Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,390cataloged exploits

40,212CVEs with public exploitation

24,696lab-tested

All Referência 26,070Exploit-DB 24,488GitHub PoC 17,762VulnCheck XDB 9,992Nuclei 4,547Metasploit 3,531✓ verified onlyrecent popular risk

17,762 exploits

GitHub PoC

rootdirective-sec/CVE-2026-3844-Lab

CVE-2026-3844CRITICAL08 May 2026

Breeze Cache <= 2.4.4 - Unauthenticated Arbitrary File Upload via fetch_gravatar_from_remote

68RISK

open ↗

GitHub PoC

CVE-2025-58434 Proof of Concept

CVE-2025-58434CRITICAL08 May 2026

Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover

85RISK

open ↗

GitHub PoC

A fully refactored, Python 3 compatible exploit script for Tomcat Ghostcat (CVE-2020-1938 / CNVD-2020-10487) AJP Local File Inclusion

CVE-2020-1938CRITICALunder attack08 May 2026

When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc

100RISK

open ↗

GitHub PoC

Xmyronn/CVE-2026-10243-AUTH

CVE-2026-10243MEDIUM08 May 2026

code-projects Smart Parking System Admin Endpoint missing authentication

33RISK

open ↗

GitHub PoC★ 1

Full-chain exploit for CVE-2025-2783 (Ipcz Sandbox Escape & RCE).

CVE-2025-2783HIGHunder attack08 May 2026

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allow

71RISK

open ↗

GitHub PoC

AegisGraph: graph-based application-layer assessment evidence platform for Secure Messaging Applications (SMAs). DARPA ASEMA HR0011SB20254-12 Tier 3 research. ReproChain CVE-2023-4863 reachability + PolyDiff differential parser fuzzing + claim-state governance + reproducible benchmark surface.

CVE-2023-4863HIGHunder attack08 May 2026

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to

93RISK

open ↗

GitHub PoC

Detection rules for CVE-2026-23918 Apache http2 RCE - Credit: stringa.ai, isec.pl

CVE-2026-23918HIGH08 May 2026

Apache HTTP Server: http2: double free and possible RCE on early reset

53RISK

open ↗

GitHub PoC

Full exploit chain lab and Suricata IDS detection for CVE-2022-30190 (Follina) - MSDT RCE

CVE-2022-30190HIGHunder attackransomware08 May 2026

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISK

open ↗

GitHub PoC★ 1

kyukazamiqq/cve-2026-5718

CVE-2026-5718HIGH08 May 2026

Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.7 - Unauthenticated Arbitrary File Upload via Non-ASCII Filename Blacklist Bypass

56RISK

open ↗

GitHub PoC★ 18

A proof-of-concept demonstrating how a default, unprivileged Kubernetes Pod can achieve node-level code execution on Amazon EKS by exploiting the Dirty Frag (CVE-2026-43284) Linux kernel page-cache corruption vulnerability through shared container image layers.

CVE-2026-43284HIGH08 May 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

78RISK

open ↗

GitHub PoC★ 1

Remote Code Execution in Alexantr filemanager v1.0 via unrestricted file upload

CVE-2026-37637CRITICAL08 May 2026

An issue in Alexantr filemanager v.1.0 allows a remote attacker to execute arbitrary code via the filemanager.php compon

48RISK

open ↗

GitHub PoC★ 1

CVE-2026-31431 in C for aarch64 and amd64

CVE-2026-31431HIGHunder attack08 May 2026

crypto: algif_aead - Revert to operating out-of-place

100RISK

open ↗

GitHub PoC

Full black-box penetration test against SecOS:1 (VulnHub) — CSRF exploitation, privilege escalation via CVE-2015-1328 (OverlayFS), post-exploitation

CVE-2015-1328—08 May 2026

The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does no

50RISK

open ↗

GitHub PoC

Desc "Fix Redis CVE ultil 20260508-10h51 GMT+7"

