Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
87,464cataloged exploits
40,695CVEs with public exploitation
24,696lab-tested
AllReferência 26,426Exploit-DB 24,489GitHub PoC 18,182VulnCheck XDB 10,251Nuclei 4,577Metasploit 3,539✓ verified onlyrecentpopularrisk
87,464 exploits
GitHub PoC★ 2
Offline Brotli / HTTP2Shell (CVE-2026-111497) exposure and inventory checker across verified ecosystems. Python 3.10+, no dependencies or exploit payloads.
Out-of-Bounds Write in Google Brotli Decoder
70RISK
open ↗GitHub PoC★ 6
Xiaomi Pad7S Pro12.5在OS4.0.0.14.XOTCNXM利用CVE-2026-98260获取ROOT权限并加载KernelSU。
exec: Cleanup POSIX timers right after de_thread()
41RISK
open ↗VulnCheck XDB
local
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RISK
open ↗GitHub PoC★ 1
Offline Brotli / HTTP2Shell (CVE-2026-111497) exposure and inventory checker across verified ecosystems. Python 3.10+, no dependencies or exploit payloads.
Out-of-Bounds Write in Google Brotli Decoder
70RISK
open ↗GitHub PoC★ 1
Unauthenticated RCE in PHP via session.upload_progress use-after-free (CVE-2026-109618 / CVE-2026-109619)
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 3
Check whether a website is affected by PHP2Shell (CVE-2026-109618 / CVE-2026-109619)
RCE via OOM corruption
100RISK
open ↗GitHub PoC
CVE-2026-90931: LaraDashboard stored XSS via SVG upload — bilingual analysis and safe PoC
LaraDashboard 0.9.0 through 1.2.2 Stored XSS via SVG Upload
33RISK
open ↗GitHub PoC★ 1
CVE-2026-90932: LaraDashboard path traversal to arbitrary file deletion/write — bilingual analysis and safe PoC
LaraDashboard 0.9.2 through 1.2.2 Path Traversal RCE
41RISK
open ↗GitHub PoC★ 1
CVE-2026-101767-POC
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported
48RISK
open ↗GitHub PoC
CVE-2026-101767
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported
48RISK
open ↗GitHub PoC
En este repositorio voy subir la explotacion de la vulnerablildad CVE-2017-0143 con el exploit eternalblue.
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RISK
open ↗VulnCheck XDB
info-leak
Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Trave
60RISK
open ↗VulnCheck XDB
initial-access
The Ruby SAML library vulnerable to a SAML authentication bypass via Incorrect XPath selector
53RISK
open ↗VulnCheck XDB
info-leak
YouDataSum CPAS Audit Management System V4 Path Traversal via downPlugs fileId
41RISK
open ↗GitHub PoC
CVE-2026-75650 (StyleSmuggler): unauthenticated RCE via template injection in Magento Open Source / Adobe Commerce 2.4.4–2.4.9 — b63 showcase, lab-verified with patched-build negative test
Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
100RISK
open ↗GitHub PoC
CVE-2026-97229 an external exploit for GitLab CI lint regex RCE. It is used only against a live GitLab target with permission. It creates a project, pushes a malicious CI configuration, triggers the CI lint endpoint, and receives command output through an HTTP callback. This is for authorized security research only.
Integer Overflow or Wraparound in GitLab
100RISK
open ↗GitHub PoC
Aqui voy a colocar el paso a paso de la post explotacion de la vulnerabilidad CVE-2017-0143
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RISK
open ↗GitHub PoC
Aqui voy a colocar el paso a paso de la post explotacion de la vulnerabilidad CVE-2017-0143
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RISK
open ↗GitHub PoC
Local reproduction lab for PHP2Shell (CVE-2026-109618 / CVE-2026-109619): PHP 8.5.11 source-built mod_php target, chunked OOM trigger harness, findings + mitigations. Loopback only.
RCE via OOM corruption
100RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.