Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

88,056cataloged exploits
40,804CVEs with public exploitation
24,696lab-tested
AllReferência 26,494Exploit-DB 24,489GitHub PoC 18,351VulnCheck XDB 10,605Nuclei 4,578Metasploit 3,539✓ verified onlyrecentpopularrisk
88,056 exploits
GitHub PoC
CVE-2026-58138 — Conductor (3.21.21..<3.30.2) unauthenticated RCE via INLINE GraalVM evaluator (HostAccess.ALL). Lab + PoC, verified e2e (root).
CVE-2026-58138CRITICAL30 Jun 2026
Orkes Conductor 3.21.21 < 3.30.2 Unauthenticated RCE via GraalVM Script Evaluators
63RISK
open ↗
GitHub PoC
Independent reverse engineering and reproduction of CVE-2015-1187, an unauthenticated command injection in the D-Link DIR-820L (Rev A, v1.05B03). MIPS firmware extraction with binwalk, static analysis in Ghidra, and tracing the `ping_addr` parameter to its command-execution sink.
CVE-2015-1187CRITICALunder attack30 Jun 2026
The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr
100RISK
open ↗
Metasploit600
Langflow AI Code Validation Authenticated RCE
CVE-2026-7873CRITICAL30 Jun 2026
Code Injection Vulnerability in Code Validation Endpoint
63RISK
open ↗
GitHub PoC★ 4
Pure C exploit for CVE-2023-4911 (Looney Tunables) — x86_64 & aarch64 implementations. Multi-processing brute-forcing, dynamic calibration, integrated ELF parser.
CVE-2023-4911HIGHunder attack29 Jun 2026
Glibc: buffer overflow in ld.so leading to privilege escalation
98RISK
open ↗
GitHub PoC
Goal is to triage well known attacks and learn how security teams quickly respond.
CVE-2021-26855CRITICALunder attackransomware29 Jun 2026
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISK
open ↗
GitHub PoC
cve-2026-48907 scanner
CVE-2026-48907CRITICALunder attack29 Jun 2026
Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5
100RISK
open ↗
GitHub PoC★ 1
rootdirective-sec/CVE-2026-28496-Lab
CVE-2026-28496CRITICAL29 Jun 2026
FOSSBilling: Server-side template injection in Twig template rendering enables information disclosure and RCE
63RISK
open ↗
GitHub PoC
Goal is to triage well known attacks and learn how security teams quickly respond.
CVE-2017-0144HIGHunder attackransomware29 Jun 2026
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RISK
open ↗
GitHub PoC
Goal is to triage well known attacks and learn how security teams quickly respond.
CVE-2021-26855CRITICALunder attackransomware29 Jun 2026
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISK
open ↗
GitHub PoC
CVE-2026-53753 — Crawl4AI <0.8.7 unauthenticated RCE (AST sandbox escape via gi_frame.f_back). Lab + PoC, verified e2e.
CVE-2026-53753CRITICAL29 Jun 2026
Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API
63RISK
open ↗
GitHub PoC
POC for CVE-2026-20253
CVE-2026-20253CRITICALunder attack29 Jun 2026
Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise
100RISK
open ↗
GitHub PoC★ 1
CVE-2026-46817
CVE-2026-46817CRITICALunder attack29 Jun 2026
Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versi
83RISK
open ↗
GitHub PoC
cve-2026-46331-audit script
CVE-2026-46331HIGH29 Jun 2026
net/sched: fix pedit partial COW leading to page cache corruption
41RISK
open ↗
GitHub PoC★ 4
CVE-2026-55200 - Critical libssh2 Remote Code Execution Vulnerability
CVE-2026-55200CRITICAL29 Jun 2026
libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c
48RISK
open ↗
GitHub PoC
Goal is to triage well known attacks and learn how security teams quickly respond.
CVE-2017-0144HIGHunder attackransomware29 Jun 2026
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RISK
open ↗
GitHub PoC★ 1
CVE-2026-56782 — Gorse <0.5.10 unauthenticated DB dump/restore (admin_api_key fail-open). Lab + PoC, verified e2e.
CVE-2026-56782CRITICAL29 Jun 2026
Gorse - Unauthenticated Database Dump and Restore via /api/dump and /api/restore Endpoints
63RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-38646—29 Jun 2026
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
60RISK
open ↗
GitHub PoC★ 1
iCagenda Unauthenticated File Upload to RCE
CVE-2026-48939CRITICALunder attack29 Jun 2026
Joomla Extension - icagenda.com - Remote Code Execution in iCaganda extension for Joomla < 4.0.8/3.9.15
98RISK
open ↗
GitHub PoC★ 4
CVE-2026-48907 – Joomla JCE Unauthenticated Remote Code Execution (RCE)
CVE-2026-48907CRITICALunder attack29 Jun 2026
Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2026-20253CRITICALunder attack29 Jun 2026
Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise
100RISK
open ↗
GitHub PoC
DirtyClone - local privilege escalation (LPE) proof-of-concept targeting a kernel/XFRM-related vulnerability described in the source as CVE-2026-43503
CVE-2026-43503HIGH29 Jun 2026
net: skbuff: propagate shared-frag marker through frag-transfer helpers
56RISK
open ↗
GitHub PoC
rufflabs/ludus_crushftp_cve-2025-31161_sim
CVE-2025-31161CRITICALunder attackransomware29 Jun 2026
CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unle
100RISK
open ↗
GitHub PoC
rufflabs/ludus_crushftp_cve-2025-31161
CVE-2025-31161CRITICALunder attackransomware29 Jun 2026
CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unle
100RISK
open ↗
GitHub PoC★ 1
React2Shell (CVE-2025-55182) PoC
CVE-2025-55182CRITICALunder attackransomware29 Jun 2026
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
GitHub PoC
HutTwoThreeFour/CVE-2026-5562-Exploit
CVE-2026-5562MEDIUM29 Jun 2026
provectus kafka-ui Endpoint testexecutions validateAccess code injection
48RISK
open ↗
VulnCheck XDB
initial-access
CVE-2026-9082CRITICALunder attack29 Jun 2026
Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
100RISK
open ↗
GitHub PoC★ 25
Python Proof of Concept for DirtyClone (CVE-2026-43503) - Linux kernel LPE via page-cache corruption
CVE-2026-43503HIGH29 Jun 2026
net: skbuff: propagate shared-frag marker through frag-transfer helpers
56RISK
open ↗
VulnCheck XDB
initial-access
CVE-2026-28496CRITICAL29 Jun 2026
FOSSBilling: Server-side template injection in Twig template rendering enables information disclosure and RCE
63RISK
open ↗
VulnCheck XDB
local
CVE-2023-4911HIGHunder attack29 Jun 2026
Glibc: buffer overflow in ld.so leading to privilege escalation
98RISK
open ↗
GitHub PoC
xitexploiter96-dot/CVE-2026-48907-
CVE-2026-48907CRITICALunder attack29 Jun 2026
Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5
100RISK
open ↗
← previouspage 218 / 2,936next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.