Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

80,646cataloged exploits

37,382CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,482Referência 23,825GitHub PoC 15,392VulnCheck XDB 9,029Nuclei 4,416Metasploit 3,502✓ verified onlyrecent popular risk

80,557 exploits

VulnCheck XDB

remote-with-credentials

CVE-2019-9193—21 Jan 2026

In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and users in the 'pg_execute_serve

60RISK

open ↗

GitHub PoC★ 1

CVE-2017-7921, CVE-2021-36260 updated 21/01/2026

CVE-2017-7921CRITICALunder attack21 Jan 2026

An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16

100RISK

open ↗

GitHub PoC

MOVEit Transfer 2023 mass data breach (CVE-2023-34362)

CVE-2023-34362CRITICALunder attackransomware21 Jan 2026

In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023.

100RISK

open ↗

GitHub PoC

SMBv1: CVE-2017-0143, gravedad 8.8, de ejecucion remota de codigo (RCE), en Windows con SMBv1 (ms17-010)

CVE-2017-0143HIGHunder attackransomware21 Jan 2026

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISK

open ↗

VulnCheck XDB

initial-access

CVE-2021-36260CRITICALunder attack21 Jan 2026

A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation,

100RISK

open ↗

GitHub PoC

vsftpd 2.3.4 (CVE-2011-2523) a critical vulnerability that leads to Reverse Root Shell. In this repo I will do a PoC how to exploit it step by step, Manually & Automatically (Python) for educational purposes.

CVE-2011-2523—20 Jan 2026

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

60RISK

open ↗

VulnCheck XDB

initial-access

CVE-2025-54068CRITICALunder attack20 Jan 2026

Livewire vulnerable to remote command execution during property update hydration

100RISK

open ↗

VulnCheck XDB

info-leak

CVE-2025-14847HIGHunder attack20 Jan 2026

Zlib compressed protocol header length confusion may allow memory read

100RISK

open ↗

VulnCheck XDB

local

CVE-2023-0386HIGHunder attack20 Jan 2026

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities wa

86RISK

open ↗

GitHub PoC

SSP H3

CVE-2024-38063CRITICAL20 Jan 2026

Windows TCP/IP Remote Code Execution Vulnerability

70RISK

open ↗

GitHub PoC

Spring4Shell (CVE-2022-22965) DFIR lab with exploit simulation, Python WAF, IOC-based detection, and PCAP analysis.

CVE-2022-22965CRITICALunder attack20 Jan 2026

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISK

open ↗

GitHub PoC

Vladjrfhfg/React-site-CVE-2025-55182

CVE-2025-55182CRITICALunder attackransomware20 Jan 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISK

open ↗

GitHub PoC

dragosbanica/CVE-2023-0386_POC

CVE-2023-0386HIGHunder attack20 Jan 2026

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities wa

86RISK

open ↗

GitHub PoC

CVE-2025-55182 React Server Components Remote Code Execution Exploit Lab

CVE-2025-55182CRITICALunder attackransomware20 Jan 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISK

open ↗

VulnCheck XDB

initial-access

CVE-2026-23744CRITICAL20 Jan 2026

REC in MCPJam inspector due to HTTP Endpoint exposes

75RISK

open ↗

GitHub PoC★ 5

A tool designed to exploit CVE-2025-54068 and Remote Command Execution of the Livewire project.

CVE-2025-54068CRITICALunder attack20 Jan 2026

Livewire vulnerable to remote command execution during property update hydration

100RISK

open ↗

GitHub PoC

Cacti exploit

CVE-2024-25641CRITICAL20 Jan 2026

Cacti RCE vulnerability when importing packages

85RISK

open ↗

GitHub PoC★ 10

CVE-2026-23744 - Versions 1.4.2 and earlier of MCPJam inspector are vulnerable to remote code execution (RCE). Because the tool listens on 0.0.0.0 by default, an attacker can trigger the installation and execution of a malicious MCP server by sending a crafted HTTP request. Version 1.4.3 contains a patch for this issue.

CVE-2026-23744CRITICAL20 Jan 2026

REC in MCPJam inspector due to HTTP Endpoint exposes

75RISK

open ↗

VulnCheck XDB

initial-access

CVE-2026-21858CRITICAL20 Jan 2026

n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling

85RISK

open ↗

VulnCheck XDB

initial-access

CVE-2026-21858CRITICAL20 Jan 2026

n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling

85RISK

open ↗

GitHub PoC★ 8

CVE-2026-23744CRITICAL20 Jan 2026

REC in MCPJam inspector due to HTTP Endpoint exposes

75RISK

open ↗

GitHub PoC

CVE-2025-55182(命令执行、反弹shell、注入内存马)

CVE-2025-55182CRITICALunder attackransomware20 Jan 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISK

open ↗

GitHub PoC

This script is used to identify MongoDB services that are network-exposed and allow unauthenticated protocol handshakes.

CVE-2025-14847HIGHunder attack20 Jan 2026

Zlib compressed protocol header length confusion may allow memory read

100RISK

open ↗

VulnCheck XDB

initial-access

CVE-2019-2725HIGHunder attackransomware19 Jan 2026

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte

100RISK

open ↗

GitHub PoC

This script audits ServiceNow AI Agents for vulnerabilities like CVE-2025-12420, governance gaps, and compliance risks. Powered by CYBERDUDEBIVASH – your global ecosystem for cybersecurity, AI apps, services, and consulting.

CVE-2025-12420CRITICAL19 Jan 2026

Unauthenticated Privilege Escalation in ServiceNow AI Platform

60RISK

open ↗

GitHub PoC

Secure Web Gateway 10.2.11 - Cross-Site Scripting (XSS)

CVE-2023-0214MEDIUM19 Jan 2026

XSS in Skyhigh Security SWG

33RISK

open ↗

VulnCheck XDB

info-leak

CVE-2026-20805MEDIUMunder attack19 Jan 2026

Desktop Window Manager Information Disclosure Vulnerability

63RISK

open ↗

GitHub PoC

This repository provides a high-fidelity technical deconstruction and production-ready exploitation suite for CVE-2019-5736. It demonstrates how a root user inside a container can achieve a Host Root Shell by overwriting the host runc binary using an OverlayFS mount and ld.so.preload manipulation.

CVE-2019-5736—19 Jan 2026

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc b

60RISK

open ↗

GitHub PoC

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server.

CVE-2019-2725HIGHunder attackransomware19 Jan 2026

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte

100RISK

open ↗

GitHub PoC

Killian0713/Assignement_3-CVE-2017-7269

CVE-2017-7269CRITICALunder attack19 Jan 2026

Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in

100RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.