Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
85,037cataloged exploits
39,796CVEs with public exploitation
24,695lab-tested
AllReferência 25,790Exploit-DB 24,487GitHub PoC 16,908VulnCheck XDB 9,820Nuclei 4,504Metasploit 3,528✓ verified onlyrecentpopularrisk
16,343 exploits
GitHub PoC
Device-bound CVE-2026-64560 adaptation for RedMi K80pro miro OS 3.0.304.0
posix-cpu-timers: Prevent UAF caused by non-leader exec() race
41RISK
open ↗GitHub PoC
WP Import Export Lite < 3.9.33 - Authenticated Path Traversal to Sensitive File Disclosure
WP Import Export Lite < 3.9.33 - Authenticated Sensitive File Disclosure via Existing File Import Path Traversal
33RISK
open ↗GitHub PoC
CVE-2026-77179 - Draft or TODO
Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback
48RISK
open ↗GitHub PoC
CVE-2026-82226 - Tickera - Critical 9.8 - Unauthenticated POST /cart/ - PHP Object Injection
WordPress Tickera plugin <= 3.6.0.2 - PHP Object Injection vulnerability
48RISK
open ↗GitHub PoC
CVE-2026-48908 SP Page Builder (Joomla) unauth RCE suite — authorized testing only
Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2
100RISK
open ↗GitHub PoC★ 1
Forensic Analysis and Local Replication of the OpenAI-Artifactory Privilege Escalation Incident (CVE-2026-65616)
Potential privilege escalation to JFrog administrator privileges
41RISK
open ↗GitHub PoC
Educational cyber range for CVE-2026-59827 (Metabase H2 unsafe deserialization / CWE-502). Isolated Docker lab — training only, not for attacking production Metabase.
Metabase: Unsafe Deserialization of H2 Query Results
48RISK
open ↗GitHub PoC
isaca0315/CVE-2026-44840-poc
Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query
41RISK
open ↗GitHub PoC
SangSenimanWartefak/CVE-2026-80467
Advanced Custom Fields: Extended 0.9.2.2 - 0.9.2.6 - Unauthenticated Privilege Escalation via Front-End User Insert Action
41RISK
open ↗GitHub PoC★ 3
CVE-2026-49179: Active Directory WriteSPNScript Command Injection
Windows Active Directory Domain Services Remote Code Execution Vulnerability
41RISK
open ↗GitHub PoC★ 1
CVE-2026-87796 - Multi Uploader for Gravity Forms <= 1.1.9; Unauthorized RCE (CRITICAL 9.8)
Multi Uploader for Gravity Forms <= 1.1.9 - Unauthenticated Arbitrary File Upload via Chunked File Upload
48RISK
open ↗GitHub PoC
CVE-2026-19975 - Draft or TODO
Azuriom CMS Money Transfer ProfileController.php transferMoney toctou
28RISK
open ↗GitHub PoC★ 1
exploit para reverse shell en MCPJamInspector v1.4.2< por endpoint mal configurado
REC in MCPJam inspector due to HTTP Endpoint exposes
75RISK
open ↗GitHub PoC★ 1
SneakyNachos/CVE-2026-85045
Race condition in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside
41RISK
open ↗GitHub PoC★ 1
SneakyNachos/CVE-2026-85048-the-gpu-died
Use after free in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the
41RISK
open ↗GitHub PoC★ 3
Unbounded memory allocation in NanaZip's UFS handler via an attacker-controlled `fs_bsize` field.
NanaZip: Unbounded memory allocation (DoS) in NanaZip UFS parser via unvalidated fs_bsize/fs_fsize superblock fields
28RISK
open ↗GitHub PoC★ 1
CVE-2026-85706 – GitLab Unauth File Read Toolkit (CVSS 10.0) | Red/Blue Team suite for self-managed GitLab CE/EE 18.7–19.3.1. 2 tools: Full Exploit (unauth file read, admin token, mass scan, loot, shell, stealth, SQLite/HTML/JSON output) etc., SafeChecker (version detect, audit, security headers, TLS check, MITRE). Only Use Ethically, Educ. <3
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
100RISK
open ↗GitHub PoC
CVE-2026-85706
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
100RISK
open ↗GitHub PoC
CVE-2026-12793 - JetFormBuilder Unauthorized RCE (CRITICAL 9.8)
JetFormBuilder <= 3.6.2 - Unauthenticated Privilege Escalation via '_jet_engine_booking_form_id' Parameter
48RISK
open ↗GitHub PoC
UVdesk unauth wizard super-admin POC
UVdesk Community Skeleton through 1.1.8 Missing Authentication on the Installation Wizard
28RISK
open ↗GitHub PoC
Issabel pbxapi hard coded JWT RCE POC
Issabel Framework Hard-coded JWT Key RCE via pbxapi/manager/originate
48RISK
open ↗GitHub PoC★ 2
CVE-2026-76460
Cisco Identity Services Engine Authentication Bypass Vulnerability
83RISK
open ↗GitHub PoC★ 1
CVE-2026-87930 Joomla Multi-CVE RCE suite — authorized testing only
MaxSite CMS through 109.6 PHP Object Injection via ci_session
48RISK
open ↗GitHub PoC
A Python-based security tool for checking sudo versions for potential exposure to CVE-2021-3156 (Baron Samedit). Designed for authorized security testing and learning.
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RISK
open ↗GitHub PoC★ 4
PoC for CVE-2026-67401 — cPanel/WHM EmailTrack SQL injection leading to arbitrary file write and root RCE. Includes a self-contained vulnerable lab, SQLi detection, and full exploit chain.
A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root through SQLi in EmailTr
48RISK
open ↗GitHub PoC
Isolated educational FreePBX-compatible cyber range for CVE-2025-57819 (CWE-89/CWE-288). Docker lab — not official Sangoma FreePBX.
FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE
100RISK
open ↗GitHub PoC★ 2
Unbounded memory allocation in NanaZip's UFS handler via an attacker-controlled `fs_bsize` field.
NanaZip: Unbounded memory allocation (DoS) in NanaZip UFS parser via unvalidated fs_bsize/fs_fsize superblock fields
28RISK
open ↗GitHub PoC★ 48
container escape POCs for CVE-2026-80521 and CVE-2026-52910
af_unix: Unlink scc_entry in unix_del_edge().
41RISK
open ↗GitHub PoC
Information on the security content of Apple software updates
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS
33RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.