Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,508cataloged exploits
40,258CVEs with public exploitation
24,696lab-tested
17,831 exploits
GitHub PoC
danindiana/cve-2026-32746-mitigation
CVE-2026-32746CRITICAL20 Mar 2026
telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption
60RISK
open ↗
GitHub PoC
duduLiu8787/CVE-2026-32746-Exploit
CVE-2026-32746CRITICAL19 Mar 2026
telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption
60RISK
open ↗
GitHub PoC
POC for CVE-2021-3156 - Heap-based buffer overflow in sudo
CVE-2021-3156HIGHunder attack19 Mar 2026
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RISK
open ↗
GitHub PoC
SEH-based buffer overflow in Easy File Sharing Web Server 7.2, reachable through the password recovery endpoint.
CVE-2025-34096CRITICAL19 Mar 2026
Easy File Sharing HTTP Server 7.2 Buffer Overflow via POST to /sendemail.ghp
63RISK
open ↗
GitHub PoC★ 1
Classic stack-based buffer overflow in War FTP Daemon 1.65 demonstrating old-school remote code execution through malformed FTP commands.
CVE-2007-1567—19 Mar 2026
Stack-based buffer overflow in War FTP Daemon 1.65, and possibly earlier, allows remote attackers to cause a denial of s
35RISK
open ↗
GitHub PoC★ 1
PoC Magento Session Reaper - CVE-2025-54236
CVE-2025-54236CRITICALunder attack19 Mar 2026
Adobe Commerce | Improper Input Validation (CWE-20)
100RISK
open ↗
GitHub PoC
tayW84/CVE-2019-10945----Python3
CVE-2019-10945—19 Mar 2026
An issue was discovered in Joomla! before 3.9.5. The Media Manager component does not properly sanitize the folder param
35RISK
open ↗
GitHub PoC★ 1
Classic stack-based buffer overflow in Savant Web Server 3.1 demonstrating early-2000s remote memory corruption through a crafted HTTP request.
CVE-2002-1120—19 Mar 2026
Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP G
50RISK
open ↗
GitHub PoC★ 1
Classic stack-based buffer overflow in SLMail 5.1 showing how early mail servers could be compromised through oversized SMTP and POP3 commands.
CVE-2003-0264—19 Mar 2026
Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO arg
60RISK
open ↗
GitHub PoC
vsftpd 2.3.4 Backdoor Exploit (CVE-2011-2523)
CVE-2011-2523—19 Mar 2026
vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.
60RISK
open ↗
GitHub PoC
havertz2110/CVE-2024-48510-PoC
CVE-2024-48510CRITICAL19 Mar 2026
Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote attacker to execute arbitrary code vi
48RISK
open ↗
GitHub PoC
Performing multiple time-based blind injections for the same character and selecting the most frequent result significantly reduces errors and improves reliability, through it is time-consuming.
CVE-2024-51482CRITICAL19 Mar 2026
Boolean-based SQL Injection in ZoneMinder v1.37.* <= 1.37.64
75RISK
open ↗
GitHub PoC
Exploit based in /jaiguptanick/CVE-2019-0232
CVE-2019-0232—19 Mar 2026
When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0
60RISK
open ↗
GitHub PoC
jesusdominguez87/CVE-2025-5548
CVE-2025-5548MEDIUM18 Mar 2026
FreeFloat FTP Server NOOP Command buffer overflow
38RISK
open ↗
GitHub PoC
A comprehensive analysis of CVE-2021-41773 (Apache HTTP Server 2.4.49), featuring vulnerability research, controlled lab-based exploitation, Proof-of-Concept development, root cause analysis, and mitigation strategies for educational and defensive security purposes.
CVE-2021-41773HIGHunder attackransomware18 Mar 2026
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
open ↗
GitHub PoC
Proof-of-concept (PoC) for CVE-2021-41773, demonstrating Apache HTTP Server 2.4.49 path traversal and remote code execution (RCE) in a controlled lab environment.
