Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

80,324cataloged exploits
37,130CVEs with public exploitation
24,695lab-tested
80,324 exploits
GitHub PoC
Pentesting caja negra: Shellshock (CVE-2014-6271) + Log4Shell (CVE-2021-44228). Escalada a root. Informe ejecutivo y técnico
CVE-2021-44228CRITICALunder attackransomware05 May 2026
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
open
GitHub PoC
Passive HTTP metadata auditor for CVE-2026-23918 exposure triage
CVE-2026-23918HIGH05 May 2026
Apache HTTP Server: http2: double free and possible RCE on early reset
53RISK
open
GitHub PoC
Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.
CVE-2026-31431HIGHunder attack05 May 2026
crypto: algif_aead - Revert to operating out-of-place
100RISK
open
VulnCheck XDB
initial-access
CVE-2026-41940CRITICALunder attackransomware05 May 2026
WebPros cPanel and WHM Authentication Bypass via Login Flow
100RISK
open
GitHub PoC1
Утилита для Linux, которая проверяет доступность `AF_ALG`/`algif_aead` и помогает оценить риск по `CVE-2026-31431`.
CVE-2026-31431HIGHunder attack05 May 2026
crypto: algif_aead - Revert to operating out-of-place
100RISK
open
VulnCheck XDB
info-leak
CVE-2026-7482HIGH05 May 2026
Ollama heap out-of-bounds read in GGUF tensor parsing leaks server process memory to unauthenticated remote attackers
41RISK
open
VulnCheck XDB
local
CVE-2025-21333HIGHunder attack05 May 2026
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
71RISK
open
VulnCheck XDB
initial-access
CVE-2022-22963CRITICALunder attack05 May 2026
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po
100RISK
open
GitHub PoC
Upgrade to Apache 2.4.67 to fix CVE-2026-23918 vulneribility
CVE-2026-23918HIGH05 May 2026
Apache HTTP Server: http2: double free and possible RCE on early reset
53RISK
open
VulnCheck XDB
initial-access
CVE-2026-41940CRITICALunder attackransomware05 May 2026
WebPros cPanel and WHM Authentication Bypass via Login Flow
100RISK
open
GitHub PoC
One IPv6 ND option with length zero. One missing check. Daemon walks backward and lives in the loop. Reported to OpenBSD, fixed, CVE assigned.
CVE-2026-41285MEDIUM05 May 2026
In OpenBSD through 7.8, the slaacd and rad daemons have an infinite loop when they receive a crafted ICMPv6 Neighbor Dis
13RISK
open
GitHub PoC
Analysis of CVE-2026-24072
CVE-2026-24072HIGH05 May 2026
Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr
21RISK
open
GitHub PoC4
This repository contains a Proof of Concept (PoC) demonstrating the Double Free vulnerability (CVE-2026-23918) in Apache HTTP Server 2.4.66 `mod_http2`.
CVE-2026-23918HIGH05 May 2026
Apache HTTP Server: http2: double free and possible RCE on early reset
53RISK
open
VulnCheck XDB
initial-access
CVE-2026-41940CRITICALunder attackransomware04 May 2026
WebPros cPanel and WHM Authentication Bypass via Login Flow
100RISK
open
VulnCheck XDB
initial-access
CVE-2026-41940CRITICALunder attackransomware04 May 2026
WebPros cPanel and WHM Authentication Bypass via Login Flow
100RISK
open
VulnCheck XDB
initial-access
CVE-2026-41940CRITICALunder attackransomware04 May 2026
WebPros cPanel and WHM Authentication Bypass via Login Flow
100RISK
open
GitHub PoC
kaleth4/CVE-2025-69985
CVE-2025-69985CRITICAL04 May 2026
FUXA 1.2.8 and prior contains an Authentication Bypass vulnerability leading to Remote Code Execution (RCE). The vulnera
48RISK
open
GitHub PoC
Mrhudson69/cve-2026-31431
CVE-2026-31431HIGHunder attack04 May 2026
crypto: algif_aead - Revert to operating out-of-place
100RISK
open
VulnCheck XDB
initial-access
CVE-2026-42167HIGH04 May 2026
mod_sql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary code via a username, in scenarios where th
56RISK
open
GitHub PoC
LetsDefend SOC336 case study on CVE-2025-21298
CVE-2025-21298CRITICAL04 May 2026
Windows OLE Remote Code Execution Vulnerability
70RISK
open
VulnCheck XDB
initial-access
CVE-2026-39987CRITICALunder attack04 May 2026
marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass
100RISK
open
GitHub PoC
kaleth4/CVE-2026-21250
CVE-2026-21250HIGH04 May 2026
Windows HTTP.sys Elevation of Privilege Vulnerability
41RISK
open
GitHub PoC4
Read-only Bash checker for the Copy Fail Linux kernel vulnerability (CVE-2026-31431)
CVE-2026-31431HIGHunder attack04 May 2026
crypto: algif_aead - Revert to operating out-of-place
100RISK
open
GitHub PoC
Controlled virtual attack & defense lab — CVE-2011-2523 exploitation, Nmap recon, Nikto scanning, UFW hardening on Metasploitable 2
CVE-2011-252304 May 2026
vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.
60RISK
open
GitHub PoC
kaleth4/CVE-2026-42167
CVE-2026-42167HIGH04 May 2026
mod_sql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary code via a username, in scenarios where th
56RISK
open
GitHub PoC
kaleth4/CVE-2025-47987
CVE-2025-47987HIGH04 May 2026
Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability
41RISK
open
GitHub PoC
kaleth4/CVE-2025-40271
CVE-2025-40271HIGH04 May 2026
fs/proc: fix uaf in proc_readdir_de()
41RISK
open
GitHub PoC10
Safe detection tooling for CVE-2026-31431 "Copy Fail" and CVE-2026-43284 "Dirty Frag" — a local privilege escalation in the Linux kernel's algif_aead module affecting all major distributions since 2017.
CVE-2026-31431HIGHunder attack04 May 2026
crypto: algif_aead - Revert to operating out-of-place
100RISK
open
VulnCheck XDB
initial-access
CVE-2025-69985CRITICAL04 May 2026
FUXA 1.2.8 and prior contains an Authentication Bypass vulnerability leading to Remote Code Execution (RCE). The vulnera
48RISK
open
VulnCheck XDB
initial-access
CVE-2026-41940CRITICALunder attackransomware04 May 2026
WebPros cPanel and WHM Authentication Bypass via Login Flow
100RISK
open
previouspage 143 / 2,678next

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.