Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,508cataloged exploits

40,258CVEs with public exploitation

24,696lab-tested

All Referência 26,095Exploit-DB 24,488GitHub PoC 17,831VulnCheck XDB 10,015Nuclei 4,547Metasploit 3,532✓ verified onlyrecent popular risk

17,831 exploits

GitHub PoC★ 4

CVE-2026-5027 - Langflow Path Traversal to Remote Code Execution (CVSS 8.8)

CVE-2026-5027HIGH02 Apr 2026

Langflow - Path Traversal Arbitrary File Write via upload_user_file

68RISK

open ↗

GitHub PoC

nicostan15/CVE-2022-46169

CVE-2022-46169CRITICALunder attack02 Apr 2026

Unauthenticated Command Injection

100RISK

open ↗

GitHub PoC

Deliberately vulnerable Next.js application demonstrating CVE-2025-29927 (middleware-based auth bypass) for learning and bug bounty practice.

CVE-2025-29927CRITICAL02 Apr 2026

Authorization Bypass in Next.js Middleware

85RISK

open ↗

GitHub PoC★ 36

Kernel Process Termination Tool ( CVE-2026-0828 exploit)

CVE-2026-0828HIGH02 Apr 2026

Kernel driver vulnerability in Safetica Endpoint Client

41RISK

open ↗

GitHub PoC

📂 Grafana LFI Exploit (CVE-2021-43798). Extracción automatizada de credenciales y configuración. 🕵️

CVE-2021-43798HIGHunder attack02 Apr 2026

Grafana path traversal

100RISK

open ↗

GitHub PoC

This repository contains a comprehensive security assessment of an enterprise LAN environment. The core focus of this project was the identification, exploitation, and remediation of the **Shellshock (CVE-2014-6271)** vulnerability within a Linux-based web server.

CVE-2014-6271CRITICALunder attack02 Apr 2026

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISK

open ↗

GitHub PoC★ 8

POC for CVE-2026-23416 (linux kernel 6.17 – linux kernel 7 rc5) - vulnerability discovered by Antonius

CVE-2026-23416—02 Apr 2026

mm/mseal: update VMA end correctly on merge

23RISK

open ↗

GitHub PoC

Full penetration test report against `IP` (Ubuntu VM). Attack chain: directory enumeration → backup file discovery → password cracking → CMS file upload → reverse shell → kernel privilege escalation (Dirty Pipe, CVE-2022-0847).

CVE-2022-0847HIGHunder attack02 Apr 2026

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISK

open ↗

GitHub PoC★ 11

Full-chain exploit for CVE-2025-2783 (Ipcz Sandbox Escape & RCE).

CVE-2025-2783HIGHunder attack01 Apr 2026

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allow

71RISK

open ↗

GitHub PoC

Full penetration testing workflow: credential brute force, SSH access and privilege escalation (CVE-2021-4034)

CVE-2021-4034HIGHunder attackransomware01 Apr 2026

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISK

open ↗

GitHub PoC

kavin71725/CVE-2025-12543-Fix-for-Wildfly

CVE-2025-12543CRITICAL01 Apr 2026

Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf

48RISK

open ↗

GitHub PoC

Analisis de CVE relacionada con stack overflow

CVE-2025-5548MEDIUM01 Apr 2026

FreeFloat FTP Server NOOP Command buffer overflow

38RISK

open ↗

GitHub PoC

FortiGate CVE-2022-40684 assessment tool for user enumeration, configuration dump, and lab testing.

CVE-2022-40684CRITICALunder attackransomware01 Apr 2026

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an

100RISK

open ↗

GitHub PoC

CVE-2021-21220 Exploitation infrastructure

CVE-2021-21220HIGHunder attack01 Apr 2026

Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to po

100RISK

open ↗

GitHub PoC★ 1

Technical analysis of a SharePoint ToolShell (CVE-2025-53770) exploitation attempt involving RCE, webshell deployment, and MachineKey extraction.

