Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
84,150cataloged exploits
39,601CVEs with public exploitation
24,695lab-tested
AllReferência 25,629Exploit-DB 24,485GitHub PoC 16,343VulnCheck XDB 9,680Nuclei 4,488Metasploit 3,525✓ verified onlyrecentpopularrisk
16,343 exploits
GitHub PoC★ 1
Meniben/redmi14c-pond-cve-2026-64560
posix-cpu-timers: Prevent UAF caused by non-leader exec() race
41RISK
open ↗GitHub PoC★ 1
Unauthenticated RCE in Yamcs mission control via YAML injection in reconfigureInstance()
Yamcs: Remote Code Execution via instance-template argument YAML injection (createInstance)
48RISK
open ↗GitHub PoC
CVE-2026-15989 Super Forms <= 6.3.316 unauthenticated privilege escalation (mass scanner + exploit)
Super Forms <= 6.3.316 - Unauthenticated Privilege Escalation via 'role' Parameter
48RISK
open ↗GitHub PoC
CVE-2026-102282: adm-zip LPE via SUID/SGID preservation during archive extraction (fixed in 0.6.1)
adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation
41RISK
open ↗GitHub PoC
Defensive analysis, patch breakdown, and passive detection scanner for CVE-2026-103752 (WordPress Authorizer Plugin <= 3.15.3).
WordPress Authorizer plugin <= 3.15.3 - Privilege Escalation vulnerability
48RISK
open ↗GitHub PoC
A complete guide and workflow for integrating Agile sprints with DevOps CI/CD pipelines.
Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path
48RISK
open ↗GitHub PoC★ 1
I like CVEs!
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP c
100RISK
open ↗GitHub PoC★ 1
CVE-2026-90907 (CVSS 6.9) — Joomla! CMS unauthorized user account creation via com_users profile.save (authorization bypass). Non-destructive checker + authorized-use exploit PoC. Fixed in 5.4.9 / 6.1.4.
Joomla! Core - [20260902] - Core - Unauthorized user account creation via profile.save controller in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3
33RISK
open ↗GitHub PoC
Sanitized report and local PoC for CVE-2026-103585
attacker-controlled javascript license URL via XSS
28RISK
open ↗GitHub PoC★ 11
VC-Strike — VMware vCenter CVE-2026-59310 (unauth root RCE) & CVE-2026-59309 (SRP auth bypass) authorized pentest suite. GUI+CLI, multi-session C2, stdlib-only. 授权测试专用
vCenter directory-traversal vulnerability
78RISK
open ↗GitHub PoC
Sanitized report and local PoC for CVE-2026-103584
attacker-controlled javascript license URL via XSS
28RISK
open ↗GitHub PoC
34zY/CVE-2026-86950
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 2
71RISK
open ↗GitHub PoC
canhieu/cve-2026-100671-poc
Grav before 2.0.25 Session Cookie Theft via Twig Sandbox
41RISK
open ↗GitHub PoC
Session-scoped TOTP rate limiting permits repeated verification attempts
FileRise: Session-scoped TOTP rate limiting permits repeated verification attempts
41RISK
open ↗GitHub PoC
a practical NetScaler CTX697096 security-assessment workflow covering exposure validation, upgrade readiness and compromise-indicator hunting for CVE-2026-88771 through CVE-2026-88778.
A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands
78RISK
open ↗GitHub PoC
critical-severity unauthenticated Remote Code Execution (RCE) vulnerability impacting Orkes Conductor
Orkes Conductor 3.21.21 < 3.30.2 Unauthenticated RCE via GraalVM Script Evaluators
68RISK
open ↗GitHub PoC
Reproducer for CVE-2026-88789 (Apache Camel Quarkus camel-quarkus-support-xalan drops the JAXP external access restrictions, XXE / SSRF) — Camel Quarkus
Apache Camel Quarkus: Camel Quarkus: Forced Xalan TransformerFactory drops upstream external-DTD/stylesheet hardening
41RISK
open ↗GitHub PoC★ 1
REDCap DataImport RCE
An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import proce
48RISK
open ↗GitHub PoC
Safely detect Check Point CPM RCE CVE-2026-93616
Directory Traversal and File upload allows execution of arbitrary script on the Management Server
100RISK
open ↗GitHub PoC
Unauthenticated disclosure of internal folder path, client email, and upload policy for FileRise Pro client portals via /api/pro/portals/get.php
FileRise: Unauthenticated disclosure of internal folder path, client email, and upload policy for FileRise Pro client portals via /api/pro/portals/get.php
33RISK
open ↗GitHub PoC
ShadowForge-Cyber/CVE-2026-104286-POC
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.
78RISK
open ↗GitHub PoC
NetScaler CTX697096 Threat Hunt Helper (IoC scanner) - CVE-2026-88771, CVE-2026-88772, CVE-2026-88779
A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands
78RISK
open ↗GitHub PoC
PitScaler: independent, source-linked briefing on Citrix NetScaler CVE-2026-88771 and CVE-2026-88772 (CTX697096). https://pitscaler.com
A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands
78RISK
open ↗GitHub PoC★ 9
Runtime exploit monitor for Apple document/image pipelines (iOS/macOS) — EXPMON concept: Frida agent + behavioral rules. First target: the CVE-2026-86950 glyph chain.
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 2
71RISK
open ↗GitHub PoC
CVE-2026-102425 - GUI CONSOLE
Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4
48RISK
open ↗GitHub PoC
Hassham1/CVE-2026-62059-ultimate-member-sqli-poc
WordPress Ultimate Member plugin <= 2.13.1 - SQL Injection vulnerability
41RISK
open ↗GitHub PoC
CVE-2026-62146 CRI-O ShmPath poisoning PoC and exploit
Cri-o: cri-o: sandbox state poisoning via pod annotations may expose runtime socket
41RISK
open ↗GitHub PoC
CVE-2026-96349 — WordPress SiteSkite plugin ≤2.1.8 unauthenticated RCE (CVSS 10.0, CWE-94). PoCbit mass-exploit PoC: legacy API-key autologin (?token=) + REST MCP siteskite_execute_php eval chain; fixed in 2.2.0. Check/exploit/mass bulk, hits.txt & exploited.txt, --lab self-test. Catalog: https://pocbit.org/pocs/cve-2026-96349
WordPress SiteSkite plugin <= 2.1.8 - Remote Code Execution (RCE) vulnerability
48RISK
open ↗GitHub PoC
CVE-2026-92966 — WordPress LatePoint ≤5.7.0 unauthenticated stored shortcode execution (CVSS 9.1, CWE-94). PoCbit mass-exploit PoC: plant [caption]/custom shortcode in booking first name → Customer Cabinet block double do_shortcode; fixed in 5.7.1. No API key. check/exploit/mass, hits.txt & exploited.txt, https://pocbit.org/pocs/cve-2026-92966
Appointment Booking Plugin <= 5.7.0 - Unauthenticated Arbitrary Shortcode Execution via First/Last Name Field
48RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.