Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,388cataloged exploits

40,212CVEs with public exploitation

24,696lab-tested

All Referência 26,070Exploit-DB 24,488GitHub PoC 17,762VulnCheck XDB 9,990Nuclei 4,547Metasploit 3,531✓ verified onlyrecent popular risk

17,762 exploits

GitHub PoC★ 6

Research on `pidfd_getfd(2)`-based file descriptor leakage from privileged SUID processes. Demonstrates race-condition FD capture against OpenSSH `ssh-keysign` and exposure of sensitive root-owned file handles.

CVE-2026-46333HIGH17 May 2026

ptrace: slightly saner 'get_dumpable()' logic

56RISK

GitHub PoC★ 1

usmansec/-CVE-2021-4034

CVE-2021-4034HIGHunder attackransomware17 May 2026

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISK

GitHub PoC★ 4

PoC for CVE-2023-2825: automated GitLab 16.0.0 arbitrary file read via nested public groups, project upload traversal, reusable upload paths, and clean CLI output.

CVE-2023-2825CRITICAL17 May 2026

An issue has been discovered in GitLab CE/EE affecting only version 16.0.0. An unauthenticated malicious user can use a

85RISK

GitHub PoC

CVE-2026-8181 | Burst Statistics 3.4.0 - 3.4.1.1 - Authentication Bypass to Admin Account Takeover

CVE-2026-8181CRITICAL17 May 2026

Burst Statistics 3.4.0 - 3.4.1.1 - Authentication Bypass to Admin Account Takeover

68RISK

GitHub PoC

rootdirective-sec/CVE-2026-8181-Lab

CVE-2026-8181CRITICAL17 May 2026

Burst Statistics 3.4.0 - 3.4.1.1 - Authentication Bypass to Admin Account Takeover

68RISK

GitHub PoC

DFIR investigation + 7 Suricata rules on a simulated NexaCorp intrusion (vsftpd 2.3.4 CVE-2011-2523 + MITRE Caldera C2). 4-day solo engagement (BeCode Brussels Mission 01). 54-page report, 10 findings, 7/7 rules validated by PCAP replay.

CVE-2011-2523—17 May 2026

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

60RISK

GitHub PoC

MuharremK0/Info-Sys-Security-CVE-2025-55182

CVE-2025-55182CRITICALunder attackransomware17 May 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISK

GitHub PoC

Linux kernel root exploit

CVE-2026-46300HIGHunder attack17 May 2026

net: skbuff: preserve shared-frag marker during coalescing

91RISK

GitHub PoC★ 1

Renison-Gohel/CVE-2026-42945-NGINX-Rift

CVE-2026-42945CRITICAL17 May 2026

NGINX ngx_http_rewrite_module vulnerability

60RISK

GitHub PoC★ 3

CVE-2026-31431 (Copy Fail) — Análisis y desarrollo en Ensamblador x86-64 | Analysis and development in x86-64 Assembly

CVE-2026-31431HIGHunder attack17 May 2026

crypto: algif_aead - Revert to operating out-of-place

100RISK

GitHub PoC★ 1

7alen7/CVE-2026-48813-POC

CVE-2026-48813HIGH17 May 2026

Flawfinder output manipulation via untrusted filenames and source text

41RISK

GitHub PoC★ 2

🛡️ Script to test for NGINX CVE-2026-42945

CVE-2026-42945CRITICAL17 May 2026

NGINX ngx_http_rewrite_module vulnerability

60RISK

GitHub PoC★ 1

Authenticated RCE PoC for Flowise version <= 3.0.5 via CustomMCP Node (CVE-2025-59528)

CVE-2025-59528CRITICAL17 May 2026

Flowise has Remote Code Execution vulnerability

85RISK

GitHub PoC★ 2

Shell script to detect TanStack npm supply chain attack indicators (CVE-2026-45321 / GHSA-g7cv-rxg3-hmpx)

CVE-2026-45321CRITICALunder attackransomware16 May 2026

Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys

78RISK

GitHub PoC

CVE-2026-6857

CVE-2026-6857HIGH16 May 2026

Camel-infinispan: camel-infinispan: remote code execution via unsafe deserialization

41RISK

GitHub PoC

Zero-dependency CLI scanner for npm/PyPI supply chain compromises. Detects compromised packages in lockfiles and system-level IOCs from attacks like Mini Shai-Hulud (CVE-2026-45321).