CVE-2025-53770CRITICALunder attackransomware01 Apr 2026

Microsoft SharePoint Server Remote Code Execution Vulnerability

100RISK

open ↗

GitHub PoC

Módulo de Metasploit para explotar CVE-2025-24054 (ex 24071). Exploit de filtración NTLM integrado en Metasploit para vectores de ataque basados en bibliotecas de Windows.

CVE-2025-24054MEDIUMunder attack01 Apr 2026

NTLM Hash Disclosure Spoofing Vulnerability

75RISK

open ↗

GitHub PoC★ 3

Detect, assess, and respond to supply chain attacks across npm/yarn and Python (pip/poetry/uv). Claude Code skill + standalone scripts. Built during axios RAT (2026-03-31) and Starlette BadHost CVE-2026-48710 (2026-05-22).

CVE-2026-48710MEDIUMunder attack01 Apr 2026

Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks

100RISK

open ↗

GitHub PoC

TLevente20/HTTP-2-RapidReset-CVE-2023-44487-Testlab

CVE-2023-44487HIGHunder attack01 Apr 2026

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many

93RISK

open ↗

GitHub PoC★ 1

CVE-2022-46364 Apache CXF XOP:Include SSRF / LFI

CVE-2022-46364CRITICAL31 Mar 2026

Apache CXF SSRF Vulnerability

48RISK

open ↗

GitHub PoC★ 7

Chatwoot SQL injection in FilterService

CVE-2026-44706HIGH31 Mar 2026

Chatwoot: SQL Injection in Conversation/Contact Filter API via Custom Attribute Values

41RISK

open ↗

GitHub PoC★ 11

Langflow RCE

CVE-2026-33017CRITICALunder attack31 Mar 2026

Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint

100RISK

open ↗

GitHub PoC

wtbacon/cve-2018-15473

CVE-2018-15473MEDIUM31 Mar 2026

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati

70RISK

open ↗

GitHub PoC

Hoverfly CVE RCE

CVE-2025-54123CRITICAL31 Mar 2026

Hoverfly vulnerable to remote code execution at `/api/v2/hoverfly/middleware` endpoint due to insecure middleware implementation

68RISK

open ↗

GitHub PoC★ 3

Automating the exploitation of CVE-2026-7299 - Stored XSS via Database Table/Column Names in SQL Autocomplete within Appsmith =>1.99. Initial discovery 30/03/26

CVE-2026-7299MEDIUM31 Mar 2026

CVE-2026-7299

33RISK

open ↗

GitHub PoC

This repository contains a proof-of-concept (PoC) exploit for CVE-2024-11680, a critical vulnerability in ProjectSend r1605 and earlier versions. The exploit is aimed at incorrect authentication due to problems with incorrect privilege settings and command injection.

CVE-2024-11680CRITICALunder attack31 Mar 2026

ProjectSend Unauthenticated Configuration Modification

100RISK

open ↗

GitHub PoC

kaleth4/CVE-2024-6387

CVE-2024-6387HIGH31 Mar 2026

Openssh: regresshion - race condition in ssh allows rce/dos

63RISK

open ↗

GitHub PoC

CVE-2022-22947 vulnerability task

CVE-2022-22947CRITICALunder attack30 Mar 2026

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RISK

open ↗

GitHub PoC★ 1

akelaqe/CVE-2024-27348-HugeGraph-RCE

CVE-2024-27348CRITICALunder attack30 Mar 2026

Apache HugeGraph-Server: Command execution in gremlin

100RISK

open ↗

GitHub PoC

JacobTaylor3/CVE-2021-21220

CVE-2021-21220HIGHunder attack30 Mar 2026

Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to po

100RISK

open ↗

GitHub PoC

vettrivel007/CVE-2024-1086

CVE-2024-1086HIGHunder attackransomware30 Mar 2026

Use-after-free in Linux kernel's netfilter: nf_tables component

76RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.