Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

88,056cataloged exploits

40,804CVEs with public exploitation

24,696lab-tested

All Referência 26,494Exploit-DB 24,489GitHub PoC 18,351VulnCheck XDB 10,605Nuclei 4,578Metasploit 3,539✓ verified onlyrecent popular risk

88,056 exploits

GitHub PoC★ 170

Jailbreak supported Google Pixel phones with CVE-2026-43499

CVE-2026-43499HIGH02 Aug 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

open ↗

GitHub PoC

Mass vulnerability scanner for CVE-2026-49049 – Unauthenticated Remote Code Execution in Joomla Helix3 plugin. Multi‑threaded, detects both executed and raw PHP payloads.

CVE-2026-49049HIGH02 Aug 2026

Joomla Extension - joomshaper.com - Unauthenticated access to Helix3 template ajax handler

56RISK

open ↗

GitHub PoC

Log4Shell (CVE-2021-44228) research report — technical breakdown, root cause analysis, and end-to-end lab-reproduced exploit chain with evidence screenshots.

CVE-2021-44228CRITICALunder attackransomware02 Aug 2026

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

open ↗

GitHub PoC

CVE-2026-9806 is a Stored Cross-Site Scripting (Stored XSS) vulnerability affecting CTI Transmute versions prior to the patched release.

CVE-2026-9806MEDIUM02 Aug 2026

Stored Cross-Site Scripting (XSS) in CTI Transmute Notification Panel via Malicious Convert Names

33RISK

open ↗

VulnCheck XDB

initial-access

CVE-2026-39987CRITICALunder attack02 Aug 2026

marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

100RISK

open ↗

VulnCheck XDB

initial-access

CVE-2026-39987CRITICALunder attack02 Aug 2026

marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

100RISK

open ↗

VulnCheck XDB

initial-access

CVE-2026-39987CRITICALunder attack02 Aug 2026

marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

100RISK

open ↗

GitHub PoC

VMware vCenter Server CVE-2021-21972 (RCE) — vulnerability analysis, detection, and mitigation

CVE-2021-21972CRITICALunder attackransomware02 Aug 2026

The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor

100RISK

open ↗

VulnCheck XDB

local

CVE-2026-31431HIGHunder attack02 Aug 2026

crypto: algif_aead - Revert to operating out-of-place

100RISK

open ↗

GitHub PoC

CVE-2026-9809 is a Stored Cross-Site Scripting (Stored XSS) vulnerability affecting Mautic 7 (versions 7.0.0 through 7.1.1).

CVE-2026-9809HIGH02 Aug 2026

A stored Cross-Site Scripting (XSS) vulnerability exists in the Projects component of Mautic 7. When displaying project

41RISK

open ↗

VulnCheck XDB

initial-access

CVE-2021-44228CRITICALunder attackransomware02 Aug 2026

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

open ↗

GitHub PoC

Realtyna Organic IDX plugin + WPL Real Estate < 5.3.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution

CVE-2026-13714CRITICAL02 Aug 2026

Realtyna Organic IDX plugin + WPL Real Estate < 5.3.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution

48RISK

open ↗

GitHub PoC

CVE-2026-39987 poc

CVE-2026-39987CRITICALunder attack02 Aug 2026

marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

100RISK

open ↗

GitHub PoC

Simple POC for CVE-2026-39987

CVE-2026-39987CRITICALunder attack02 Aug 2026

marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

100RISK

open ↗

GitHub PoC

Python implementation/PoC for CVE-2024-40422. Exploits a critical directory traversal vulnerability in Devika v1's /api/get-browser-snapshot endpoint to read arbitrary system files.

CVE-2024-40422CRITICAL02 Aug 2026

The snapshot_path parameter in the /api/get-browser-snapshot endpoint in stitionai devika v1 is susceptible to a path tr

68RISK

open ↗

GitHub PoC

Marimo exploit prior to 0.23.0. Pre-Auth RCE vulnerability via websocket endpoint : /terminal/ws.

