Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

88,056cataloged exploits

40,804CVEs with public exploitation

24,696lab-tested

All Referência 26,494Exploit-DB 24,489GitHub PoC 18,351VulnCheck XDB 10,605Nuclei 4,578Metasploit 3,539✓ verified onlyrecent popular risk

88,056 exploits

GitHub PoC

Pen Tesing Lab exploiting VSFTPD 2.3.4 backdoor via Metasploit Framework

CVE-2011-2523—14 Jul 2026

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

60RISK

open ↗

GitHub PoC★ 1

A Cross-Site Request Forgery (CSRF) vulnerability exists in the xxl-job-admin web application that allows an attacker to perform unauthorized modifications to Glue IDE shell scripts. The affected endpoint lacks proper CSRF token validation and accepts arbitrary HTTP methods via a permissive request mapping

CVE-2026-26718CRITICAL14 Jul 2026

A Cross-Site Request Forgery (CSRF) vulnerability exists in the xxl-job-admin web application v.3.0.0 that allows an att

48RISK

open ↗

GitHub PoC★ 15

Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.

CVE-2026-43499HIGH14 Jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

open ↗

GitHub PoC★ 2

will be published

CVE-2026-15706CRITICAL14 Jul 2026

Missing Authentication for Critical Function in Management API in Baylan Water Meters's BMS

48RISK

open ↗

VulnCheck XDB

initial-access

CVE-2026-0740CRITICAL14 Jul 2026

Ninja Forms - File Upload <= 3.3.26 - Unauthenticated Arbitrary File Upload

75RISK

open ↗

VulnCheck XDB

initial-access

CVE-2023-38646—14 Jul 2026

Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman

60RISK

open ↗

GitHub PoC

Defensive single-target self-check for Langflow CVE-2025-3248 exposure

CVE-2025-3248CRITICALunder attackransomware14 Jul 2026

Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code

100RISK

open ↗

GitHub PoC

Log4j Vulnerability homelab

CVE-2021-44228CRITICALunder attackransomware14 Jul 2026

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

open ↗

Metasploit600

SonicWall SMA1000 WorkPlace wsproxy SSRF Remote Command Execution

CVE-2026-15409CRITICALunder attackransomware14 Jul 2026

A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A

93RISK

open ↗

GitHub PoC

Reproducer for CVE-2026-46584: Apache Camel camel-mail mail.smtp.* header injection enabling credential theft via on-path SOCKS interception (fixed in 4.14.8/4.18.3/4.21.0)

CVE-2026-46584LOW14 Jul 2026

Apache Camel Mail: The mail producer applied attacker-supplied message headers as JavaMail session properties, allowing an attacker to influence SMTP parameters

28RISK

open ↗

GitHub PoC

CVE-2026-8181 — Burst Statistics WordPress plugin Authentication Bypass (CVSS 9.8) to Admin Account Takeover. Mass scanner with FOFA/Shodan integration and modern GUI.

CVE-2026-8181CRITICAL14 Jul 2026

Burst Statistics 3.4.0 - 3.4.1.1 - Authentication Bypass to Admin Account Takeover

68RISK

open ↗

GitHub PoC

本次个人漏洞研究进展成果

CVE-2026-43499HIGH14 Jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

open ↗

VulnCheck XDB

initial-access

CVE-2026-49049HIGH14 Jul 2026

Joomla Extension - joomshaper.com - Unauthenticated access to Helix3 template ajax handler

