Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
87,464cataloged exploits
40,695CVEs with public exploitation
24,696lab-tested
AllReferência 26,426Exploit-DB 24,489GitHub PoC 18,182VulnCheck XDB 10,251Nuclei 4,577Metasploit 3,539✓ verified onlyrecentpopularrisk
87,464 exploits
GitHub PoC
Detect-only PHP2Shell (CVE-2026-109618/109619) exposure check for websites and local network devices
RCE via OOM corruption
100RISK
open ↗GitHub PoC
PHP2Shell CVE-2026-109618 / CVE-2026-109619 Mitigation work (Ansible Role)
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 2
weblogic CVE-2026-70748,CVE-2026-60672,CVE-2026-35301;PHP CVE-2026-109618 CVE-2026-109619,Node.js CVE-2026-111497,NGINX CVE-2026-42945 CVE-2026-42533 CVE-2026-15176 CVE-2026-93479,Apache HTTPD 2.4.66 CVE-2026-23918,IIS CVE-2026-70024,HTTP.sys CVE-2026-47291... RCE CVE scanner
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t
28RISK
open ↗GitHub PoC★ 1
Scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 1
CVE-2026-111497 - .NET Brotli OOB Write PoC and Exploit (HTTP2Shell) | By Gh0st-Bx1
Out-of-Bounds Write in Google Brotli Decoder
70RISK
open ↗GitHub PoC★ 1
CVE-2026-102785: YOOtheme Pro 5.0.0-5.0.52 unauthenticated RCE via image handler signature reuse + path traversal + JPEG/PHP polyglot. CVSS 10.0. Check script, exploit, detection rules.
Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52
48RISK
open ↗GitHub PoC
PHP2Shell（CVE-2026-109618 / CVE-2026-109619）の修正状況を確認し、PHPのメモリ安全性を研究するためのセキュリティ検証ツール。
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Offline Python detector for CVE-2026-76474 exposure in Cisco UC inventories, with CSV/JSON input, versioned rules, and auditable reports.
Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities
28RISK
open ↗GitHub PoC★ 11
6.6.118-android15-8-g9bc34d5b0c79
exec: Cleanup POSIX timers right after de_thread()
41RISK
open ↗GitHub PoC★ 49
6.12.69-android16-6-g242e1a07f878
exec: Cleanup POSIX timers right after de_thread()
41RISK
open ↗GitHub PoC★ 1
Persistent root for LG webOS 2.x TVs (CVE-2014-3153)
The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two diff
98RISK
open ↗GitHub PoC
Offline Python detector for CVE-2026-76473 release exposure in Cisco UC inventories, with CSV/JSON input and auditable reports.
Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.
28RISK
open ↗GitHub PoC
Offline Python detector for CVE-2023-7356 exposure in upstream Linux kernels, with CSV/JSON inventories and auditable reports.
Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID
21RISK
open ↗GitHub PoC
Offline Python detector for CVE-2026-76475 exposure in Cisco UC inventories, with CSV/JSON input, versioned rules, and auditable reports.
Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities
28RISK
open ↗GitHub PoC
cyb3r-w0lf/CVE-2026-49881
In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the
41RISK
open ↗GitHub PoC
PoC / exploit archive for CVE-2026-77647
SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August
63RISK
open ↗GitHub PoC
Find Plex Media Servers affected by Plex2Shell (CVE-2026-96652 and three more)
Plex Media Server SSRF
83RISK
open ↗GitHub PoC★ 62
CVE-2026-97798 Windows Error Reporting - Command Injection TO SYSTEM
Windows Error Reporting Service Elevation of Privilege Vulnerability
41RISK
open ↗VulnCheck XDB
initial-access
Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52
48RISK
open ↗GitHub PoC
Portable PHP Brotli decoder inventory for WordPress, Drupal and Symfony — CVE-2026-111497
Out-of-Bounds Write in Google Brotli Decoder
70RISK
open ↗GitHub PoC★ 1
Scanner for php2shell (CVE-2026-111497)
Out-of-Bounds Write in Google Brotli Decoder
70RISK
open ↗GitHub PoC
Verification artifacts for 'How I replicated PHP2Shell, and 5 ways we got super lucky' — checkers for every claim: the fix that shipped nowhere, the four-architecture map, the two-gate leak bands, and the blind-fire arithmetic (CVE-2026-109618/109619)
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Is your website affected by HTTP2Shell (CVE-2026-111497)?
Out-of-Bounds Write in Google Brotli Decoder
70RISK
open ↗GitHub PoC
Offline Python detector for CVE-2026-94300 exposure in ISC BIND 9, with edition-aware rules, CSV/JSON inventories, and auditable reports.
Concurrent GSS-TSIG messages corrupt memory
41RISK
open ↗GitHub PoC
PoC / exploit archive for CVE-2026-101767
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported
48RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.