Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,186cataloged exploits

40,156CVEs with public exploitation

24,696lab-tested

All Referência 26,041Exploit-DB 24,488GitHub PoC 17,609VulnCheck XDB 9,976Nuclei 4,542Metasploit 3,530✓ verified onlyrecent popular risk

17,609 exploits

GitHub PoC

Dhananjayasj/CVE-2024-1698-NotificationX-WordPress-Plugin-SQL-Injection-to-Admin-Credential-Extraction

CVE-2024-1698CRITICAL04 Jun 2026

NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor <= 2.8.2 - Unauthenticated SQL Injection

85RISK

open ↗

GitHub PoC★ 1

Detect-only scanner for CVE-2026-42945 (NGINX Rift), a heap overflow in ngx_http_rewrite_module. Version detection + nginx.conf pattern analysis. Python 3 stdlib-only, no network calls.

CVE-2026-42945CRITICAL04 Jun 2026

NGINX ngx_http_rewrite_module vulnerability

60RISK

open ↗

GitHub PoC★ 1

horrister/log4shell-cve-2021-44228

CVE-2021-44228CRITICALunder attackransomware04 Jun 2026

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

open ↗

GitHub PoC★ 2

Proof of Concept (PoC) exploit for CVE-2026-6815: Authenticated Path Traversal & Arbitrary File Write in Casdoor (< 3.54.1) leading to RCE/DoS.

CVE-2026-6815MEDIUM04 Jun 2026

CVE-2026-6815

33RISK

open ↗

GitHub PoC

0-Click RCE Android Adb TLS Wireless Debugging

CVE-2026-0073HIGH04 Jun 2026

In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic err

41RISK

open ↗

GitHub PoC★ 13

Attack surface in the real-world environment of CVE-2026-41096

CVE-2026-41096CRITICAL04 Jun 2026

Windows DNS Client Remote Code Execution Vulnerability

48RISK

open ↗

GitHub PoC

rootdirective-sec/CVE-2026-34234-Lab

CVE-2026-34234CRITICAL04 Jun 2026

CtrlPanel: Unauthenticated RCE using installer script

63RISK

open ↗

GitHub PoC

PoC CVE-2026-8732 (WP Maps Pro <= 6.1.0)

CVE-2026-8732CRITICAL04 Jun 2026

WP Maps Pro <= 6.1.0 - Unauthenticated Privilege Escalation via Administrator Account Creation to wpgmp_temp_access_ajax AJAX Action

68RISK

open ↗

GitHub PoC

CVE-2026-5076 — ARMember Premium <= 7.3.1 Insecure Password Reset Mechanism → Full Admin Account Takeover | Proof of Concept

CVE-2026-5076CRITICAL04 Jun 2026

ARMember Premium <= 7.3.1 - Insecure Password Reset Mechanism to Unauthenticated Privilege Escalation

48RISK

open ↗

GitHub PoC

Piotnet Forms Pro <= 2.1.40 - Unauthenticated Arbitrary File Upload → RCE

CVE-2026-4883CRITICAL04 Jun 2026

Piotnet Forms <= 2.1.40 - Unauthenticated Arbitrary File Upload via Form File Upload

63RISK

open ↗

GitHub PoC

CVE-2026-23631-Draft

CVE-2026-23631MEDIUM04 Jun 2026

redis-server Lua use-after-free may allow remote code execution

33RISK

open ↗

GitHub PoC

CVE-2026-50142 — Heap allocation vulnerability in libheif HEIF sequence parser

CVE-2026-50142HIGH04 Jun 2026

libheif: unbounded heap allocation in HEIF sequence parser (stsz fixed-size mode missing bound check)

41RISK

open ↗

GitHub PoC

CVE-2026-45247 - Draft

CVE-2026-45247CRITICALunder attack04 Jun 2026

Mirasvit Cache Warmer for Magento < 1.11.12 PHP Object Injection

83RISK

open ↗

GitHub PoC

Improved Metasploit module for CVE-2013-6117 (Dahua DVR authentication bypass)

CVE-2013-6117—04 Jun 2026

Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive informatio

60RISK

open ↗

GitHub PoC

HTB Facts is a Easy Linux box featuring Camaleon CMS and MinIO. Gain admin access via open registration and a mass assignment vulnerability, then extract MinIO credentials from admin settings. Use CVE-2024-46987 path traversal to steal an SSH private key, crack its passphrase, and escalate to root by abusing sudo permissions on facter via GTFOBins.