56RISK

open ↗

VulnCheck XDB

denial-of-service

CVE-2022-1471HIGH14 Jul 2026

Remote Code execution in SnakeYAML

78RISK

open ↗

GitHub PoC

asoka666/Cve-2020-11023

CVE-2020-11023MEDIUMunder attack14 Jul 2026

Potential XSS vulnerability in jQuery

85RISK

open ↗

GitHub PoC

This contains the Dockerfile for building and reproduing shellshock

CVE-2014-7169CRITICALunder attack14 Jul 2026

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of

100RISK

open ↗

GitHub PoC★ 3

CVE-2026-0740

CVE-2026-0740CRITICAL14 Jul 2026

Ninja Forms - File Upload <= 3.3.26 - Unauthenticated Arbitrary File Upload

75RISK

open ↗

GitHub PoC

Reproducer for CVE-2026-46457 — Apache Camel camel-nats inbound header injection (Camel control-header injection via a NATS publisher; CamelHttpUri -> SSRF)

CVE-2026-46457HIGH14 Jul 2026

Apache Camel: Camel-NATS: Inbound NATS message headers are mapped into the Exchange without a configured HeaderFilterStrategy, allowing a client that can publish to the subject to inject Camel control headers

41RISK

open ↗

GitHub PoC★ 65

Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.

CVE-2026-43499HIGH14 Jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

open ↗

GitHub PoC★ 8

Bartixxx32/CVE-2026-43499-OnePlus15

CVE-2026-43499HIGH14 Jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

open ↗

GitHub PoC

JohannesLks/CVE-2026-50338

CVE-2026-50338HIGH14 Jul 2026

Azure Spring Apps Elevation of Privilege Vulnerability

41RISK

open ↗

VulnCheck XDB

initial-access

CVE-2026-23744CRITICAL14 Jul 2026

REC in MCPJam inspector due to HTTP Endpoint exposes

75RISK

open ↗

GitHub PoC

Reproducer for CVE-2026-43867 — Apache Camel camel-pqc AwsSecretsManagerKeyLifecycleManager unsafe key-metadata deserialization (RCE)

CVE-2026-43867CRITICAL13 Jul 2026

Apache Camel: Camel-PQC: The AWS Secrets Manager key-lifecycle manager deserializes persisted key metadata with java.io.ObjectInputStream and no ObjectInputFilter

48RISK

open ↗

GitHub PoC★ 1

CVE-2026-46529 - Atril Evince XReader PDF Clickable Link RCE - PoC & Analysis | CVSS 7.8 HIGH | AMN SECURITY

CVE-2026-46529HIGH13 Jul 2026

PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

41RISK

open ↗

GitHub PoC★ 1

CVE-2026-40047 - Apache Camel Docling CLI Argument Injection - PoC & Analysis | CVSS 9.1 CRITICAL | AMN SECURITY

CVE-2026-40047CRITICAL13 Jul 2026

Apache Camel: Camel-Docling: Insufficient validation of custom CLI arguments enables argument injection and path traversal in DoclingProducer

48RISK

open ↗

GitHub PoC

nuclei template for CVE-2026-56291

CVE-2026-56291CRITICALunder attack13 Jul 2026

Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1

98RISK

open ↗

GitHub PoC★ 6

Multi OS Support: Version for MacOS/Linux and Windows, Fully translated to English

CVE-2026-43499HIGH13 Jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

open ↗

GitHub PoC

CVE-2026-53805 - Draft

CVE-2026-53805CRITICAL13 Jul 2026

NVIDIA SIL GEN3C Unauthenticated RCE via Pickle Deserialization in Inference API

48RISK

open ↗

GitHub PoC★ 1

CVE-2026-6307 - Google Chrome V8 Turbofan Type Confusion Sandbox Escape - PoC & Analysis | CVSS 8.8 HIGH | AMN SECURITY

CVE-2026-6307HIGH13 Jul 2026

Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code

41RISK

open ↗

GitHub PoC

Reproducer for CVE-2026-46454 — Apache Camel camel-cometd inbound Bayeux header injection (unauthenticated Camel control-header injection → downstream producer steering / RCE)

CVE-2026-46454CRITICAL13 Jul 2026

Apache Camel: Camel-Cometd: Inbound Bayeux message headers are mapped into the Exchange without a HeaderFilterStrategy, allowing unauthenticated clients to inject Camel control headers

48RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.