Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
87,464cataloged exploits
40,695CVEs with public exploitation
24,696lab-tested
AllReferência 26,426Exploit-DB 24,489GitHub PoC 18,182VulnCheck XDB 10,251Nuclei 4,577Metasploit 3,539✓ verified onlyrecentpopularrisk
87,464 exploits
GitHub PoC
Laboratorio para detectar y explotar las vulnerabilidades CVE-2026-109618 y CVE-2026-109619
RCE via OOM corruption
100RISK
open ↗GitHub PoC
CVE-2026-98260 adaptation for Lenovo Legion Y700 2025 (TB321FU) / 1.1.10.138 boot image, kernel 6.1.112-android14-11
exec: Cleanup POSIX timers right after de_thread()
41RISK
open ↗GitHub PoC★ 3
CVE-2026-98260: Xiaomi 17 Ultra (nezha) temporary root + KernelSU PoC - scripts, docs and logs only; exploit built from upstream source
exec: Cleanup POSIX timers right after de_thread()
41RISK
open ↗GitHub PoC
Detection-only triage scanner for MLflow scorer RCE CVE-2026-116692: version check via the /version endpoint. No payloads, no scorer invocation.
MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact modules
48RISK
open ↗GitHub PoC★ 2
Research notes on CVE-2026-101767 — unauthenticated vulnerability in Oracle Application Object Library (E-Business Suite)
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported
48RISK
open ↗GitHub PoC
Read-only audit for Node2Shell (CVE-2026-111497): Node.js/Bun Brotli decoder out-of-bounds write
Out-of-Bounds Write in Google Brotli Decoder
70RISK
open ↗GitHub PoC★ 31
CVE-2026-111497 RCE PoC for one pinned Docker Official Image for WordPress
Out-of-Bounds Write in Google Brotli Decoder
70RISK
open ↗GitHub PoC
Node2Shell / Broccoli2Shell (CVE-2026-111497) vendor and Linux distro status - AI-generated, verify before acting
Out-of-Bounds Write in Google Brotli Decoder
70RISK
open ↗GitHub PoC★ 1
Remote Zend MM ASLR leak testbed (PHP CVE-2026-109618 / CVE-2026-109619)
RCE via OOM corruption
100RISK
open ↗GitHub PoC
php2shell (CVE-2026-109618/109619) reproduction lab — lab only, targets the vulnerable php:8.5.11 images
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Security-patched php56 RPMs for Amazon Linux 1 (AMI 2018.03): PHP2Shell (CVE-2026-109618, CVE-2026-109619) and post-5.6.40 fixes backported from deb.sury.org
RCE via OOM corruption
100RISK
open ↗GitHub PoC
[PHP2Shell] Golang exploit for CVE-2026-109618 / CVE-2026-109619: Unauthenticated RCE in PHP 5.4–8.5.11 via OOM corruption + session.upload_progress UAF
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Non-intrusive detector for PHP2Shell (CVE-2026-109618 / CVE-2026-109619) - scans codebases and live hosts for vulnerable PHP versions and risky config. Detection, not exploitation.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Reproducible RHITE fixed PHP runtime images for CVE-2026-109618 and CVE-2026-109619
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Multi-worker exploitation of the PHP 8.5 OOM-to-RCE chain (CVE-2026-109618/109619): pool pinning, measured
RCE via OOM corruption
100RISK
open ↗GitHub PoC
PHP2Shell CVE-2026-109618 / CVE-2026-109619 Mitigation work (Ansible Role)
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 2
Lab reproduction, exposure probe and detection content for CVE-2026-109618 / CVE-2026-109619 (PHP2Shell). Defensive research; no exploit.
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 1
Script avanzado del motor de scripting de Nmap (NSE) diseñado para identificar vulnerabilidades de PHP2Shell (CVE-2026-109618 / CVE-2026-109619). Ofrece análisis de caja negra multicapa resistente a WAF, proxies y eliminación de encabezados.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
One-click exploit PoC for CVE-2026-109618 and CVE-2026-109619 against vulnerable PHP + Apache mod_php (prefork) targets.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Hands-on PHP2Shell workshop: Docker labs, guided debugging, and annotated exploits for CVE-2026-109618 and CVE-2026-109619.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Unofficial rebuild of Remi's php80-php 8.0.30-21 SCL packages for CentOS/RHEL 7 (EOL). Includes all 44 CVE fixes between Remi -6 and -21, among them CVE-2026-109618 / CVE-2026-109619 (PHP2Shell).
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 1
Live demo: the same vulnerable Rust zip crate (RUSTSEC-2026-0367 setuid + CVE-2026-115905 zip cloaking) contained by a deny-by-default Cosmonic WebAssembly sandbox.
zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE
48RISK
open ↗GitHub PoC
Offline Python applicability detector for CVE-2026-97785 in Microsoft Entra application proxy, with CSV/JSON inventories and auditable reports.
AAD App Proxy Elevation of Privilege Vulnerability
28RISK
open ↗GitHub PoC
Offline Python applicability detector for CVE-2026-105014 in Azure Pipelines, with strict CSV/JSON inventories and auditable reports.
Azure Pipelines Remote Code Execution Vulnerability
28RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.