CVE-2026-45321CRITICALunder attackransomware16 May 2026

Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys

78RISK

GitHub PoC

Maxime288/CVE-2026-31431-Copy-Fail-R-pertoire-de-Pr-vention

CVE-2026-31431HIGHunder attack16 May 2026

crypto: algif_aead - Revert to operating out-of-place

100RISK

GitHub PoC

Safe Python scanner for CVE-2020-3452 (Cisco ASA/FTD WebVPN Directory Traversal)

CVE-2020-3452HIGHunder attack16 May 2026

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

100RISK

GitHub PoC

fellipefelix06/Zabbix-CVE-2024-42327

CVE-2024-42327CRITICAL16 May 2026

SQL injection in user.get API

70RISK

GitHub PoC★ 7

CVE-2026-38526 | Krayin CRM v2.2.x Authenticated RCE - Unrestricted PHP File Upload via TinyMCE

CVE-2026-38526CRITICAL16 May 2026

An authenticated arbitrary file upload vulnerability in the /admin/tinymce/upload endpoint of Webkul Krayin CRM v2.2.x a

48RISK

GitHub PoC★ 1

Technical PoC for CVE-2025-59528 (Flowise < 3.0.5), demonstrating authenticated RCE through customMCP mcpServerConfig injection, with clear bilingual documentation and reproducible steps for authorized security testing.

CVE-2025-59528CRITICAL16 May 2026

Flowise has Remote Code Execution vulnerability

85RISK

GitHub PoC

Read-only cPanel CVE-2026-41940 IOC detector for .sorry ransomware, Mr_Rot13 Filemanager backdoors, C2 callbacks, cron, SSH, and logs.

CVE-2026-41940CRITICALunder attackransomware16 May 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RISK

GitHub PoC★ 21

nginx CVE scanner + RCE exploit framework (CVE-2026-42945 + 16 others)

CVE-2026-42945CRITICAL16 May 2026

NGINX ngx_http_rewrite_module vulnerability

60RISK

GitHub PoC

Apache Axis1.4 远程命令执行漏洞利用工具 - CVE-2019-0227，支持随机化服务名和Webshell文件名

CVE-2019-0227—16 May 2026

A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2

45RISK

GitHub PoC

Estudio del bug CVE-2026-31431

CVE-2026-31431HIGHunder attack16 May 2026

crypto: algif_aead - Revert to operating out-of-place

100RISK

GitHub PoC★ 2

Automated Metasploit post-exploitation module for CVE-2026-31431 ("Copy Fail"). Weaponizes a deterministic logic flaw in the Linux kernel AF_ALG subsystem to achieve local privilege escalation (LPE) to root by safely corrupting a setuid binary directly in the shared Page Cache (RAM) without modifying files on disk

CVE-2026-31431HIGHunder attack16 May 2026

crypto: algif_aead - Revert to operating out-of-place

100RISK

GitHub PoC

Python toolkit to audit Apache HTTP Server against CVE-2026-23918 (HTTP/2 double-free RCE) and 4 related CVEs. Passive scanner with ALPN verification + read-only local auditor. No exploits.

CVE-2026-23918HIGH16 May 2026

Apache HTTP Server: http2: double free and possible RCE on early reset

53RISK

GitHub PoC

CVE-2026-43284 - Dirty Frag

CVE-2026-43284HIGH16 May 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

78RISK

GitHub PoC★ 13

Evince/xreader/Atril RCE exploit to CVE-2026-46529

CVE-2026-46529HIGH16 May 2026

PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

41RISK

GitHub PoC

CVE-2026-39987

CVE-2026-39987CRITICALunder attack16 May 2026

marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

100RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.