CVE-2026-25589HIGH08 May 2026

RedisBloom RESTORE invalid memory access may allow remote code execution

21RISK

open ↗

GitHub PoC

ameerhamza-malik/CVE-2026-42796

CVE-2026-42796CRITICAL08 May 2026

Arelle < 2.39.10 Unauthenticated RCE via /rest/configure

43RISK

open ↗

GitHub PoC

CTT-Enhanced Apache mod_auth_digest Timing Attack — CVE-2026-33006 Remote Digest Authentication Bypass → 33-Layer Temporal Timing Attack Original vulnerability: Apache HTTP Server 2.4.66 (mod_auth_digest timing leak) CTVSS (Original): 4.8 (Medium) CTT-Enhanced CVSS: 7.5 (High) — Network, low complexity, temporal wedge evasion

CVE-2026-33006MEDIUM08 May 2026

Apache HTTP Server: mod_auth_digest timing attack

13RISK

open ↗

GitHub PoC

Exploiting Parsec for Windows to gain SYSTEM privileges

CVE-2026-54424HIGH08 May 2026

An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads to a potential Elevation of Pri

41RISK

open ↗

GitHub PoC★ 1

azqzazq1/CVE-2026-7867-disk2root

CVE-2026-7867HIGH08 May 2026

Udisks2: udisks2: local privilege escalation via as-user option spoofing

41RISK

open ↗

GitHub PoC

branixsolutions/Security-CVE-2026-41940-cPanel-WHM-WP2

CVE-2026-41940CRITICALunder attackransomware08 May 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RISK

open ↗

GitHub PoC

Paranoid disable Linux IPsec ESP support (esp4/esp6) and RxRPC support.

CVE-2026-43284HIGH08 May 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

78RISK

open ↗

GitHub PoC

rootdirective-sec/CVE-2026-34197-Lab

CVE-2026-34197HIGHunder attack08 May 2026

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans

100RISK

open ↗

GitHub PoC

PoC and advisory for CVE-2026-44648

CVE-2026-44648HIGH08 May 2026

SillyTavern: Existing sessions are not invalidated after password change, allowing session reuse and account takeover

41RISK

open ↗

GitHub PoC

EspoCRM 9.3.3 - Authenticated SSRF via Alternative IPv4 Notation

CVE-2026-33534MEDIUM08 May 2026

EspoCRM has authenticated SSRF via internal-host validation bypass using alternative IPv4 notation

48RISK

open ↗

GitHub PoC★ 3

Unauthenticated RCE in dedoc/scramble — PoC, Nmap NSE & Nuclei template.

CVE-2026-44262CRITICAL07 May 2026

Scramble: Remote code execution via evaluation of user-controlled input in validation rules

63RISK

open ↗

GitHub PoC★ 2

Advisory: CVE-2026-38360 path traversal (CWE-22) in dash-uploader (Python/PyPI)

CVE-2026-38360CRITICAL07 May 2026

Directory Traversal vulnerability in fohrloop dash-uploader v.0.1.0 through v.0.7.0a2 allows a remote attacker to execut

43RISK

open ↗

GitHub PoC

Advisory: CVE-2026-38361 multiple DoS vulnerabilities (CWE-400/CWE-670) in dash-uploader (Python/PyPI)

CVE-2026-38361HIGH07 May 2026

Multiple unauthenticated denial-of-service (DoS) issues in fohrloop dash-uploader v0.1.0 through v0.7.0a2. The chunked-u

36RISK

open ↗

GitHub PoC

adilkurtulmus/linux-copy-fail-CVE-2026-31431

CVE-2026-31431HIGHunder attack07 May 2026

crypto: algif_aead - Revert to operating out-of-place

100RISK

open ↗

GitHub PoC

CVE-2026-3844

CVE-2026-3844CRITICAL07 May 2026

Breeze Cache <= 2.4.4 - Unauthenticated Arbitrary File Upload via fetch_gravatar_from_remote

68RISK

open ↗

GitHub PoC★ 4

Automatic script written in python for CVE-2009-3999

CVE-2009-3999—07 May 2026

Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to ex

60RISK

open ↗

GitHub PoC

CVE-2026-44590 - Sherlock <= v0.16.0 - RCE via pull_request_target Injection → Supply Chain Compromise

CVE-2026-44590CRITICAL07 May 2026

Sherlock: Command Injection via pull_request_target in validate_modified_targets.yml

28RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.