Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,186cataloged exploits

40,156CVEs with public exploitation

24,696lab-tested

All Referência 26,041Exploit-DB 24,488GitHub PoC 17,609VulnCheck XDB 9,976Nuclei 4,542Metasploit 3,530✓ verified onlyrecent popular risk

17,609 exploits

GitHub PoC★ 3

CVE-2026-25089

CVE-2026-25089CRITICALunder attack12 Jun 2026

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet F

100RISK

open ↗

GitHub PoC★ 1

FOSSBilling CVE-2026-53647 & CVE-2026-53646 PoC — Unauthenticated API key disclosure & password reset token reuse

CVE-2026-53647MEDIUM12 Jun 2026

FOSSBilling vulnerable to unauthenticated API key configuration disclosure via guest Serviceapikey get_info endpoint

33RISK

open ↗

GitHub PoC

Cisco Unified Communications Manager (Unified CM) deployments affected by CVE-2026-20230.

CVE-2026-20230HIGHunder attack12 Jun 2026

Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability

93RISK

open ↗

GitHub PoC

cardosource/cve-2026-3180

CVE-2026-3180HIGH12 Jun 2026

Contest Gallery <= 28.1.4 - Unauthenticated SQL Injection

41RISK

open ↗

GitHub PoC★ 1

Safely detect whether a SolarWinds Serv-U host is vulnerable to CVE-2026-28318

CVE-2026-28318HIGHunder attack12 Jun 2026

SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability

83RISK

open ↗

GitHub PoC★ 1

Chains CVE-2025-57819 (stacked query SQL injection) and CVE-2025-61678 (authenticated file upload in FreePBX Endpoint Manager) to achieve Remote Code Execution (RCE). For educational use only.

CVE-2025-57819CRITICALunder attack12 Jun 2026

FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE

100RISK

open ↗

GitHub PoC

Advanced Custom Fields: Extended <= 0.9.2.5 - Unauthenticated Privilege Escalation via Validation Bypass to '_acf_post_id' Parameter

CVE-2026-8809CRITICAL12 Jun 2026

Advanced Custom Fields: Extended <= 0.9.2.5 - Unauthenticated Privilege Escalation via Validation Bypass to '_acf_post_id' Parameter

48RISK

open ↗

GitHub PoC★ 3

CVE-2026-48907

CVE-2026-48907CRITICALunder attack12 Jun 2026

Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5

100RISK

open ↗

GitHub PoC★ 2

CVE-2026-35273

CVE-2026-35273CRITICALunder attackransomware12 Jun 2026

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mana

100RISK

open ↗

GitHub PoC

rootdirective-sec/CVE-2026-46645-Analysis-Lab

CVE-2026-46645MEDIUM12 Jun 2026

SQLAdmin: Authorization Bypass on `ajax_lookup`

33RISK

open ↗

GitHub PoC★ 4

CVE-2026-35273

CVE-2026-35273CRITICALunder attackransomware12 Jun 2026

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mana

100RISK

open ↗

GitHub PoC★ 13

watchtowrlabs/watchTowr-vs-Splunk-CVE-2026-20253

CVE-2026-20253CRITICALunder attack12 Jun 2026

Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise

100RISK

open ↗

GitHub PoC

SangSenimanWartefak/CVE-2026-45034

CVE-2026-45034CRITICAL11 Jun 2026

PhpSpreadsheet: File::prohibitWrappers bypass

48RISK

open ↗

GitHub PoC

Cyber-DarkNay/CVE-2026-7458

CVE-2026-7458CRITICAL11 Jun 2026

User Verification by PickPlugins <= 2.0.46 - Unauthenticated Authentication Bypass via OTP Verification REST API Endpoint

48RISK

open ↗

GitHub PoC★ 1

PoC didático em Python 3 para a CVE-2019-9053, uma SQL Injection time-based blind no CMS Made Simple <= 2.2.9. Esta versão foi adaptada para uso em CTF/laboratório, com prefixos pré-configurados para reduzir o tempo de extração e mensagens explicativas em português.

CVE-2019-9053—11 Jun 2026

An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve

35RISK

open ↗

GitHub PoC

Escáner pasivo de seguridad para CVE-2025-55182 que identifica indicadores públicos asociados a Next.js y React Server Components. Realiza validaciones seguras, analiza cabeceras y rutas, y proporciona una evaluación de exposición basada en evidencias sin explotación.

CVE-2025-55182CRITICALunder attackransomware11 Jun 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISK

open ↗

GitHub PoC

From deobfuscating code.js to root, CVE-2023-0386

CVE-2023-0386HIGHunder attack11 Jun 2026

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities wa

86RISK

open ↗

GitHub PoC

CVE-2026-45447 - Draft

CVE-2026-45447HIGH11 Jun 2026

Heap Use-After-Free in the PKCS7_verify() Function

41RISK

open ↗

GitHub PoC

byte16384/CVE-2026-49492-PoC

CVE-2026-49492HIGH11 Jun 2026

Markdown Preview Enhanced OS Command Injection in External File and Link Opening

41RISK

open ↗

GitHub PoC

CVE-2026-23479 Redis Use-After-Free vulnerability detection tool

CVE-2026-23479HIGH11 Jun 2026

redis-server use-after-free in unblock client flow may allow remote code execution

41RISK

open ↗

GitHub PoC

CVE-2026-40791: Unauthenticated stored XSS in WP Time Slots Booking Form <= 1.2.46

CVE-2026-40791HIGH11 Jun 2026

WordPress WP Time Slots Booking Form plugin <= 1.2.46 - Cross Site Scripting (XSS) vulnerability

41RISK

open ↗

GitHub PoC

CVE-2026-10520 and CVE-2026-10523

CVE-2026-10520CRITICALunder attack11 Jun 2026

An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote

100RISK

open ↗

GitHub PoC★ 4

CVE-2026-10520

CVE-2026-10520CRITICALunder attack11 Jun 2026

An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote

100RISK

open ↗

GitHub PoC

Cyber-DarkNay/CVE-2025-6440

CVE-2025-6440CRITICAL11 Jun 2026

WooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File Upload

60RISK

open ↗

GitHub PoC

Cyber-DarkNay/CVE-2026-23550

CVE-2026-23550CRITICAL11 Jun 2026

WordPress Modular DS plugin <= 2.5.1 - Privilege Escalation vulnerability

68RISK

open ↗

GitHub PoC★ 16

PoC for CVE-2026-48907 - Joomla! JCE extension < 2.9.99.5 unauthenticated RCE

CVE-2026-48907CRITICALunder attack11 Jun 2026

Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5

100RISK

open ↗

GitHub PoC★ 4

CVE-2026-36213 | Local Privilege Escalation in MEmu Android Emulator 9.2.7.0 via Insecure Service Binary Permissions | Patched in 9.3.2

CVE-2026-36213HIGH11 Jun 2026

An issue in Microvirt MEmu Android Emulator 9.2.7.0 allows a local attacker to escalate privileges via the MemuService.e

41RISK

open ↗

GitHub PoC★ 1

CVE-2026-11645

CVE-2026-11645HIGHunder attack11 Jun 2026

Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitra

71RISK

open ↗

GitHub PoC

leehunkoo/cve-2013-4660_PoC

CVE-2013-4660—11 Jun 2026

The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, whic

43RISK

open ↗

GitHub PoC

This repository contains a lab validation report and detection artefacts for DirtyFrag CVE-2026-43284, a Linux local privilege escalation issue related to the XFRM/ESP page-cache write path. The focus is on auditd telemetry, event correlation, and SOC-oriented detection logic.

CVE-2026-43284HIGH11 Jun 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

78RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.