Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,388cataloged exploits

40,212CVEs with public exploitation

24,696lab-tested

All Referência 26,070Exploit-DB 24,488GitHub PoC 17,762VulnCheck XDB 9,990Nuclei 4,547Metasploit 3,531✓ verified onlyrecent popular risk

17,762 exploits

GitHub PoC

Black-box penetration test on Metasploitable 2 — Identified 3 critical vulnerabilities including CVE-2011-2523. Conducted in isolated VMware lab. Tools: Nmap, Metasploit, Netcat.

CVE-2011-2523—09 May 2026

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

60RISK

GitHub PoC

CVE-2020-1938 Exploit

CVE-2020-1938CRITICALunder attack09 May 2026

When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc

100RISK

GitHub PoC

Kernel patches for Dirty Frag vulnerability (CVE-2026-43284, CVE-2026-43500)

CVE-2026-43284HIGH09 May 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

78RISK

GitHub PoC★ 5

CVE-2020-14008 - ManageEngine Applications Manager RCE

CVE-2020-14008—09 May 2026

Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to upload a vulnerable jar in

35RISK

GitHub PoC

Hack The Box - Silentium machine writeup | CVE-2025-58434, CVE-2025-59528, CVE-2025-8110

CVE-2025-58434CRITICAL09 May 2026

Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover

85RISK

GitHub PoC

A bash script for mitigating linux dirtyfrag exploit CVE-2026-43500, and fragnesia

CVE-2026-43500HIGH09 May 2026

rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present

78RISK

GitHub PoC

Elegant C++ exploit for CVE-2026-31431 (Copy Fail) using AF_ALG authenticated encryption + splice(2) to overwrite setuid binary memory

CVE-2026-31431HIGHunder attack09 May 2026

crypto: algif_aead - Revert to operating out-of-place

100RISK

GitHub PoC

This script will attempt to mitigate the copy_fail attack. CVE-2026-31431

CVE-2026-31431HIGHunder attack09 May 2026

crypto: algif_aead - Revert to operating out-of-place

100RISK

GitHub PoC★ 1

CVE-2026-0073 - ADB Wireless Mutual Authentication Bypass PoC

CVE-2026-0073HIGH09 May 2026

In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic err

41RISK

GitHub PoC

Helios973/CVE-2026-31431_exp.c

CVE-2026-31431HIGHunder attack09 May 2026

crypto: algif_aead - Revert to operating out-of-place

100RISK

GitHub PoC★ 3

Read-only checker for CVE-2026-31431 (algif_aead local root). Reports kernel/module state and suggests mitigations.

CVE-2026-31431HIGHunder attack09 May 2026

crypto: algif_aead - Revert to operating out-of-place

100RISK

GitHub PoC

kaleth4/CVE-2026-32746

CVE-2026-32746CRITICAL09 May 2026

telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption

60RISK

GitHub PoC

Hunt-Benito/copy-fail-cve-2026-31431-linux-kernel-page-cache-lpe

CVE-2026-31431HIGHunder attack09 May 2026

crypto: algif_aead - Revert to operating out-of-place

100RISK

GitHub PoC★ 2

CVE-2026-21510 LNK generator PoC

CVE-2026-21510HIGHunder attack09 May 2026

Windows Shell Security Feature Bypass Vulnerability

83RISK

GitHub PoC

branixsolutions/Security-CVE-2026-41940-cPanel-WHM-WP2

CVE-2026-41940CRITICALunder attackransomware08 May 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RISK

GitHub PoC

Desc "Fix Redis CVE ultil 20260508-10h51 GMT+7"

CVE-2026-25589HIGH08 May 2026

RedisBloom RESTORE invalid memory access may allow remote code execution

21RISK

GitHub PoC

rootdirective-sec/CVE-2026-34197-Lab

CVE-2026-34197HIGHunder attack08 May 2026

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans

100RISK

GitHub PoC★ 1

azqzazq1/CVE-2026-7867-disk2root

CVE-2026-7867HIGH08 May 2026

Udisks2: udisks2: local privilege escalation via as-user option spoofing

41RISK

GitHub PoC

Full black-box penetration test against SecOS:1 (VulnHub) — CSRF exploitation, privilege escalation via CVE-2015-1328 (OverlayFS), post-exploitation

CVE-2015-1328—08 May 2026

The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does no

50RISK

GitHub PoC

EspoCRM 9.3.3 - Authenticated SSRF via Alternative IPv4 Notation

CVE-2026-33534MEDIUM08 May 2026

EspoCRM has authenticated SSRF via internal-host validation bypass using alternative IPv4 notation

48RISK

GitHub PoC

Paranoid disable Linux IPsec ESP support (esp4/esp6) and RxRPC support.

CVE-2026-43284HIGH08 May 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

78RISK

GitHub PoC

Xmyronn/CVE-2026-10243-AUTH

CVE-2026-10243MEDIUM08 May 2026

code-projects Smart Parking System Admin Endpoint missing authentication

33RISK

GitHub PoC★ 1

CVE-2026-31431 in C for aarch64 and amd64

CVE-2026-31431HIGHunder attack08 May 2026

crypto: algif_aead - Revert to operating out-of-place

100RISK

GitHub PoC

A fully refactored, Python 3 compatible exploit script for Tomcat Ghostcat (CVE-2020-1938 / CNVD-2020-10487) AJP Local File Inclusion

CVE-2020-1938CRITICALunder attack08 May 2026

When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc

100RISK

GitHub PoC

AegisGraph: graph-based application-layer assessment evidence platform for Secure Messaging Applications (SMAs). DARPA ASEMA HR0011SB20254-12 Tier 3 research. ReproChain CVE-2023-4863 reachability + PolyDiff differential parser fuzzing + claim-state governance + reproducible benchmark surface.

CVE-2023-4863HIGHunder attack08 May 2026

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to

93RISK

GitHub PoC

Exploiting Parsec for Windows to gain SYSTEM privileges

CVE-2026-54424HIGH08 May 2026

An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads to a potential Elevation of Pri

41RISK

GitHub PoC

Bannt08/Research-CVE-2026-21858

CVE-2026-21858CRITICAL08 May 2026

n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling

85RISK

GitHub PoC

ameerhamza-malik/CVE-2026-42796

CVE-2026-42796CRITICAL08 May 2026

Arelle < 2.39.10 Unauthenticated RCE via /rest/configure

43RISK

GitHub PoC★ 23

Detector + PoC for Linux page-cache write vulnerabilities: Copy Fail (CVE-2026-31431) and Dirty Frag (CVE-2026-43284/43500). Authorized security research only.

CVE-2026-31431HIGHunder attack08 May 2026

crypto: algif_aead - Revert to operating out-of-place

100RISK

GitHub PoC★ 1

Full-chain exploit for CVE-2025-2783 (Ipcz Sandbox Escape & RCE).

CVE-2025-2783HIGHunder attack08 May 2026

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allow

71RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.