Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
88,056cataloged exploits
40,804CVEs with public exploitation
24,696lab-tested
AllReferência 26,494Exploit-DB 24,489GitHub PoC 18,351VulnCheck XDB 10,605Nuclei 4,578Metasploit 3,539✓ verified onlyrecentpopularrisk
88,056 exploits
GitHub PoC
CVE-2026-59726 - Draft or Todo
Ruflo: Unauthenticated RCE in MCP bridge default docker-compose deployment
63RISK
open ↗GitHub PoC★ 2
Security Advisory: Unauthenticated Stored Cross-Site Scripting Leading To Administrator Account Takeover (openclaw-dashboard)
OpenClaw Dashboard v3.0.0 Stored XSS via Failed Login Username Field
48RISK
open ↗GitHub PoC★ 6
CVE-2026-60004
Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.
98RISK
open ↗GitHub PoC
nawalacheker1/CVE-2026-46331
net/sched: fix pedit partial COW leading to page cache corruption
41RISK
open ↗GitHub PoC★ 1
Gitea diffpatch RCE
Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.
98RISK
open ↗GitHub PoC★ 2
A critical vulnerability affecting Fastjson versions 1.2.68 – 1.2.83.
Remote Code Execution in fastjson 1.2.68–1.2.83
48RISK
open ↗GitHub PoC
the CVE-2018-4878 Adobe Flash DRM UAF exploit for educational vulnerability research
A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to
93RISK
open ↗GitHub PoC
webshellseo8/CVE-2026-57811-Proof-of-Concept
WordPress Realtyna Organic IDX plugin plugin <= 5.2.0 - Remote Code Execution (RCE) vulnerability
48RISK
open ↗GitHub PoC★ 2
CVE-2026-45746, CVE-2026-45750, CVE-2026-53547 — three critical vulnerabilities in Termix: cross-tenant session hijacking, OS command injection, and account takeover
Termix Vulnerable to Arbitrary Command Execution via Session Hijacking
48RISK
open ↗GitHub PoC
webshellseo8/CVE-2026-61511-POC
vBulletin < 6.2.2 Eval Injection RCE via vb5/template/runtime.php
63RISK
open ↗GitHub PoC
webshellseo8/CVE-2026-50522-Proof-of-Concept
Microsoft SharePoint Remote Code Execution Vulnerability
78RISK
open ↗VulnCheck XDB
info-leak
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
open ↗GitHub PoC
Public technical advisory and reproduction evidence for CVE-2026-52134 affecting GOOSE replay handling in libiec61850 v1.6.
An issue in the parseGoosePayload() function (/goose/goose_receiver.c) of libiec61850 v1.6 allows attackers to bypass au
48RISK
open ↗GitHub PoC★ 5
CVE-2026-60004
Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.
98RISK
open ↗GitHub PoC★ 5
CVE-2026-58025 — MediaWiki Deserialization RCE via Log Entry Import. LogEntryBase::extractParams() unserialize() user-controlled log_params. CVSS 9.8 | CWE-502 | MediaWiki < 1.43.9, < 1.44.6, < 1.45.4, < 1.46.0
Remote Code Execution via Unsafe Deserialization in LogItem Import
33RISK
open ↗GitHub PoC★ 9
CVE-2026-43813: CloudAttestation enforceEnvironment bypass
A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 26.6 and iPadOS 26.6, macO
41RISK
open ↗GitHub PoC
Tracking OVSwrap (CVE-2026-64531), the Open vSwitch datapath netlink overflow
net: openvswitch: reject oversized nested action attrs
41RISK
open ↗GitHub PoC★ 6
CVE-2026-61511 – vBulletin Pre-Auth RCE (CVSS 9.8). Vuln 5.x/6.x (unpatched). Multi-exploit via Endpoint Pool, AJAX, PHPFuck WAF bypass. Full toolkit: reverse shell, proxy, persistence, webshell, database operations, firewall control, log management, mass scanning. 2 versions: multi-exploit & safe-check. Python 3.8+ Use Ethically, Stay Legal.
vBulletin < 6.2.2 Eval Injection RCE via vb5/template/runtime.php
63RISK
open ↗GitHub PoC
manfredgabriel/cve-2021-41773-lab
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
open ↗GitHub PoC
CVE-2026-2586 — Eclipse GlassFish EL injection to RCE
An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console. A user
48RISK
open ↗GitHub PoC
Reproducible SOC lab for CVE-2024-4577 detection and response
Argument Injection in PHP-CGI
100RISK
open ↗Metasploit300
Ruby on Rails Active Storage Vips Arbitrary File Read and Remote Code Execution
Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing
75RISK
open ↗Metasploit300
Ruby on Rails Active Storage Vips Arbitrary File Read and Remote Code Execution
# Active Storage allowed transformation methods potentially unsafe
Active Storage attempts to prevent the use of pote
63RISK
open ↗GitHub PoC★ 1
CVE-2026-43499 exploit adapter for MT6985 MediaTek Dimensity 9300 (vivo PD2241)
rtmutex: Use waiter::task instead of current in remove_waiter()
41RISK
open ↗GitHub PoC★ 1
Gitea Docker Image Authentication Bypass
Gitea Docker image trusts spoofable reverse-proxy headers by default
63RISK
open ↗GitHub PoC★ 4
CVE-2026-49176 WalletService LPE — standalone PoC + Cobalt Strike BOF (SYSTEM command on interactive session)
Windows WalletService Elevation of Privilege Vulnerability
41RISK
open ↗GitHub PoC
Agent skill that audits a Rails codebase for CVE-2026-66066 (KindaRails2Shell) — Active Storage + libvips arbitrary file read / RCE, checking Rails and libvips versions and block-untrusted mitigations
Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing
75RISK
open ↗GitHub PoC★ 16
CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE. Split-controller upload bypass. CVSS 9.8 | CWE-434 | com_rsfiles < 1.17.12
Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17.12
68RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.