Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,186cataloged exploits

40,156CVEs with public exploitation

24,696lab-tested

All Referência 26,041Exploit-DB 24,488GitHub PoC 17,609VulnCheck XDB 9,976Nuclei 4,542Metasploit 3,530✓ verified onlyrecent popular risk

17,609 exploits

GitHub PoC

A script that gives you the credentials of a Pterodactyl panel vulnerable to CVE-2025-49132

CVE-2025-49132CRITICAL16 Jun 2026

Pterodactyl Panel Allows Unauthenticated Arbitrary Remote Code Execution

75RISK

open ↗

GitHub PoC

CVE-2026-50751 Mass Scanner

CVE-2026-50751CRITICALunder attackransomware16 Jun 2026

User Authentication Bypass in VPN Remote Access and Mobile Access

100RISK

open ↗

GitHub PoC★ 1

Mass Scanner For Drupal Exploit CVE-2026-9082

CVE-2026-9082CRITICALunder attack16 Jun 2026

Drupal core - Highly critical - SQL injection - SA-CORE-2026-004

100RISK

open ↗

GitHub PoC

0xdak/CVE-2026-44881_exploit

CVE-2026-44881HIGH16 Jun 2026

Portainer: Arbitrary File Read via Git Symlink Injection in Stack Auto-Update

41RISK

open ↗

GitHub PoC★ 1

CVE-2026-54420

CVE-2026-54420HIGHunder attack16 Jun 2026

LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provide

71RISK

open ↗

GitHub PoC

Penetration testing assessment of a vulnerable IIS 6.0 WebDAV server, demonstrating reconnaissance, enumeration, exploitation (CVE-2017-7269), and privilege escalation to SYSTEM, along with risk analysis and remediation strategies.

CVE-2017-7269CRITICALunder attack16 Jun 2026

Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in

100RISK

open ↗

GitHub PoC★ 62

CVE-2026-41940 exploitation proof-of-concept project

CVE-2026-41940CRITICALunder attackransomware16 Jun 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RISK

open ↗

GitHub PoC★ 8

This is a Linux Kernel Local Privilege Escalation PoC code for CVE-2026-52943 a use-after-free in skbuff.c, my first 0day found by me in linux kernel

CVE-2026-52943HIGH16 Jun 2026

net: skbuff: fix missing zerocopy reference in pskb_carve helpers

41RISK

open ↗

GitHub PoC★ 2

mahfuzreham/litespeed-cpanel-cve-2026-54420-fix

CVE-2026-54420HIGHunder attack16 Jun 2026

LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provide

71RISK

open ↗

GitHub PoC

eev4n/CVE-2026-53582

CVE-2026-53582HIGH16 Jun 2026

OPNsense: XPATH Injection can disclose any secret in config.xml

41RISK

open ↗

GitHub PoC

CVE-2026-20262 - Draft

CVE-2026-20262MEDIUMunder attack16 Jun 2026

Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability

68RISK

open ↗

GitHub PoC

KovachVL/CVE-2026-55168

CVE-2026-55168MEDIUM16 Jun 2026

Runtipi: Authenticated arbitrary file write via backup restore symlink planting

33RISK

open ↗

GitHub PoC

This is an exploit poc for CVE-2026-4480

CVE-2026-4480CRITICAL16 Jun 2026

Samba: samba: remote code execution in printing subsystem via unescaped job description

68RISK

open ↗

GitHub PoC

Saku0512/CVE-2026-54686-poc

CVE-2026-54686MEDIUM16 Jun 2026

Warp: DCS lifecycle hook spoofing can alter terminal session metadata

33RISK

open ↗

GitHub PoC

Arbitrary file write in /vfm-admin/index.php?section=translations&action=update in Veno File Manager Project 4.4.9 allows an authenticated user with the role of super administrator to overwrite any php file in the application via a specially crafted POST request to the affected endpoint.

CVE-2026-37068HIGH15 Jun 2026

Arbitrary file write in /vfm-admin/index.php?section=translations&action=update in Veno File Manager Project 4.4.9 allow

41RISK

open ↗

GitHub PoC

Research and analysis of the ServiceNow Virtual Agent vulnerability (CVE-2025-12420), including attack flow, MITRE ATT&CK mapping, detection strategies, and mitigation recommendations.

