Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
87,464cataloged exploits
40,695CVEs with public exploitation
24,696lab-tested
AllReferência 26,426Exploit-DB 24,489GitHub PoC 18,182VulnCheck XDB 10,251Nuclei 4,577Metasploit 3,539✓ verified onlyrecentpopularrisk
87,464 exploits
VulnCheck XDB
initial-access
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentica
41RISK
open ↗VulnCheck XDB
initial-access
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentica
41RISK
open ↗GitHub PoC
OpenSSH sshole(CVE-2026-123158) 알파인 sshd 점검을 벨로키와 쉽게 보기
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentica
41RISK
open ↗VulnCheck XDB
initial-access
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentica
41RISK
open ↗GitHub PoC
Vulnerability research, PoC reproduction lab, and technical analysis for Alpine Linux OpenSSH authentication bypass (CVE-2026-123158 / sshole)
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentica
41RISK
open ↗GitHub PoC
kjry8sb/CVE-2026-19219
DialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAX
41RISK
open ↗GitHub PoC
A Patch Without Proof: the verification gap behind CVE-2026-98432
ipv4: free inet_opt and ireq_opt after an RCU grace period
48RISK
open ↗GitHub PoC
CVE-2026-118423 - WP Libre Form <= 1.5.0.1 unauthenticated upload to RCE (PoC + exploit by thiscitze)
WP Libre Form 1.5.0.1 - Unauthenticated RCE via Arbitrary File Upload
48RISK
open ↗GitHub PoC
A scanner for *sshole SSH vulnerability (CVE-2026-123158)
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentica
41RISK
open ↗GitHub PoC
CVE-2026-113615 - GS JWT <= 1.0.0 unauthenticated SQLi to administrator JWT (PoC + exploit by thiscitze)
GS JWT Authentication <= 1.0.0 - Unauthenticated Privilege Escalation via SQLi
48RISK
open ↗GitHub PoC
ansonhsu-ai/sshhole-cve-2026-123158-ste
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentica
41RISK
open ↗GitHub PoC
Detection-only local triage for Apache OFBiz CVE-2026-83542 (CVSS 9.8) and the 24.09.08 batch — grades installs against the fixed release. No probing, no payloads.
Apache OFBiz: Unauthenticated RCE via login-page widget injection
48RISK
open ↗GitHub PoC
CVE-2026-118423 — WP Libre Form <= 1.5.0.1 unauthenticated file upload to RCE (PoC, lab-verified)
WP Libre Form 1.5.0.1 - Unauthenticated RCE via Arbitrary File Upload
48RISK
open ↗GitHub PoC
Reproducer for CVE-2026-101678 (MySQL Connector/J <= 26.7.0) - malicious server reporting huge result-set column count
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). The supported version that is
33RISK
open ↗GitHub PoC★ 1
sshole (CVE-2026-123158): OpenSSH password bypass on alpine Linux
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentica
41RISK
open ↗GitHub PoC★ 2
Exploit para explotar la vulnerabilidad CVE-2026-123158 (conocida como sshole).
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentica
41RISK
open ↗GitHub PoC
Automated Terraform lab environment for OpenSSH on Linux with musl libc without PAM (CVE-2026-123158 research)
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentica
41RISK
open ↗GitHub PoC★ 1
Dream-Rainy/CVE-2026-98260
exec: Cleanup POSIX timers right after de_thread()
41RISK
open ↗GitHub PoC
Find which images and containers run a vulnerable Alpine + OpenSSH combination (CVE-2026-123158) — five-condition check, zero network, first-hour playbook.
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentica
41RISK
open ↗GitHub PoC
CVE-2026-98260 (posix-cpu-timers UAF) to KernelSU on a bootloader-locked OPPO PKT110: exploit core, on-device app, and the research write-up.
exec: Cleanup POSIX timers right after de_thread()
41RISK
open ↗GitHub PoC
Prova de conceito para exploração da vulnerabilidade CVE-2026-123158.
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentica
41RISK
open ↗GitHub PoC
CVE-2026-114630 - ELEX HelpDesk <= 3.3.8 unauthenticated arbitrary file deletion (PoC + exploit by thiscitze)
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.8 - Unauthenticated Arbitrary File Deletion via 'ticket_attachment_path' Parameter
45RISK
open ↗GitHub PoC★ 2
Microsoft Paint CVE-2026-83844 Verification Script
Windows Paint Remote Code Execution Vulnerability
41RISK
open ↗GitHub PoC
3jee/CVE-2026-120491
Wing FTP Server before 8.2.6 Stored XSS via nowpath in Legacy Activity Page
33RISK
open ↗GitHub PoC
openssh-musl-enterprise-hardening (CVE-2026-123158)
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentica
41RISK
open ↗GitHub PoC
CVE-2026-97229 - GitLab CE/EE CI/CD Integer Overflow RCE | CVSS 10.0 | By Gh0st-Bx1
Integer Overflow or Wraparound in GitLab
100RISK
open ↗VulnCheck XDB
remote-with-credentials
TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the functio
35RISK
open ↗GitHub PoC
CVE-2026-100109 - Security For WooCommerce 1.0.10-1.0.16 unauthenticated admin creation (PoC + exploit by thiscitze)
Security For WooCommerce 1.0.10 - 1.0.16 - Unauthenticated Privilege Escalation via usfw_create_temporary_user
48RISK
open ↗VulnCheck XDB
initial-access
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentica
41RISK
open ↗VulnCheck XDB
initial-access
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentica
41RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.