Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
88,056cataloged exploits
40,804CVEs with public exploitation
24,696lab-tested
AllReferência 26,494Exploit-DB 24,489GitHub PoC 18,351VulnCheck XDB 10,605Nuclei 4,578Metasploit 3,539✓ verified onlyrecentpopularrisk
88,056 exploits
GitHub PoC
Kentox493/CVE-2026-46300_Fragnesia
net: skbuff: preserve shared-frag marker during coalescing
91RISK
open ↗GitHub PoC★ 5
KSuRoot 2.2.0 — One-click KernelSU rooting based on CVE-2026-43499. Synced from Root-My-Galaxy v0.2.6 with custom payload (.so) import. Mod by hmascs
rtmutex: Use waiter::task instead of current in remove_waiter()
41RISK
open ↗GitHub PoC
Proof of Concept (PoC) for CVE-2026-64638, a reflected XSS in WordPress Core < 7.0.3.
Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory
33RISK
open ↗GitHub PoC★ 64
CVE-2026-8452 PreAuth RCE
Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service
71RISK
open ↗GitHub PoC
CVE-2026-54433 Roundcube plain-text email stored XSS PoC
In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, there is Stored Cross-Site Scripting (XSS) via a crafted plai
41RISK
open ↗GitHub PoC
Практические кейсы по информационной безопасности: развёртывание SIEM Wazuh и эксплуатация CVE-2021-41773
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
open ↗GitHub PoC
WordPress Core <= 7.0.3 - Authenticated (Author+) Remote Code Execution via Malicious File Upload
WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level
41RISK
open ↗GitHub PoC★ 3
Original research and PoC for an unauthenticated firmware update vulnerability with missing cryptographic firmware authentication in Netis NC63
Netis NC63 V3.0.0.3327 Unauthenticated Firmware Update with Missing Cryptographic Firmware Authentication
41RISK
open ↗GitHub PoC
The poc of CVE-2026-33017
Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint
100RISK
open ↗GitHub PoC★ 3
CVE-2026-43499 futex PI stack UAF ???????? - Android GKI 6.1~6.12 ??????? pselect() + futex PI ????????????,??? root ??? SELinux??? OPPO Find X8?OnePlus ??????
rtmutex: Use waiter::task instead of current in remove_waiter()
41RISK
open ↗GitHub PoC
josephfarah-ciso/CVE-2026-9999-exploit
Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to execu
41RISK
open ↗GitHub PoC
pimpamebanihah/cve-2026-43499-app.s0
rtmutex: Use waiter::task instead of current in remove_waiter()
41RISK
open ↗GitHub PoC
针对CVE-2026-41940漏洞的临时缓解措施
WebPros cPanel and WHM Authentication Bypass via Login Flow
100RISK
open ↗GitHub PoC★ 272
A cPanel and WHM authentication bypassing tool
WebPros cPanel and WHM Authentication Bypass via Login Flow
100RISK
open ↗GitHub PoC★ 26
CVE-2026-66804 Windows Cross Device virtual camera EoP - Standard user to SYSTEM
Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
41RISK
open ↗GitHub PoC
Hunt-Benito/the-sanitizer-is-the-weapon-cve-2026-68749-cve-2026-68750-quadratic-dos-in-elixir-html-sanitize-ex
Quadratic regex backtracking in the html_sanitize_ex CSS scrubber allows CPU-exhaustion denial of service
21RISK
open ↗GitHub PoC
nullwhisper/CVE-2026-14840
YOP Poll < 7.0.6 - Unauthenticated Vote Restriction Bypass via IP Header Spoofing
33RISK
open ↗GitHub PoC★ 1
Python client for the Thinkware U3000 dashcam's local WiFi control protocol, reverse-engineered from the official Android app. PoC tooling behind CVE-2026-101053, CVE-2026-101054, and CVE-2026-101055.
Thinkware U3000 TCP Service wpa_supplicant.conf PUT_FILE access control
33RISK
open ↗GitHub PoC
CVE-2026-68820 - Draft or TODO
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
71RISK
open ↗GitHub PoC
pimpamebanihah/cve-2026-43499-app.so
rtmutex: Use waiter::task instead of current in remove_waiter()
41RISK
open ↗GitHub PoC★ 1
CVE-2026-33017: Langflow Unauthenticated RCE PoC
Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint
100RISK
open ↗GitHub PoC
Docker-based lab for reproducing CVE-2021-41773 (Apache HTTP Server 2.4.49) through controlled path traversal and file disclosure using a custom Python PoC.
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
open ↗GitHub PoC
sonalisarkar-2003/FTP-vsFTPD-CVE-2011-2523-VAPT-Report
vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.
60RISK
open ↗GitHub PoC★ 1
GoDAM WordPress plugin <= 1.12.2 unauthenticated file upload RCE (CVE-2026-14282)
GoDAM <= 1.12.2 - Unauthenticated Arbitrary File Upload via WPForms File Upload Field
48RISK
open ↗VulnCheck XDB
initial-access
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
open ↗GitHub PoC★ 23
macOS < 26.6 local privilege escalation PoC
A race condition was addressed with improved locking. This issue is fixed in macOS Tahoe 26.6. A malicious app may be ab
41RISK
open ↗GitHub PoC★ 3
CVE-2026-56292 - AcyMailing for Joomla unauthenticated SQL injection scanner
Joomla Extension - acymailing.com - SQL Injection in AcyMailing extension < 10.11.1
63RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.