CVE-2025-12420CRITICAL15 Jun 2026

Unauthenticated Privilege Escalation in ServiceNow AI Platform

60RISK

open ↗

GitHub PoC

rootdirective-sec/CVE-2026-10795-Lab

CVE-2026-10795HIGH15 Jun 2026

UpdraftPlus: WP Backup & Migration Plugin <= 1.26.4 - Unauthenticated Authentication Bypass via UpdraftCentral udrpc

41RISK

open ↗

GitHub PoC

CVE-2026-54597 - Authenticated Time-Based Blind SQL Injection in ITFlow

CVE-2026-54597HIGH15 Jun 2026

ITFlow: Authenticated Time-Based Blind SQL Injection in ITFlow via expires Parameter

41RISK

open ↗

GitHub PoC

CVE-2026-54596 - Authenticated SQL Injection via recurring_invoice_frequency Parameter Enables Full Database Exfiltration

CVE-2026-54596HIGH15 Jun 2026

ITFlow: Authenticated SQL Injection via recurring_invoice_frequency Parameter Enables Full Database Exfiltration

41RISK

open ↗

GitHub PoC

TryHackMe SOC Level 1 — Follina CVE-2022-30190, Nim C2, Chisel, PrintSpoofer, backdoor accounts

CVE-2022-30190HIGHunder attackransomware15 Jun 2026

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISK

open ↗

GitHub PoC★ 2

DylanZahedi/CVE-2026-9277

CVE-2026-9277CRITICAL15 Jun 2026

shell-quote `quote()` does not validate object-token shapes, allowing command injection via line terminators in `.op`

48RISK

open ↗

GitHub PoC★ 1

This repository documents CVE-2026-48849, a Stored Cross-Site Scripting (XSS), HTML Injection, and CSS Injection vulnerability discovered in Roundcube Webmai

CVE-2026-48849MEDIUM15 Jun 2026

In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, an unsanitized subject field in the draft restored valu

33RISK

open ↗

GitHub PoC★ 3

PoC exploit for CVE-2026-53519.

CVE-2026-53519CRITICAL15 Jun 2026

Nezha Monitoring: Pre-auth path traversal via /dashboard.. prefix confusion leaks jwt_secret_key

63RISK

open ↗

GitHub PoC

ikarolaborda/CVE-2026-40176

CVE-2026-40176HIGH15 Jun 2026

Composer is vulnerable to Command Injection via Malicious Perforce Repository

41RISK

open ↗

GitHub PoC

CVE-2026-38812 RuoYi v4.8.2 SQL Injection

CVE-2026-38812CRITICAL15 Jun 2026

RuoYi v4.8.2 is vulnerable to SQL Injection via the /tool/gen/createTable endpoint. The issue affects the code generatio

48RISK

open ↗

GitHub PoC

Path traversal leading to Arbitrary File Read in /vfm-admin/index.php and /vfm-admin/ajax/streamvid.php in Veno File Manager Project 4.4.9 allows and authenticated attacker with super administrator role to disclose sensitive information via two specially crafted http requests (POST and GET) to the affected endpoints.

CVE-2026-37066MEDIUM15 Jun 2026

Path traversal leading to Arbitrary File Read in /vfm-admin/index.php and /vfm-admin/ajax/streamvid.php in Veno File Man

33RISK

open ↗

GitHub PoC

Absolute Path Disclosure in /vfm-admin/assets/zipstream/grandt/relativepath/RelativePath.Example1.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to know in which system directory the application code is running by sending a GET request to the endpoint.

CVE-2026-37069MEDIUM15 Jun 2026

Absolute Path Disclosure in /vfm-admin/assets/zipstream/grandt/relativepath/RelativePath.Example1.php in Veno File Manag

33RISK

open ↗

GitHub PoC

Incorrect access control in /vfm-admin/ajax/streamvid.php in Veno File Manager Project in 4.4.9 allows an authenticated attacker to read any uploaded files by other users as long as it knows the path and filename via a specially crafted GET request to the affected endpoint.

CVE-2026-37070MEDIUM15 Jun 2026

Incorrect access control in /vfm-admin/ajax/streamvid.php in Veno File Manager Project in 4.4.9 allows an authenticated

33RISK

open ↗

GitHub PoC★ 2

Post CVE-2024-7344 analysis of Howyar SysReturn NetCopy - reverse engineering notes, vulnerable binaries, vendor correspondence, and proof-of-concept tooling for CVE-2026-79298 (IA-32 Secure Boot bypass via the RxPE custom PE loader in BOOTia32.efi).

CVE-2026-79298HIGH15 Jun 2026

An issue in Howyar Technologies Inc SysReturn Versions prior to 11.3.034 and fixed in v.11.3.0.34 allows a local attcker

41RISK

open ↗

GitHub PoC

Veno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access Control in admin-head-updates.php

CVE-2026-37072CRITICAL15 Jun 2026

Veno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access Control in admin-head-update

48RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.