06 Sep 2026

SSH user impersonation possible in Mikrotik RouterOS

48RISK

GitHub PoC

este laboratorio puede estar bien o mal preguntale a la IA estoy probando pero debe funcionar hahahah

CVE-2026-64849CRITICALunder attack06 Sep 2026

MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)

98RISK

GitHub PoC

0xCyp1337/CVE-2026-44402

CVE-2026-44402CRITICAL06 Sep 2026

Voltronic Power SNMP Web Pro 1.1 Unauthenticated RCE via upload.cgi

48RISK

VulnCheck XDB

initial-access

CVE-2026-6279CRITICAL06 Sep 2026

Avada (Fusion) Builder <= 3.15.2 - Unauthenticated Remote Code Execution via PHP Function Injection via 'render_logics' Shortcode Attribute via Widget AJAX Handler

63RISK

GitHub PoC★ 121

**CVE-2026-18963** — unauthenticated Keycloak account takeover via the reset-credentials flow.

CVE-2026-18963CRITICAL06 Sep 2026

Keycloak-services: keycloak-services: unauthenticated account takeover via reset-credentials flow bypass

63RISK

VulnCheck XDB

initial-access

CVE-2025-31324CRITICALunder attackransomware06 Sep 2026

Missing Authorization check in SAP NetWeaver (Visual Composer development server)

100RISK

VulnCheck XDB

initial-access

CVE-2026-67276CRITICAL06 Sep 2026

SSH user impersonation possible in Mikrotik RouterOS

48RISK

VulnCheck XDB

info-leak

CVE-2026-64849CRITICALunder attack06 Sep 2026

MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)

98RISK

VulnCheck XDB

initial-access

CVE-2026-18963CRITICAL06 Sep 2026

Keycloak-services: keycloak-services: unauthenticated account takeover via reset-credentials flow bypass

63RISK

VulnCheck XDB

initial-access

CVE-2021-44228CRITICALunder attackransomware06 Sep 2026

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

VulnCheck XDB

initial-access

CVE-2026-82222CRITICAL06 Sep 2026

WordPress GiveWP plugin <= 4.16.7.1 - Remote Code Execution (RCE) vulnerability

63RISK

GitHub PoC

0xCyp1337/CVE-2026-82222-MassExploit

CVE-2026-82222CRITICAL06 Sep 2026

WordPress GiveWP plugin <= 4.16.7.1 - Remote Code Execution (RCE) vulnerability

63RISK

VulnCheck XDB

info-leak

CVE-2025-24799HIGH06 Sep 2026

GLPI allows unauthenticated SQL injection through the inventory endpoint

78RISK

VulnCheck XDB

initial-access

CVE-2025-57819CRITICALunder attack06 Sep 2026

FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE

100RISK

GitHub PoC★ 1

CVE-2026-67276 - Draft or TODO

CVE-2026-67276CRITICAL06 Sep 2026

SSH user impersonation possible in Mikrotik RouterOS

48RISK

GitHub PoC

CVE-2025-57819 - FreePBX 16 Endpoint Manager unauthenticated SQL injection to RCE (PoC)

CVE-2025-57819CRITICALunder attack06 Sep 2026

FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE

100RISK

GitHub PoC★ 2

Keycloak Blind SSRF POC

CVE-2020-10770—05 Sep 2026

A flaw was found in Keycloak before 13.0.0, where it is possible to force the server to call out an unverified URL using

50RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.