Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
84,600cataloged exploits
39,734CVEs with public exploitation
24,695lab-tested
AllReferência 25,742Exploit-DB 24,486GitHub PoC 16,618VulnCheck XDB 9,736Nuclei 4,493Metasploit 3,525✓ verified onlyrecentpopularrisk
16,343 exploits
GitHub PoC
CVE-2026-8932 PoC - incomplete mTLS config matching in conn reuse
incomplete mTLS config matching in conn reuse
41RISK
open ↗GitHub PoC★ 1
jvidhan/autofs-cve-2026-84568
A path traversal issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS S
41RISK
open ↗GitHub PoC
ZTE SmartLife security findings leading to account takeover: 100K+ Google Play downloads and CVE-2026-86552 through CVE-2026-86555.
A vulnerability that skips email ownership verification for account registration in ZTE SmartLife APP
33RISK
open ↗GitHub PoC★ 1
DJI Drone Cleartext Bluetooth Transmission of Wi-Fi PSK and Session UUID — Proof of Concept for CVE-2026-77812.
Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE
48RISK
open ↗GitHub PoC
Unauthenticated Arbitrary Shortcode Execution
WP Recipe Maker <= 10.8.1 - Unauthenticated Arbitrary Shortcode Execution via Recipe Comment Content
48RISK
open ↗GitHub PoC
mfahdk/CVE-2026-39987_RCE_PoC
marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass
100RISK
open ↗GitHub PoC
shambhaviM18/cve-2019-15107-lab
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera
100RISK
open ↗GitHub PoC
CVE-2026-36213: MEmu Android Emulator 9.2.7.0 Local Privilege Escalation
An issue in Microvirt MEmu Android Emulator 9.2.7.0 allows a local attacker to escalate privileges via the MemuService.e
41RISK
open ↗GitHub PoC★ 8
Proof-of-concept and instrumented reproduction harness for CVE-2026-28609, an out-of-bounds write in Android's MatroskaExtractor reachable via a crafted WebM file with a big-endian PCM audio track.
In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting. This could lead to re
41RISK
open ↗GitHub PoC
CVE-2026-36213: MEmu Android Emulator 9.2.7.0 Local Privilege Escalation
An issue in Microvirt MEmu Android Emulator 9.2.7.0 allows a local attacker to escalate privileges via the MemuService.e
41RISK
open ↗GitHub PoC★ 19
DJI Drone DUML Command Injection over Bluetooth — Proof of Concept for CVE-2026-78306
DJI Drone Bluetooth Interface Unauthenticated DUML Command Execution
41RISK
open ↗GitHub PoC
CVE-2021-43798 Grafana Unauthenticated Path Traversal - Security Lab | Shivam Gupta | 23104003
Grafana path traversal
100RISK
open ↗GitHub PoC
A PoC for CVE-2026-71217
Iperf3: iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustion
41RISK
open ↗GitHub PoC
o-sec/CVE-2026-41452-poc
Krayin CRM 2.2.4 Missing Authentication via install/api/admin-config-setup
63RISK
open ↗GitHub PoC★ 2
CVE-2026-88854 — OrdaSoft Joomla Gallery unauth SQLi PoC (check / mass scan / EXTRACTVALUE read)
Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7
48RISK
open ↗GitHub PoC★ 2
D-Link R95 (BE9500) DHMAPI SetTimeSettings command injection -> root RCE PoC (CVE-2026-93958); for authorized testing
D-Link R95 DHMAPI ssi system os command injection
48RISK
open ↗GitHub PoC
CVE-2026-85721: offline checker for org.asynchttpclient:async-http-client against all 26 repository-level advisories. 3.x is fixed in 3.0.14. The 2.x line is end of life - its last release 2.16.1 is still affected by 5 advisories that will not be fixed. 9 of the 26 are still missing from the GitHub Advisory Database (as of 2026-10-12).
AsyncHttpClient: Unbounded HTTP/1.1 response decompression enables a decompression-bomb denial of service
41RISK
open ↗GitHub PoC
CVE-2026-81648 - WordPress - CryptoPayment Gateway - Critical 10.0 - Unauthenticated POST /wp-content/plugins/cryptopayment-gateway/vendor/cryptd/ajax.php - Arbitrary File Deletion
CryptoPayment Gateway 1.2.1 - 1.2.2 - Unauthenticated Arbitrary File Deletion and Settings Update via Unguarded AJAX Router
48RISK
open ↗GitHub PoC
CVE-2026-79752 - CakePHP - Critical 9.2 - Unauthenticated GET /?type= - SQL Injection
CakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injection
48RISK
open ↗GitHub PoC
IDOR/BOLA in Events Manager <= 7.4.3 REST ticket update endpoint — CVE-2026-93661
Events Manager < 7.4.5 - Contributor+ Arbitrary Ticket Overwrite via IDOR
28RISK
open ↗GitHub PoC★ 1
CVE-2026-32475 — unauthenticated arbitrary file upload in Elementor Pro <= 4.2.1 (CVSS 9.0, CWE-434). PoC for authorised testing.
WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability
63RISK
open ↗GitHub PoC
CVE-2026-13447 - WordPress - inspireui - Critical 9.8 - Unauthenticated POST /wp-json/api/flutter_user/firebase_sms_v2 - Authentication Bypass
MStore API <= 4.20.0 - Unauthenticated Authentication Bypass via 'id_token' Parameter JWT Forgery
48RISK
open ↗GitHub PoC
Stored XSS in Concrete CMS Community Store leads to admin dashboard takeover
Concrete CMS Community Store before 2.7.8 Stored XSS
41RISK
open ↗GitHub PoC
abhaybansal16/cve-2025-55182-lab
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗GitHub PoC★ 1
CVE-2026-78159 - stellarwp - Critical 9.8 - Unauthenticated POST /wp-comments-post.php - Remote Code Execution
The Events Calendar <= 6.17.3 - Unauthenticated Code Injection to Remote Code Execution via Widget 'classes' Map Callable Invocation
48RISK
open ↗GitHub PoC★ 2
PoC for CVE-2026-89274: unauthenticated arbitrary shortcode execution in WP Recipe Maker ≤10.8.1 via recipe rating comments (JSON-LD). Python check/exploit/verify.
WP Recipe Maker <= 10.8.1 - Unauthenticated Arbitrary Shortcode Execution via Recipe Comment Content
48RISK
open ↗GitHub PoC
PoC for CVE-2026-84434: unauthenticated arbitrary file upload in Gravity Forms ≤3.1.0.4 via hidden File Upload fields. Python check/exploit/mass scan.
Gravity Forms <= 3.1.0.4 - Unauthenticated Arbitrary File Upload via Hidden File Upload Field
63RISK
open ↗GitHub PoC★ 4
CVE-2026-92229 — Forminator ≤1.57.2 unauth shortcode exec (current_url / quiz AJAX). Python 3 PoC.
Forminator Forms <= 1.57.2 - Unauthenticated Arbitrary Shortcode Execution via 'current_url' Parameter
48RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.