Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

78,794cataloged exploits

36,057CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,459Referência 22,721GitHub PoC 14,946VulnCheck XDB 8,829Nuclei 4,350Metasploit 3,489✓ verified onlyrecent popular risk

14,946 exploits

GitHub PoC★ 3

Template Nuclei para detecção não-intrusiva do XSS2Shell, um parser differential pré-autenticado no WordPress Core que permite injeção de elementos DOM na página de login, servindo de base para uma cadeia de XSS → RCE.

CVE-2026-64638HIGH07 Aug 2026

WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially crafted malici

68RISK

GitHub PoC★ 1

CVE-2026-11961 — UserRegistration: WordPress User Registration <= 5.2.2 Privilege Escalation. Misconfigured Membership Roles → Unauthenticated Admin Creation → Site Compromise. CVSS 8.1

CVE-2026-11961HIGH07 Aug 2026

User Registration & Membership < 5.2.3 - Unauthenticated Privilege Escalation via Unbound members_data Membership ID

41RISK

GitHub PoC★ 2

CVE-2026-64638

CVE-2026-64638HIGH07 Aug 2026

WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially crafted malici

68RISK

GitHub PoC

Hunt-Benito/go-without-bounds-cve-2026-67822-stack-overflow-in-tenda-w6-s-wifissidset

CVE-2026-67822CRITICAL07 Aug 2026

Tenda W6-S 1.0.0.4(510) contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The fu

48RISK

GitHub PoC★ 6

Wordpress Pre-auth XSS to RCE exploit PoC (xss2shell & CVE-2026-64638)

CVE-2026-64638HIGH07 Aug 2026

WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially crafted malici

68RISK

GitHub PoC

Shams-Ul-Mehmood/CVE-2018-7600-Drupalgeddon2-RCE

CVE-2018-7600CRITICALunder attackransomware06 Aug 2026

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISK

GitHub PoC

The Joomla extension PhocaCommander is vulnerable to Path Traversal in the file upload action - CVSS 6.1

CVE-2026-66492MEDIUM06 Aug 2026

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3

33RISK

GitHub PoC

The Joomla extension PhocaCommander is vulnerable to Path Traversal in the getSource function - CVSS 8.2

CVE-2026-66491HIGH06 Aug 2026

Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3

41RISK

GitHub PoC★ 1

Joomla RSFiles 未授权文件上传CVE-2026-57827检测&利用脚本

CVE-2026-57827CRITICAL06 Aug 2026

Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17.12

63RISK

GitHub PoC

扫出你实际装的 Apache Shiro 模块与版本,逐条判定官方 26 条 CVE 里哪些真的落在你身上。按「CVE × 模块」判定,零依赖单 jar。 CVE-2026-49268

CVE-2026-49268HIGH06 Aug 2026

Apache Shiro: LDAP DN Injection in DefaultLdapRealm

41RISK

GitHub PoC★ 1

Hunt-Benito/e-is-for-exploit-cve-2026-17543-php-pgsql-sql-injection-backslash-breakout

CVE-2026-17543HIGH06 Aug 2026

SQL injection in ext-pgsql via E'...' backslash breakout

41RISK

GitHub PoC

查出 Spring Boot 内嵌 Tomcat 的真实版本(pom 里没有),并对每条 2026 年 CVE 同时给出 ASF 官方评级与 GitHub 评级、触发条件、以及这条会不会进 Dependabot 告警 CVE-2026-41293

CVE-2026-41293CRITICAL06 Aug 2026

Apache Tomcat: HTTP/2 request headers not validated

48RISK

GitHub PoC★ 1

Security research: Trezor Safe calldata confirmation-binding bypass vulnerability analysis. Educational proof-of-concept for hardware wallet transaction display verification.

CVE-2026-65058MEDIUM06 Aug 2026

Trezor Safe improper security check in on-device display

13RISK

GitHub PoC

CVE-2022-31626, CVE-2024-2961, CVE-2019-6977, PHP security research

CVE-2019-6977—06 Aug 2026

gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch funct

35RISK

GitHub PoC

tfawnies/CVE-2026-64633

CVE-2026-64633CRITICAL06 Aug 2026

A vulnerability allowing remote unauthenticated code execution on the agent host.