CVE-2026-39987CRITICALunder attack02 Aug 2026

marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

100RISK

open ↗

GitHub PoC★ 2

Kangaroo is a exploit built on CVE-2026-32746. i made this for security researchers, IT professionals, DevOps. so they can understand it better. DO NOT USE THIS FOR ILLEGAL USE, IF YOU DO... YOU MAY BE SUBJECT TO ARREST, AND FINES.

CVE-2026-32746CRITICAL02 Aug 2026

telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption

60RISK

open ↗

GitHub PoC★ 9

Unauthenticated File Upload → RCE PoC for CVE-2026-57827 (RSFiles! Joomla < 1.17.12). Authorized security research use only.

CVE-2026-57827CRITICAL02 Aug 2026

Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17.12

68RISK

open ↗

GitHub PoC★ 3

WordPress CVE-2026-63030 and CVE-2026-60137 security tool for detecting exposure to the WP2Shell pre-authentication RCE chain.

CVE-2026-63030CRITICALunder attack02 Aug 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

98RISK

open ↗

GitHub PoC★ 20

the CVE-2026-43499 by iqooneo11

CVE-2026-43499HIGH02 Aug 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

open ↗

GitHub PoC★ 3

CVE-2026-43499 for the Meta Quest

CVE-2026-43499HIGH02 Aug 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

open ↗

GitHub PoC★ 1

TryHackMe Dirty Frag (CVE-2026-43284) — Linux LPE writeup

CVE-2026-43284HIGH02 Aug 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

78RISK

open ↗

GitHub PoC★ 2

A flaw in Gitea Open Source Git Server’s approval‑gate logic allows a pull request that originates from a permanent fork to merge without satisfying the repository’s configured approval gates.

CVE-2026-58424HIGH02 Aug 2026

Permanent Fork PR Workflow Approval Gate Bypass

41RISK

open ↗

GitHub PoC

Dompdf: Denial of Service (DoS) via Resource Exhaustion using Oversized Image Bitmaps

CVE-2026-59941MEDIUM02 Aug 2026

Dompdf: Uncontrolled resource consumption based on declared BMP dimensions

33RISK

open ↗

GitHub PoC

CVE-2026-9811 is a Stored Cross-Site Scripting (Stored XSS) vulnerability affecting Mautic 7 (versions 7.0.0 through 7.1.1).

CVE-2026-9811MEDIUM02 Aug 2026

A stored Cross-Site Scripting (XSS) vulnerability exists in the project selector component of Mautic 7. When rendering s

33RISK

open ↗

GitHub PoC

MinhHK68/CVE-2026-13157

CVE-2026-13157HIGH01 Aug 2026

Theme Demo Import <= 1.1.3 - Admin+ Arbitrary File Upload

41RISK

open ↗

GitHub PoC

MinhHK68/CVE-2026-13158

CVE-2026-13158HIGH01 Aug 2026

Everest Toolkit <= 1.2.3 - Admin+ Arbitrary File Upload

41RISK

open ↗

GitHub PoC

YellowKey BitLocker CVE-2026-45585 - free open-source utility to extract, backup and view BitLocker recovery keys on Windows 10/11. BitLocker bypass vulnerability tool, remediation and mitigation. Tom's Hardware coverage. Check TPM status, protector types, encryption state. Download YellowKey free, portable, no install needed.

CVE-2026-45585MEDIUM01 Aug 2026

Windows BitLocker Security Feature Bypass Vulnerability

33RISK

open ↗

GitHub PoC★ 1

Advanced CVE-2023-44487 HTTP/2 Rapid Reset vulnerability exploitation framework. Features multi-connection concurrent attacks, adaptive rate control, stealth mode with randomized headers, real-time metrics, and risk assessment reporting. For authorized penetration testing only. By Sudeepa Wanigarathna

CVE-2023-44487HIGHunder attack01 Aug 2026

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many

93RISK

open ↗

GitHub PoC

CVE-2026-67595 — Embedded malicious JavaScript (spyware) in VaahCMS 2.0.0–2.3.4 official releases. CVSS 8.1. Advisory + detection.

CVE-2026-67595CRITICAL01 Aug 2026

VaahCMS 2.0.0 - 2.3.4 Malicious JavaScript Supply Chain via security-otp.blade.php

48RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.