Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

88,056cataloged exploits

40,804CVEs with public exploitation

24,696lab-tested

All Referência 26,494Exploit-DB 24,489GitHub PoC 18,351VulnCheck XDB 10,605Nuclei 4,578Metasploit 3,539✓ verified onlyrecent popular risk

88,056 exploits

GitHub PoC

fancyzll/CVE-2026-43499_OPPO-MT6835

CVE-2026-43499HIGH17 Jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

open ↗

GitHub PoC

Python port of the CVE-2023-23752 exploit — Joomla! < 4.2.8 unauthenticated information disclosure (user list + DB credentials leak)

CVE-2023-23752MEDIUMunder attack17 Jul 2026

[20230201] - Core - Improper access check in webservice endpoints

100RISK

open ↗

GitHub PoC★ 10

HIKRAVEN - Advanced Hikvision Security Assessment Platform for professional penetration testing. Detects 12+ CVEs including CVE-2021-36260 (CRITICAL), tests default credentials, performs network discovery, and generates professional security reports. For authorized security testing only! 🛡️🔒

CVE-2021-36260CRITICALunder attack17 Jul 2026

A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation,

100RISK

open ↗

GitHub PoC

CVE-2026-38526 Exploit | by infrar3d

CVE-2026-38526CRITICAL17 Jul 2026

An authenticated arbitrary file upload vulnerability in the /admin/tinymce/upload endpoint of Webkul Krayin CRM v2.2.x a

48RISK

open ↗

GitHub PoC★ 865

KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499

CVE-2026-43499HIGH17 Jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

open ↗

GitHub PoC

CVE-2026-33017 Exploit | by infrar3d

CVE-2026-33017CRITICALunder attack17 Jul 2026

Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint

100RISK

open ↗

GitHub PoC★ 1

bekwiner/cve-2026-47777

CVE-2026-47777HIGH17 Jul 2026

Mastodon has a consent-check bypass in its remote Collections

41RISK

open ↗

VulnCheck XDB

initial-access

CVE-2021-36260CRITICALunder attack17 Jul 2026

A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation,

100RISK

open ↗

GitHub PoC

Reproducer for CVE-2026-48204: Apache Camel camel-mongodb-gridfs gridfs.* header injection overriding the GridFS operation (enumerate/read/delete files) from an unauthenticated HTTP request (fixed in 4.14.8/4.18.3/4.21.0)

CVE-2026-48204CRITICAL17 Jul 2026

Apache Camel: Camel-MongoDB-GridFS: The gridfs.* control headers used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to switch the GridFS operation - including destructive file deletion - in the default configuration

48RISK

open ↗

GitHub PoC★ 1

CVE-2026-55579 – Unauthenticated RCE in Pheditor via hardcoded default password "admin". Full Python exploit with file upload & terminal execution. No dependencies.

CVE-2026-55579CRITICAL17 Jul 2026

Pheditor: Hardcoded default password 'admin' with no forced change enables full application compromise

48RISK

open ↗

GitHub PoC★ 2

2932796375github/CVE-2026-43499_OPPO-MT6835

CVE-2026-43499HIGH17 Jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

open ↗

VulnCheck XDB

initial-access

CVE-2026-63030CRITICALunder attack17 Jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

98RISK

open ↗

GitHub PoC

Reproducer for CVE-2026-47323: Apache Camel CXF/Knative HeaderFilterStrategy missing inbound filtering, enabling Camel control-header injection (RCE via camel-exec) through CXF-RS/CXF-SOAP/Knative endpoints (fixed in 4.14.6/4.18.2/4.19.0)

CVE-2026-47323CRITICAL17 Jul 2026

Apache Camel: Camel-CXF Message Header Injection via Missing Inbound Filtering

53RISK

open ↗

VulnCheck XDB

remote-with-credentials

CVE-2025-8110HIGHunder attack17 Jul 2026

File overwrite in file update API in Gogs

100RISK

open ↗

GitHub PoC★ 1

WordPress KeepInMind CVE-2026-9271 Exploit - Tool detecting stored XSS in KeepInMind plugin v0.8.4.2 and below. Built by Sudeepa Wanigarathna, it simulates CSS injection to hijack admin accounts. Features safe testing, attack simulation, credential capture, bulk scanning, reporting. Essential for security researchers.

CVE-2026-9271MEDIUM17 Jul 2026

KeepInMind - Dashboard Notes < 0.8.4.2 - Contributor+ Stored XSS

33RISK

open ↗

GitHub PoC

TM4Web Vulnerability - CVE-2022-35499

CVE-2022-35499HIGH17 Jul 2026

In Trimble TM4WEB 21.4.0.4, the external bill viewer endpoint is vulnerable to reflected cross-site scripting via inject

41RISK

open ↗

VulnCheck XDB

info-leak

CVE-2023-23752MEDIUMunder attack17 Jul 2026

[20230201] - Core - Improper access check in webservice endpoints

100RISK

open ↗

GitHub PoC★ 6

sorrow404Null/CVE-2026-43499-RMX5200

CVE-2026-43499HIGH17 Jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

open ↗

VulnCheck XDB

initial-access

CVE-2026-63030CRITICALunder attack17 Jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

98RISK

open ↗

GitHub PoC★ 791

wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain

CVE-2026-63030CRITICALunder attack17 Jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

98RISK

open ↗

GitHub PoC

OPNsense Root RCE (CVE-2026-57155)

CVE-2026-57155CRITICAL16 Jul 2026

OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer

48RISK

open ↗

VulnCheck XDB

initial-access

CVE-2024-25600CRITICAL16 Jul 2026

WordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability

85RISK

open ↗

VulnCheck XDB

initial-access

CVE-2026-33017CRITICALunder attack16 Jul 2026

Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint

100RISK

open ↗

VulnCheck XDB

initial-access

CVE-2026-14894CRITICAL16 Jul 2026

Super Forms <= 6.3.313 - Unauthenticated Arbitrary File Upload via 'data' Parameter (datauristring / value)

63RISK

open ↗

GitHub PoC

Sana-404/CVE-2026-8838-Mitigation-and-Detection

CVE-2026-8838CRITICAL16 Jul 2026

Remote Code Execution via eval() Injection in amazon-redshift-python-driver

48RISK

open ↗

GitHub PoC

Sana-404/CVE-2026-8388-Mitigation-and-Detection

CVE-2026-8388MEDIUM16 Jul 2026

Incorrect boundary conditions in the JavaScript Engine: JIT component

33RISK

open ↗

VulnCheck XDB

local

CVE-2025-21333HIGHunder attack16 Jul 2026

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

76RISK

open ↗

VulnCheck XDB

initial-access

CVE-2025-55182CRITICALunder attackransomware16 Jul 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISK

open ↗

GitHub PoC★ 40

Standalone CVE-2026-43499 PoC for Galaxy S25 Ultra SM-S938N S938NKSUACZF1

CVE-2026-43499HIGH16 Jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

open ↗

GitHub PoC

CVE-2026-43499 exploit reproduction on jinghu (Xiaomi Pad 7 Ultra)

CVE-2026-43499HIGH16 Jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.