CVE-2021-41773HIGHunder attackransomware18 Mar 2026
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
open ↗
GitHub PoC
A professional Python tool designed for educational penetration testing, demonstrating SSH vulnerabilities (CVE-2008-0166 / CVE-2008-1657) with interactive shell access, command logging, and automated PDF/DOCX reporting.
CVE-2008-0166—18 Mar 2026
OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that ge
45RISK
open ↗
GitHub PoC
Cybersecurity lab demonstrating Apache CVE-2021-41773 path traversal vulnerability with vulnerable server simulation, scanner, and security reporting.
CVE-2021-41773HIGHunder attackransomware18 Mar 2026
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
open ↗
GitHub PoC
Red Team exploitation of CVE-2021-3156 (Baron Samedit) – Heap Buffer Overflow in Sudo leading to Local Privilege Escalation on Ubuntu 20.04
CVE-2021-3156HIGHunder attack18 Mar 2026
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RISK
open ↗
GitHub PoC
Practical lab focused on vulnerability analysis and exploit development, using FreeFloat FTP Server 1.0 as an educational buffer overflow case study and documenting the setup, analysis and exploitation workflow
CVE-2025-5548MEDIUM18 Mar 2026
FreeFloat FTP Server NOOP Command buffer overflow
38RISK
open ↗
GitHub PoC
SSH Exploit Tool (Educational Use Only) 📌 Description This tool demonstrates exploitation of: CVE-2008-0166 CVE-2008-1657 It connects to vulnerable SSH services and provides: Persistent interactive shell Command execution logging Automatic PDF & DOCX report generation
CVE-2008-0166—18 Mar 2026
OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that ge
45RISK
open ↗
GitHub PoC
CVE-2026-24061 PoC - telnetd auth bypass
CVE-2026-24061CRITICALunder attack18 Mar 2026
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment
100RISK
open ↗
GitHub PoC★ 1
luoluoqingge/CVE-2025-55182
CVE-2025-55182CRITICALunder attackransomware18 Mar 2026
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
GitHub PoC
Apache 2.4.49 Path Traversal RCE
CVE-2021-41773HIGHunder attackransomware18 Mar 2026
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
open ↗
GitHub PoC
CVE-2024-53677 취약점 분석 보고서
CVE-2024-53677CRITICAL18 Mar 2026
Apache Struts: Mixing setters for uploaded files and normal fields can allow bypass file upload checks
70RISK
open ↗
GitHub PoC
Laboratorio para el análisis y explotación del CVE-2025-5548
CVE-2025-5548MEDIUM18 Mar 2026
FreeFloat FTP Server NOOP Command buffer overflow
38RISK
open ↗
GitHub PoC
Research and exploitation lab for CVE-2025-5548: Stack Buffer Overflow in FreeFloat FTP Server. Static analysis (IDA/Ghidra), fuzzing, payload engineering and reverse shell.
CVE-2025-5548MEDIUM18 Mar 2026
FreeFloat FTP Server NOOP Command buffer overflow
38RISK
open ↗
GitHub PoC
Documentación paso a paso del análisis y la explotación controlada de la CVE-2025-5548 en FreeFloat FTP Server 1.0, incluyendo preparación del entorno, análisis técnico, desarrollo del exploit y validación final.
CVE-2025-5548MEDIUM18 Mar 2026
FreeFloat FTP Server NOOP Command buffer overflow
38RISK
open ↗
GitHub PoC★ 30
CVE-2026-32746 - GNU InetUtils telnetd LINEMODE SLC Buffer Overflow PoC (pre-auth RCE, CVSS 9.8)
CVE-2026-32746CRITICAL18 Mar 2026
telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption
60RISK
open ↗
GitHub PoC
A professional Python tool designed for educational penetration testing, demonstrating SSH vulnerabilities (CVE-2008-0166 / CVE-2008-1657) with interactive shell access, command logging, and automated PDF/DOCX reporting.
CVE-2008-0166—18 Mar 2026
OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that ge
45RISK
open ↗
← previouspage 203 / 595next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.