CVE-2024-46987HIGH04 Jun 2026

Arbitrary path traversal in Camaleon CMS

61RISK

open ↗

GitHub PoC

CVE-2026-35904 / CVE-2026-35905 / CVE-2026-35906 — Unauth RCE, Hardcoded Root Creds & Telnet Enable in T3 Technology CPE

CVE-2026-35904CRITICAL04 Jun 2026

Incorrect access control in the web management interface of T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, an

48RISK

open ↗

GitHub PoC

YellowKey | BitLocker Bypass Vulnerability (CVE-2026-45585)

CVE-2026-45585MEDIUM04 Jun 2026

Windows BitLocker Security Feature Bypass Vulnerability

33RISK

open ↗

GitHub PoC★ 29

HTTP/2 Bomb PoC — CVE-2026-49975 (HPACK indexed reference bomb + flow-control stall)

CVE-2026-49975HIGH04 Jun 2026

Apache HTTP Server: mod_http2 denial of service

53RISK

open ↗

GitHub PoC★ 1

Add go CVE-2026-43284 / CVE-2026-43500 (dirtyfrag) local privilege escalation exploit

CVE-2026-43284HIGH03 Jun 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

78RISK

open ↗

GitHub PoC

Detection script for CIFSwitch - CVE-2026-46243

CVE-2026-46243HIGH03 Jun 2026

smb: client: reject userspace cifs.spnego descriptions

41RISK

open ↗

GitHub PoC★ 1

CVE-2025-48595 - Draft

CVE-2025-48595HIGHunder attack03 Jun 2026

In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to

71RISK

open ↗

GitHub PoC★ 1

Saku0512/CVE-2026-54088-poc

CVE-2026-54088CRITICAL03 Jun 2026

File Browser: Command Injection via Authentication Hook Shell Substitution (Pre-Authentication RCE)

48RISK

open ↗

GitHub PoC★ 48

CVE-2026-50343 InstallService StaticPluginMap EoP - standard user to SYSTEM

CVE-2026-50343HIGH03 Jun 2026

Microsoft Install Service Elevation of Privilege Vulnerability

41RISK

open ↗

GitHub PoC★ 1

Rocket.Chat OAuth2 NoSQL Injection

CVE-2026-29198CRITICAL03 Jun 2026

In Rocket.Chat <8.3.0, <8.2.1, <8.1.2, <8.0.3, <7.13.5, <7.12.6, <7.11.6, and <7.10.9, a NoSQL injection vulnerability c

48RISK

open ↗

GitHub PoC

PoC of CVE-2026-49943

CVE-2026-49943MEDIUM03 Jun 2026

CZ.NIC BIRD Internet Routing Daemon through 2.19.0 contains a stack-based buffer overflow in the BGP AS_PATH mask matchi

33RISK

open ↗

GitHub PoC

lowilol/CVE-2026-42945-NGINX-Rift-Check-Script

CVE-2026-42945CRITICAL03 Jun 2026

NGINX ngx_http_rewrite_module vulnerability

60RISK

open ↗

GitHub PoC

DanieleGiovanardi2408/cve-2024-36401-geoserver-rce

CVE-2024-36401CRITICALunder attack03 Jun 2026

Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver

100RISK

open ↗

GitHub PoC★ 2

Shcesama/cve-2023-4863-analysis

CVE-2023-4863HIGHunder attack03 Jun 2026

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to

93RISK

open ↗

GitHub PoC★ 13

CVE-2026-41089 checker: unauthenticated, non-destructive detection for the Netlogon CLDAP stack buffer overflow (CVSS 9.8). Reports whether a domain controller's domain is long enough to crash, without sending the overflow. The binary-verified analysis the public PoCs got wrong.

CVE-2026-41089CRITICAL03 Jun 2026

Windows Netlogon Remote Code Execution Vulnerability

70RISK

open ↗

GitHub PoC★ 1

Real-World Simulation: FTP Service Exploitation (ProFTPD CVE-2015-3306)

CVE-2015-3306CRITICALunder attack03 Jun 2026

The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and

100RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.