Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
84,945cataloged exploits
39,790CVEs with public exploitation
24,695lab-tested
AllReferência 25,790Exploit-DB 24,487GitHub PoC 16,900VulnCheck XDB 9,736Nuclei 4,504Metasploit 3,528✓ verified onlyrecentpopularrisk
16,343 exploits
GitHub PoC★ 1
Trained to Escalate: Forensic Analysis and Local Replication of RLHF-Induced Privilege Escalation in AI Agents (CVE-2026-65616)
Potential privilege escalation to JFrog administrator privileges
41RISK
open ↗GitHub PoC
CVE-2026-18937 - Broken Link Checker - Critical 9.0 - Unauthenticated GET /?page_id=4&shortcode_tags[blcpoc]=po... - Remote Code Execution
Broken Link Checker < 2.4.12 - Unauthenticated RCE via Query Variable Injection
48RISK
open ↗GitHub PoC
CVE-2026-77635 - CakePHP - Critical 9.2 - Unauthenticated GET /?path= - SQL Injection
CakePHP: FunctionsBuilder::jsonValue() vulerable to SQL injection with PostgresDriver
48RISK
open ↗GitHub PoC
Standalone authorized universal HTTP PoC for CVE-2026-75157
Apache Airflow: Asset queued-events DELETE endpoints gated on Dag READ instead of Dag EDIT (asset-triggered scheduling suppression)
41RISK
open ↗GitHub PoC
CVE-2026-19952 - DynamiApps - High 7.5 - Unauthenticated POST /wp-admin/admin-ajax.php - Arbitrary File Deletion
Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Arbitrary File Deletion via Path Traversal via custom_directory_name Merge Tag
41RISK
open ↗GitHub PoC
abhaybansal16/cve-2025-55182-lab
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗GitHub PoC★ 1
CVE-2026-78159 - stellarwp - Critical 9.8 - Unauthenticated POST /wp-comments-post.php - Remote Code Execution
The Events Calendar <= 6.17.3 - Unauthenticated Code Injection to Remote Code Execution via Widget 'classes' Map Callable Invocation
48RISK
open ↗GitHub PoC
PoC for CVE-2026-84434: unauthenticated arbitrary file upload in Gravity Forms ≤3.1.0.4 via hidden File Upload fields. Python check/exploit/mass scan.
Gravity Forms <= 3.1.0.4 - Unauthenticated Arbitrary File Upload via Hidden File Upload Field
63RISK
open ↗GitHub PoC★ 1
CVE-2026-77991 - joomlaeventmanager.net - Critical - Privileged POST /administrator/index.php - Remote Code Execution
Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager < 5.0.1
48RISK
open ↗GitHub PoC
MS09-050 (CVE-2009-3103) SMBv2 srv2.sys buffer overflow exploit with built-in scanner, arch auto-detection, and standalone reverse shell payloads for x86/x64. No Metasploit required.
Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Window
60RISK
open ↗GitHub PoC
Enumerate Grafana plugin enumeration PoC for CVE-2021-43798
Grafana path traversal
100RISK
open ↗GitHub PoC
CVE-2026-75827 - getgrav - High 8.8 - Unauthenticated GET /poc-form - Arbitrary File Write
Grav before 2.0.15 Arbitrary File Write via error_log
48RISK
open ↗GitHub PoC
Tracking TUNderflow (CVE-2026-81000), the Linux kernel TUN/TAP receive-headroom underflow
net: tun: bound receive headroom
41RISK
open ↗GitHub PoC
Security advisory and research notes for CVE-2026-18464 affecting the WP Maps Pro WordPress plugin.
WP Maps Pro < 6.1.3 - Unauthenticated Denial of Service
41RISK
open ↗GitHub PoC
Security advisory and research notes for CVE-2026-16265 affecting the WP Maps WordPress plugin.
WP Maps < 4.9.7 - Subscriber+ Denial of Service
33RISK
open ↗GitHub PoC
WP Import Export Lite < 3.9.33 - Authenticated Path Traversal to Sensitive File Disclosure
WP Import Export Lite < 3.9.33 - Authenticated Sensitive File Disclosure via Existing File Import Path Traversal
33RISK
open ↗GitHub PoC
Log4Shell (CVE-2021-44228) security review documentation and advisory triage
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
open ↗GitHub PoC
CVE-2026-82226 - Tickera - Critical 9.8 - Unauthenticated POST /cart/ - PHP Object Injection
WordPress Tickera plugin <= 3.6.0.2 - PHP Object Injection vulnerability
48RISK
open ↗GitHub PoC
Tracking PPPoEject (CVE-2026-68121), the Linux kernel PPPoE sendmsg use-after-free
pppoe: reload header pointer after dev_hard_header()
41RISK
open ↗GitHub PoC★ 565
CVE-2026-63030 & CVE-2026-60137 RCE chain proof-of-concept
WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
98RISK
open ↗GitHub PoC★ 1
CVE-2026-84753 - WPFunnels - Critical 9.8 - Unauthenticated POST /?rest_route=/mint-mail/v1/mint-form-... - PHP Object Injection
WordPress Mail Mint plugin <= 1.31.0 - PHP Object Injection vulnerability
48RISK
open ↗GitHub PoC
CVE-2026-45140 - chamilo - Critical 9.8 - Unauthenticated POST /plugin/CStudio/editor/import-project... - Remote Code Execution
Chamilo LMS CStudio upload flow allows unauthenticated remote code execution
48RISK
open ↗GitHub PoC
Tracking the Unbound CVE-2026-81642 DNSKEY digest heap overflow
Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY
48RISK
open ↗GitHub PoC
CVE-2026-91843 - Draft or TODO
Stack overflow in login process to the Security Management and Log Servers
48RISK
open ↗GitHub PoC
Tracking DiagSpill (CVE-2026-74469), the Linux kernel SCTP sock_diag heap overflow
sctp: prevent peer transport count overflow
41RISK
open ↗GitHub PoC★ 2
CVE-2026-93453 Exploit — SOGo password reset link poisoning via attacker-controlled Origin header, enabling password reset token interception and account takeover.
SOGo before 5.12.11 Password Reset Token Interception via Origin Header
41RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.