Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

88,056cataloged exploits

40,804CVEs with public exploitation

24,696lab-tested

All Referência 26,494Exploit-DB 24,489GitHub PoC 18,351VulnCheck XDB 10,605Nuclei 4,578Metasploit 3,539✓ verified onlyrecent popular risk

88,056 exploits

GitHub PoC

CVE-2026-63077 - Unauthenticated RCE exploit for JetBrains TeamCity via Agent Polling Deserialization. Supports mass scanning, multi-threading, and interactive shell. For authorized security testing only.

CVE-2026-63077CRITICALunder attackransomware04 Sep 2026

In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent pollin

100RISK

VulnCheck XDB

local

CVE-2026-31431HIGHunder attack04 Sep 2026

crypto: algif_aead - Revert to operating out-of-place

100RISK

VulnCheck XDB

initial-access

CVE-2026-63077CRITICALunder attackransomware04 Sep 2026

In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent pollin

100RISK

VulnCheck XDB

initial-access

CVE-2026-82329CRITICALunder attack04 Sep 2026

Potential authentication bypass leading to administrative access in Artifactory

98RISK

GitHub PoC★ 1

CVE-2026-112195 FusionPBX Dialplan Denylist Bypass Enabling Conditional OS Command Execution in FusionPBX 5.6.4-dev

CVE-2026-112195MEDIUM04 Sep 2026

FusionPBX Dialplan Editor dialplan.php os command injection

33RISK

GitHub PoC

CVE-2026-82329 Poc

CVE-2026-82329CRITICALunder attack04 Sep 2026

Potential authentication bypass leading to administrative access in Artifactory

98RISK

GitHub PoC

n0c71v3x/CVE-2026-78745

CVE-2026-78745CRITICAL04 Sep 2026

An issue in HiDPT/ Weyon HiDPTAndroid Hi3751V350 Hi3751V352E_DMO allows a remote attacker to execute arbitrary code via

48RISK

GitHub PoC

Heap out-of-bounds read in libtpms TPM 2.0 state deserialization — CVE-2026-85769

CVE-2026-85769MEDIUM04 Sep 2026

Libtpms: libtpms: heap out-of-bounds read in tpm2 state unmarshalling via unchecked block_skip_read() blocksize

33RISK

Exploit-DB

FreePBX 17.0.2 - Remote Code Execution (RCE)

CVE-2025-57819CRITICALunder attackwebappsmultiple03 Sep 2026

FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE

100RISK

GitHub PoC★ 1

CVE-2026-92162: Path traversal in the Flatpak system helper: an unvalidated arch parameter in DeployAppstream lets an active local user create root-owned directories anywhere. Write-up and test-mode PoC.

CVE-2026-92162HIGH03 Sep 2026

Flatpak vulnerable to path traversal via unvalidated "arch" parameter in DeployAppstream

41RISK

GitHub PoC★ 7

Windows HTTP.sys integer overflow -> nonpaged pool overflow LPE PoC (CVE-2026-62735): crash + full SYSTEM exploit; for authorized testing

CVE-2026-62735HIGH03 Sep 2026

Windows HTTP.sys Elevation of Privilege Vulnerability

41RISK

GitHub PoC★ 1

CVE-2026-65343 PoC — AppleKeyStore OOB read → KASLR defeat (iOS 26.6 / 23G71)

CVE-2026-65343HIGH03 Sep 2026

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.

41RISK

GitHub PoC

AJCloud AJY IPC Firmware Path Traversal via jdbhttpd

CVE-2026-56718HIGH03 Sep 2026

AJCloud AJY IPC Firmware Path Traversal via jdbhttpd

41RISK

GitHub PoC

PoC — symlink following to arbitrary file read/write outside project root in code-graph-rag (GHSA-85gg-2gfq-q95m, CVE-2026-87008, CVSS 7.1).