48RISK

GitHub PoC

CVE-2026-67598 — Emlog Pro: disabled TLS certificate validation in AI assistant (MITM → API-key theft). CWE-295, CVSS 9.1. Reported by @IlhomjonR.

CVE-2026-67598CRITICAL06 Aug 2026

Emlog Pro 2.6.23 TLS Certificate Validation Disabled in ai.php

48RISK

GitHub PoC★ 2

CVE-2026-56164 is a critical missing-authentication vulnerability affecting on-premises Microsoft SharePoint Server. It allows unauthenticated, remote attackers to elevate privileges over a network.

CVE-2026-56164MEDIUMunder attack06 Aug 2026

Microsoft SharePoint Server Elevation of Privilege Vulnerability

68RISK

GitHub PoC

Read-only N-able N-central CVE-2026-18556/CVE-2026-18577 post-exploitation IoC hunter for Windows endpoints

CVE-2026-18556HIGHunder attack06 Aug 2026

Unauthenticated administrative account takeover

83RISK

GitHub PoC

Notepad++ CVE-2026-52886 — session.xml backupFilePath starts_with() path traversal (GHSA-rqfm-pw34-r7j6)

CVE-2026-52886MEDIUM06 Aug 2026

Notepad++: session.xml backupFilePath starts_with Bypass

33RISK

GitHub PoC★ 58

Microsoft SharePoint JWT Authentication Bypass (CVE-2026-55040)

CVE-2026-55040CRITICALunder attack06 Aug 2026

Microsoft SharePoint Server Security Feature Bypass Vulnerability

100RISK

GitHub PoC★ 1

CVE-2026-0163 Exploit

CVE-2026-0163CRITICAL06 Aug 2026

In multiple functions of vpu_ioctl.c, there is a possible use after free due to a use after free. This could lead to rem

48RISK

GitHub PoC

The Joomla extension PhocaCommander is vulnerable to Path Traversal in delete, copy, move actions - CVSS 6.4

CVE-2026-66493MEDIUM06 Aug 2026

Joomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.3

33RISK

GitHub PoC★ 4

Proof of concept for CVE-2026-18649, a remote denial of service vulnerability in GStreamer's H.264 RTP depayloader (rtph264depay).

CVE-2026-18649HIGH06 Aug 2026

Gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay rtp depayloaders

41RISK

GitHub PoC

hasan8babiker/CVE-2024-6387

CVE-2024-6387HIGH06 Aug 2026

Openssh: regresshion - race condition in ssh allows rce/dos

63RISK

GitHub PoC

0xdak/CVE-2026-69098_exploit

CVE-2026-69098CRITICAL06 Aug 2026

kotaemon 0.12.0 Unauthenticated Remote Code Execution via Insecure Deserialization

48RISK

GitHub PoC★ 5

👾 CVE-2026-58048 – cPanel Root SQL Execution Toolkit (CVSS 9.4) | Full Red/Blue Team Toolkit suite for unpatched cPanel & WHM 11.x. 2 tools: Safe Checker (audit/reporting), Weaponized (reverse shell, persistence, UDF RCE, deployment, file read/write, database operations, mass scan). w/Python. 🦾 Use Ethically, Stay Legal <3

CVE-2026-58048CRITICAL06 Aug 2026

Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context.

48RISK

GitHub PoC★ 1

woshidashabi1126/CVE-2026-70553-PoC

CVE-2026-70553CRITICAL06 Aug 2026

MaxSite CMS Unauthenticated RCE via Install Endpoint

48RISK

GitHub PoC★ 1

WordPress Core Pre-Auth RCE — Batch Route Confusion + SQL Injection

CVE-2026-63030CRITICALunder attack05 Aug 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RISK

GitHub PoC

minwunn/wp2shell-CVE-2026-63030

CVE-2026-63030CRITICALunder attack05 Aug 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RISK

GitHub PoC

qflksheep/CVE-2026-67689-FineAdmin.Mvc-vulnerability

CVE-2026-67689CRITICAL05 Aug 2026

SQL Injection vulnerability in FineAdmin V1.0 allows a remote attacker to execute arbitrary code via the `field` and `or

48RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.