Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,508cataloged exploits

40,258CVEs with public exploitation

24,696lab-tested

All Referência 26,095Exploit-DB 24,488GitHub PoC 17,831VulnCheck XDB 10,015Nuclei 4,547Metasploit 3,532✓ verified onlyrecent popular risk

17,831 exploits

GitHub PoC

Apache ActiveMQ (CVE-2023-46604) zafiyetinden LockBit ransomware aşamasına uzanan 419 saatlik sızma vakasının uçtan uca analizi, SIEM korelasyon kuralları ve IOC listesi.

CVE-2023-46604CRITICALunder attackransomware30 Mar 2026

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISK

GitHub PoC

CVE-2022-22947 vulnerability task

CVE-2022-22947CRITICALunder attack30 Mar 2026

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RISK

GitHub PoC

Setup and exploit recreation for CVE-2022-42889 Text4Shell.

CVE-2022-42889—30 Mar 2026

Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults

60RISK

GitHub PoC

PoC CVE-2025-54123 - Hoverfly <= 1.11.3 - Authenticated Middleware Command Injection

CVE-2025-54123CRITICAL30 Mar 2026

Hoverfly vulnerable to remote code execution at `/api/v2/hoverfly/middleware` endpoint due to insecure middleware implementation

68RISK

GitHub PoC

CVE-2024-6387 OpenSSH 信号竞争漏洞（regreSSHion）分析报告及检测脚本

CVE-2024-6387HIGH30 Mar 2026

Openssh: regresshion - race condition in ssh allows rce/dos

63RISK

GitHub PoC

CVE-2025-54123 exploit and documentation

CVE-2025-54123CRITICAL29 Mar 2026

Hoverfly vulnerable to remote code execution at `/api/v2/hoverfly/middleware` endpoint due to insecure middleware implementation

68RISK

GitHub PoC

CVE-2026-23744 - MCP Connect RCE via Unauthenticated Command Injection

CVE-2026-23744CRITICAL29 Mar 2026

REC in MCPJam inspector due to HTTP Endpoint exposes

75RISK

GitHub PoC★ 1

Shashivanth009/CVE-2022-46364---Apache-CXF-XOP-Include-LFI-PoC

CVE-2022-46364CRITICAL29 Mar 2026

Apache CXF SSRF Vulnerability

48RISK

GitHub PoC★ 2

This vulnerability allows an attacker to perform SSRF (Server-Side Request Forgery) attacks on Apache CXF webservices that accept MTOM/XOP requests. The issue exists in how the href attribute of xop:Include is parsed, allowing arbitrary URLs to be requested by the server.

CVE-2022-46364CRITICAL29 Mar 2026

Apache CXF SSRF Vulnerability

48RISK

GitHub PoC★ 10

💣 Exploit for CVE-2026-26980 — 👻 Ghost CMS Unauthenticated SQLi via Content API

CVE-2026-26980CRITICAL29 Mar 2026

Ghost has a SQL Injection in its Content API

85RISK

GitHub PoC

0x0asif/CVE-2025-55182

CVE-2025-55182CRITICALunder attackransomware29 Mar 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISK

GitHub PoC

CVE-2026-25099 — Bludit CMS API Unrestricted File Upload to Remote Code Execution

CVE-2026-25099HIGH28 Mar 2026

Remote Code Execution via Unrestricted File Upload in Bludit

41RISK

GitHub PoC

A PoC demonstrating a RCE in Hoverfly (versions ≤ 1.11.3) by abusing the /api/v2/hoverfly/middleware endpoint and injecting a malicious middleware script

CVE-2025-54123CRITICAL28 Mar 2026

Hoverfly vulnerable to remote code execution at `/api/v2/hoverfly/middleware` endpoint due to insecure middleware implementation