CVE-2026-87008HIGH03 Sep 2026

Code Graph RAG structural tools follow out-of-root symlinks

41RISK

GitHub PoC

SQL Injection via ORDER BY Shortcode in plg_content_dpcalendar — DPCalendar Free ≤ 10.11.2

CVE-2026-78070MEDIUM03 Sep 2026

Joomla Extension - digital-peak.com - Authenticated, privileged blind SQL injection in DP Calendar 5.5.0 - 10.11.2

33RISK

GitHub PoC

Research lab and exploit chain for CVE-2026-75604: path traversal in the Next.js incremental cache, to RCE on Windows.

CVE-2026-75604CRITICAL03 Sep 2026

Next.js: Unauthenticated Remote Code Execution on windows-hosted servers

63RISK

GitHub PoC★ 1

Struts2 S2-045/S2-046 CVE-2017-5638 detection & exploitation tool

CVE-2017-5638CRITICALunder attackransomware03 Sep 2026

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISK

GitHub PoC★ 14

CVE-2026-65643 – cPanel Domain Parking RCE Toolkit (CVSS 8.7) | Red/Blue Team suite for unpatched cPanel & WHM 11.x (110,134,136,138). 2 tools: Full Exploit (reverse shell, webshell, persistence, root passwd, file R/W, mass scan, Tor), Blue Team PoC (detection, reporting, audit). w/Python. Only Use Ethically, Stay Legal <3

CVE-2026-65643HIGH03 Sep 2026

Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root.

41RISK

VulnCheck XDB

initial-access

CVE-2017-5638CRITICALunder attackransomware03 Sep 2026

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISK

GitHub PoC

PoC for CVE-2026-4813

CVE-2026-4813CRITICAL03 Sep 2026

Code injection in the Lutece Core

48RISK

GitHub PoC

CVE-2026-19949 - Draft or TODO

CVE-2026-19949HIGH03 Sep 2026

All-in-One WP Migration and Backup <= 7.109 - Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code Execution

41RISK

GitHub PoC

CVE-2026-80428 PoC

CVE-2026-80428CRITICAL03 Sep 2026

ILIAS PHP Object Injection via Shibboleth Logout

48RISK

GitHub PoC

CVE‑2026‑82329 is a critical authentication bypass in JFrog Artifactory (CVSS 9.8) allowing unauthenticated attackers to obtain full administrative privileges. Actively exploited in the wild. Affects self‑hosted versions before patches. PoC for authorized testing only.

CVE-2026-82329CRITICALunder attack03 Sep 2026

Potential authentication bypass leading to administrative access in Artifactory

98RISK

GitHub PoC

Vulnerability Analysis of CVE-2026-83548 affecting SonicWall SMA1000 security systems.

CVE-2026-83548CRITICALunder attack03 Sep 2026

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended altern

93RISK

GitHub PoC

Stored XSS via Location Title in DPCalendar Free

CVE-2026-78071HIGH03 Sep 2026

Joomla Extension - digital-peak.com - Authenticated, privileged stored XSS in DP Calendar 7.0.0-8.19.5, 9.0.0-10.12.0

41RISK

GitHub PoC

Recovery notes for proxmox advisory ID: PSA-2026-00043-1 (CVE-2023-54391)

CVE-2023-54391CRITICAL03 Sep 2026

Proxmox VE 7.0-8.0 Authentication Bypass via tfa-challenge Parameter

63RISK

Exploit-DB

Metabase 0.61.0 - Authenticated Remote Code Execution

CVE-2026-59827CRITICALwebappsmultiple03 Sep 2026

Metabase: Unsafe Deserialization of H2 Query Results

48RISK

GitHub PoC

CVE-2026-52810 - Draft or TODO

CVE-2026-52810HIGH03 Sep 2026

Gogs: Write to readonly repositories using receive-pack + service=git-upload-pack confusion

41RISK

GitHub PoC

CVE-2026-59822 - Draft or TODO

CVE-2026-59822HIGHunder attack03 Sep 2026

LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback

71RISK

GitHub PoC★ 1

CVE-2026-64788 PoC — IOGPUFamily Use-After-Free (iOS 26.6 / 23G71)

CVE-2026-64788MEDIUM03 Sep 2026

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe

33RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.