Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,508cataloged exploits

40,258CVEs with public exploitation

24,696lab-tested

All Referência 26,095Exploit-DB 24,488GitHub PoC 17,831VulnCheck XDB 10,015Nuclei 4,547Metasploit 3,532✓ verified onlyrecent popular risk

17,831 exploits

GitHub PoC

An automated, high-precision zero-shot evaluation pipeline for OpenAI's CLIP model on CIFAR-10. Features 88.80% accuracy, Safetensors security mitigation (CVE-2025-32434), and AI Native (Trae) workflow.

CVE-2025-32434CRITICAL08 Mar 2026

PyTorch: `torch.load` with `weights_only=True` leads to remote code execution

48RISK

GitHub PoC★ 3

CVE-2023-38831 is a Zero-day WinRAR vulnerability that lets attackers disguise malicious files in archives, tricking users into executing harmful content.

CVE-2023-38831HIGHunder attackransomware08 Mar 2026

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RISK

GitHub PoC

ZoneMinder Time-Based SQL Injection (CVE-2024-51482) Exploit POC

CVE-2024-51482CRITICAL08 Mar 2026

Boolean-based SQL Injection in ZoneMinder v1.37.* <= 1.37.64

75RISK

GitHub PoC

0axz-tools/CVE-2025-6440

CVE-2025-6440CRITICAL08 Mar 2026

WooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File Upload

60RISK

GitHub PoC★ 8

ZenoMinder Blind SQL Injection PoC

CVE-2024-51482CRITICAL08 Mar 2026

Boolean-based SQL Injection in ZoneMinder v1.37.* <= 1.37.64

75RISK

GitHub PoC

Yetazyyy/CVE-2026-0770

CVE-2026-0770CRITICALunder attack08 Mar 2026

Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability

100RISK

GitHub PoC

A demo and explanation of CVE-2026-31431

CVE-2026-31431HIGHunder attack08 Mar 2026

crypto: algif_aead - Revert to operating out-of-place

100RISK

GitHub PoC★ 2

lil0xplorer/CVE-2025-60787_PoC

CVE-2025-60787HIGH08 Mar 2026

MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration parameters such as image_file_name

61RISK

GitHub PoC★ 825

CVE-2026-24061 exploit PoC

CVE-2026-24061CRITICALunder attack08 Mar 2026

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment

100RISK

GitHub PoC

gustavorobertux/cisco-cve-2023-20198-checker

CVE-2023-20198CRITICALunder attack08 Mar 2026

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RISK

GitHub PoC

Dockerized vulnerable lab demonstrating CVE-2024-2083 in ZenML, a path traversal vulnerability in the step logs API allowing arbitrary file read.

CVE-2024-2083CRITICAL08 Mar 2026

Directory Traversal in zenml-io/zenml

60RISK

GitHub PoC

Exploit for CVE-2023-27372 with interactiev shell

CVE-2023-27372CRITICAL07 Mar 2026

SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. T

85RISK

GitHub PoC★ 1

Professional PoC for CVE-2025-60787: Remote Code Execution in MotionEye (<= 0.43.1b4). This exploit demonstrates an OS Command Injection vulnerability through client-side validation bypass, allowing attackers to execute arbitrary commands via configuration files.

CVE-2025-60787HIGH07 Mar 2026

MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration parameters such as image_file_name

61RISK

GitHub PoC

CVE-2020-1350的PoC

CVE-2020-1350CRITICALunder attack07 Mar 2026

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req

100RISK

GitHub PoC★ 2

Go PoC for CVE-2025-32433 — unauthenticated RCE in Erlang/OTP SSH.

CVE-2025-32433CRITICALunder attack07 Mar 2026

Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

100RISK

GitHub PoC★ 14

Authenticated time-based blind SQL injection PoC for ZoneMinder CVE-2024-51482 (v1.37.* <= 1.37.64)

CVE-2024-51482CRITICAL07 Mar 2026

Boolean-based SQL Injection in ZoneMinder v1.37.* <= 1.37.64

75RISK

GitHub PoC

luoqichen/CVE-2025-55182-POC

CVE-2025-55182CRITICALunder attackransomware06 Mar 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISK

GitHub PoC

Asus Router Arbitrary File Write to Remote Code Execution PoC - Fk Mirai

CVE-2024-3912CRITICAL06 Mar 2026

ASUS Router - Upload arbitrary firmware

48RISK

GitHub PoC

Full-cycle Pentest on Metasploitable (VMware/Kali). Scanned services (Apache Tomcat/8180), researched CVE-2002-0936 via Exploit-DB, and gained access using default creds (Metasploit). Performed local enumeration for SUID misconfigs, exploiting a legacy Nmap binary to escalate privileges to Root.

CVE-2002-0936—06 Mar 2026

The Java Server Pages (JSP) engine in Tomcat allows web page owners to cause a denial of service (engine crash) on the w

28RISK

GitHub PoC★ 6

MindsDB Path Traversal to RCE PoC

CVE-2026-27483HIGH06 Mar 2026

MindsDB has Path Traversal in /api/files Leading to Remote Code Execution

61RISK

GitHub PoC

CVE-2014-6271

CVE-2014-6271CRITICALunder attack06 Mar 2026

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISK

GitHub PoC

this is a metasploit exploit module for CVE-2024-25096 and CVE-2023-3452

CVE-2023-3452CRITICAL06 Mar 2026

Canto <= 3.0.4 - Unauthenticated Remote File Inclusion

63RISK

GitHub PoC★ 1

PoC of BLE cache poisoning attack

CVE-2026-51376MEDIUM05 Mar 2026

An issue in BitChat for iOS v1.15.0 allows a remote attacker to cause a denial of service via an unauthenticated MESSAGE

33RISK

GitHub PoC★ 2

yonathanpy/CVE-2025-32462-CVE-2025-32463-PoC-Lab

CVE-2025-32462LOW05 Mar 2026

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allo

28RISK

GitHub PoC

shakyanayann/CVE-2022-0185

CVE-2022-0185HIGHunder attack05 Mar 2026

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functio

76RISK

GitHub PoC

arrhenius975/CVE-2024-38063-Exploit-Refactoring

CVE-2024-38063CRITICAL04 Mar 2026

Windows TCP/IP Remote Code Execution Vulnerability

70RISK

GitHub PoC★ 1

Technical analysis and proof-of-concept for CVE-2024-1086, a Linux kernel nf_tables use-after-free vulnerability leading to local privilege escalation. Includes vulnerability breakdown, affected versions, exploitation methodology, and mitigation guidance for research and educational purposes.

CVE-2024-1086HIGHunder attackransomware04 Mar 2026

Use-after-free in Linux kernel's netfilter: nf_tables component

76RISK

GitHub PoC

prabeershakya/CVE-2022-0185-POC

CVE-2022-0185HIGHunder attack04 Mar 2026

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functio

76RISK

GitHub PoC★ 2

Faridi-m/CVE-2021-22911-RocketChat

CVE-2021-22911—04 Mar 2026

A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthenti

60RISK

GitHub PoC

HazaVVIP/CVE-2025-30208

CVE-2025-30208MEDIUM04 Mar 2026

Vite bypasses server.fs.deny when using `?raw??`

70RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.