68RISK

GitHub PoC★ 7

CVE-2022-46364-Poc Apache CXF SSRF via MTOM XOP:Include

CVE-2022-46364CRITICAL28 Mar 2026

Apache CXF SSRF Vulnerability

48RISK

GitHub PoC

Explota vulnerabilidad

CVE-2023-43208CRITICALunder attackransomware28 Mar 2026

NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that

100RISK

GitHub PoC

BOLA/IDOR vulnerability in osTicket ajax.tickets.php | Responsible Disclosure

CVE-2026-14871HIGH28 Mar 2026

osTicket v1.18.3 - v1.17.7 - BOLA/IDOR in ticket field viewing allows cross-department data disclosure

41RISK

GitHub PoC★ 7

CVE-2025-54123 Hoverfly Authenticated Middleware Command Injection RCE

CVE-2025-54123CRITICAL28 Mar 2026

Hoverfly vulnerable to remote code execution at `/api/v2/hoverfly/middleware` endpoint due to insecure middleware implementation

68RISK

GitHub PoC

Python PoC for CVE-2026-23744, unauthenticated RCE in MCP servers via the /api/mcp/connect serverConfig command field (default port 6274)

CVE-2026-23744CRITICAL28 Mar 2026

REC in MCPJam inspector due to HTTP Endpoint exposes

75RISK

GitHub PoC★ 4

Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.

CVE-2021-33044CRITICALunder attack28 Mar 2026

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can by

100RISK

GitHub PoC

Proof of Concept (PoC) exploit for CVE-2026-23744, a vulnerability affecting MCPJam Inspector that allows remote command execution (RCE) through exposed internal debugging endpoints

CVE-2026-23744CRITICAL27 Mar 2026

REC in MCPJam inspector due to HTTP Endpoint exposes

75RISK

GitHub PoC

python script for exploiting CVE-2026-23744

CVE-2026-23744CRITICAL27 Mar 2026

REC in MCPJam inspector due to HTTP Endpoint exposes

75RISK

GitHub PoC★ 1

Exploit script for CVE-2026-23744

CVE-2026-23744CRITICAL27 Mar 2026

REC in MCPJam inspector due to HTTP Endpoint exposes

75RISK

GitHub PoC★ 6

Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload

CVE-2026-3891CRITICAL27 Mar 2026

Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload

75RISK

GitHub PoC

BastianXploited/CVE-2025-6440

CVE-2025-6440CRITICAL27 Mar 2026

WooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File Upload

60RISK

GitHub PoC★ 5

CVE-2026-33017: Unauthenticated RCE in Langflow

CVE-2026-33017CRITICALunder attack27 Mar 2026

Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint

100RISK

GitHub PoC

Conducted a full SOC investigation into a Conti ransomware compromise of an Exchange server using Splunk 8.2.2. Analysed 28,145 events across Windows Security, Sysmon, and IIS log sources to reconstruct the complete attack chain. Identified three exploited CVEs (CVE-2020-0796, CVE-2018-13374, CVE-2018-13379), located a trojanised cmd.exe

CVE-2018-13374MEDIUMunder attackransomware27 Mar 2026

A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 al

75RISK

GitHub PoC

SentinelStream AI: A professional SIEM and SOAR platform featuring real-time threat correlation for CVE-2024-21410 and automated incident response logic.

CVE-2024-21410CRITICALunder attack27 Mar 2026

Microsoft Exchange Server Elevation of Privilege Vulnerability

83RISK

GitHub PoC

Static analysis of the DarkSword iOS WebKit exploit chain — delivery, staging, and CVE breakdown (CVE-2025-31277, CVE-2025-43529)

CVE-2025-31277HIGHunder attack27 Mar 2026

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, mac

71RISK

GitHub PoC

Conducted a full SOC investigation into a Conti ransomware compromise of an Exchange server using Splunk 8.2.2. Analysed 28,145 events across Windows Security, Sysmon, and IIS log sources to reconstruct the complete attack chain. Identified three exploited CVEs (CVE-2020-0796, CVE-2018-13374, CVE-2018-13379), located a trojanised cmd.exe

CVE-2020-0796CRITICALunder attackransomware27 Mar 2026

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h

100RISK

GitHub PoC

Drupal 7 CMS vulnerable to CVE-2018-7600 (Drupalgeddon2), allowing unauthenticated remote code execution.

CVE-2018-7600CRITICALunder attackransomware27 Mar 2026

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.