Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

80,753cataloged exploits
37,445CVEs with public exploitation
24,695lab-tested
80,753 exploits
GitHub PoC
React2Shell (CVE-2025-55182) scanner
CVE-2025-55182CRITICALunder attackransomware11 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open
GitHub PoC3
A Chrome extension for detecting React2Shell vulnerabilities (CVE-2025-55182 & CVE-2025-66478) in web applications
CVE-2025-55182CRITICALunder attackransomware11 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open
GitHub PoC
Docker test environment for CVE-2025-34299 - Monsta FTP Pre-Auth RCE vulnerability
CVE-2025-34299CRITICAL11 Dec 2025
Monsta FTP <= 2.11 Unauthenticated Arbitrary File Upload
85RISK
open
GitHub PoC
min8282/CVE-2025-55182
CVE-2025-55182CRITICALunder attackransomware11 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open
GitHub PoC1
Exploitation of a Remote Code Execution vulnerability- (CVE-2024-7954)
CVE-2024-7954CRITICAL11 Dec 2025
SPIP porte_plume Plugin Arbitrary PHP Execution
85RISK
open
GitHub PoC2
Nkwenti-Severian-Ndongtsop/POC_react2shell_CVE-2025-55182
CVE-2025-55182CRITICALunder attackransomware11 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open
GitHub PoC
CVE-2025-55182 & CVE-2025-66478 proof of concepts
CVE-2025-55182CRITICALunder attackransomware11 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open
GitHub PoC5
This tool is a Proof of Concept (PoC) intended for security research and educational purposes only. Using this tool on systems without explicit permission is illegal and punishable by law. The author (Tiger-Foxx) assumes no responsibility for misuse.
CVE-2025-55182CRITICALunder attackransomware11 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open
GitHub PoC1
CVE-2025-55182
CVE-2025-55182CRITICALunder attackransomware11 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open
Metasploit600
FreePBX endpoint SQLi to RCE
CVE-2025-66039CRITICAL11 Dec 2025
FreePBX Endpoint Manager Allows Unauthenticated Logins to Administrator Control Panel via Forged Basic Auth Header
63RISK
open
GitHub PoC
Modified ruby script for RCE
CVE-2013-015611 Dec 2025
active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, an
60RISK
open
Metasploit600
FreePBX endpoint SQLi to RCE
CVE-2025-61675HIGH11 Dec 2025
FreePBX Endpoint Manager vulnerable to authenticated SQL injection in multiple configuration parameters
48RISK
open
Metasploit600
FreePBX firmware file upload
CVE-2025-66039CRITICAL11 Dec 2025
FreePBX Endpoint Manager Allows Unauthenticated Logins to Administrator Control Panel via Forged Basic Auth Header
63RISK
open
Metasploit600
FreePBX firmware file upload
CVE-2025-61678HIGH11 Dec 2025
FreePBX Endpoint Manager vulnerable to authenticated arbitrary file upload via fwbrand parameter
48RISK
open
Metasploit300
FreePBX Custom Extension SQL Injection
CVE-2025-66039CRITICAL11 Dec 2025
FreePBX Endpoint Manager Allows Unauthenticated Logins to Administrator Control Panel via Forged Basic Auth Header
63RISK
open
Metasploit300
FreePBX Custom Extension SQL Injection
CVE-2025-61675HIGH11 Dec 2025
FreePBX Endpoint Manager vulnerable to authenticated SQL injection in multiple configuration parameters
48RISK
open
GitHub PoC3
Interactive visualization of the React2Shell (CVE-2025-55182) RCE vulnerability with narrated animations for three audiences: Expert, Practitioner, and Stakeholder. Audio synced via ElevenLabs + Whisper.
CVE-2025-55182CRITICALunder attackransomware11 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open
VulnCheck XDB
remote-with-credentials
CVE-2025-8110HIGHunder attack11 Dec 2025
File overwrite in file update API in Gogs
100RISK
open
VulnCheck XDB
initial-access
CVE-2025-34299CRITICAL11 Dec 2025
Monsta FTP <= 2.11 Unauthenticated Arbitrary File Upload
85RISK
open
VulnCheck XDB
initial-access
CVE-2013-015611 Dec 2025
active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, an
60RISK
open
GitHub PoC1
CVE-2021-4045 CVE-2021-4045 is a Command Injection vulnerability that allows Remote Code Execution in the TP-Link Tapo c200 IP camera. It affects all firmware versions prior to 1.1.16 Build 211209 Rel. 37726N due to insufficient checks on user input in uhttpd, which is one of the main binaries of the device.
CVE-2021-4045CRITICAL11 Dec 2025
TP-LINK Tapo C200 remote code execution vulnerability
70RISK
open
GitHub PoC
Legus-Yeung/CVE-2025-55182-exploit
CVE-2025-55182CRITICALunder attackransomware10 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open
GitHub PoC
Proof-of-Concept exploit for CVE-2025-9074
CVE-2025-9074CRITICAL10 Dec 2025
Docker Desktop allows unauthenticated access to Docker Engine API from containers
48RISK
open
VulnCheck XDB
remote-with-credentials
CVE-2025-33073HIGHunder attack10 Dec 2025
Windows SMB Client Elevation of Privilege Vulnerability
93RISK
open
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALunder attackransomware10 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open
GitHub PoC3
A CTF challenge based on CVE-2025-55182 Vulnerability
CVE-2025-55182CRITICALunder attackransomware10 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open
VulnCheck XDB
client-side
CVE-2025-24071MEDIUM10 Dec 2025
Microsoft Windows File Explorer Spoofing Vulnerability
38RISK
open
GitHub PoC6
A command-line tool for detecting CVE-2025-55182 and CVE-2025-66478 in Next.js applications using React Server Components.
CVE-2025-55182CRITICALunder attackransomware10 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open
GitHub PoC
A portable Bash script to detect vulnerable versions of React Server DOM and Next.js packages affected by [CVE-2025-55182]
CVE-2025-55182CRITICALunder attackransomware10 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open
VulnCheck XDB
initial-access
CVE-2025-1974CRITICAL10 Dec 2025
ingress-nginx admission controller RCE escalation
85RISK
open
previouspage 228 / 2,692next

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.