Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
85,038cataloged exploits
39,796CVEs with public exploitation
24,695lab-tested
AllReferência 25,790Exploit-DB 24,487GitHub PoC 16,909VulnCheck XDB 9,820Nuclei 4,504Metasploit 3,528✓ verified onlyrecentpopularrisk
16,343 exploits
GitHub PoC
CVE-2026-5430 - Draft or TODO
Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover
78RISK
open ↗GitHub PoC
Langflow 1.10.0 urllib SSRF
Incomplete Security Scanner Blocklist Enables Network-Based Code Execution
48RISK
open ↗GitHub PoC★ 8
Reliable CVE-2025-32432 pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail
Craft CMS Allows Remote Code Execution
100RISK
open ↗GitHub PoC
CVE-2014-0160 (Heartbleed) lab: vulnerable OpenSSL 1.0.1f in Docker, a memory-leak PoC, and a demo. Authorised lab use only.
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RISK
open ↗GitHub PoC★ 1
Issabel pbxapi hard coded JWT RCE POC
Issabel Framework Hard-coded JWT Key RCE via pbxapi/manager/originate
48RISK
open ↗GitHub PoC★ 48
container escape POCs for CVE-2026-80521 and CVE-2026-52910
af_unix: Unlink scc_entry in unix_del_edge().
41RISK
open ↗GitHub PoC★ 1
Proof-of-Concept for CVE-2026-92680, the insecurely protected credentials vulnerability affecting Araxis Merge.
Araxis Merge insufficiently protected credentials
33RISK
open ↗GitHub PoC
shivammittal2403/cve-2026-80428-ctf
ILIAS PHP Object Injection via Shibboleth Logout
48RISK
open ↗GitHub PoC
0xgh0stri13y/CVE-2026-109519
YouTransfer Template Rendering template path traversal
33RISK
open ↗GitHub PoC
Information on the security content of Apple software updates
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS
33RISK
open ↗GitHub PoC★ 10
research on finding the bug and fix of CVE-2026-84616 and CVE-2026-84607
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS
33RISK
open ↗GitHub PoC★ 1
My first CVE
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoi
33RISK
open ↗GitHub PoC
CVE-2026-65374 - Draft or TODO
A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Seq
41RISK
open ↗GitHub PoC
FabianCH20/SOC335---CVE-2024-49138-Exploitation-Detected
Windows Common Log File System Driver Elevation of Privilege Vulnerability
76RISK
open ↗GitHub PoC★ 4
CVE-2026-12793 PoC — JetFormBuilder ≤3.6.2 unauth Register User / admin account creation
JetFormBuilder <= 3.6.2 - Unauthenticated Privilege Escalation via '_jet_engine_booking_form_id' Parameter
48RISK
open ↗GitHub PoC★ 526
A cPanel and WHM authentication bypassing tool
WebPros cPanel and WHM Authentication Bypass via Login Flow
100RISK
open ↗GitHub PoC★ 2
spip exploits for CVE-2026-72708, CVE-2026-72709, CVE-2026-72710
SPIP < 4.4.18 Unauthenticated Blind SQL Injection via sitemap.xml.html
41RISK
open ↗GitHub PoC
rootxn/CVE-2026-12793
JetFormBuilder <= 3.6.2 - Unauthenticated Privilege Escalation via '_jet_engine_booking_form_id' Parameter
48RISK
open ↗GitHub PoC★ 3
Proof of Concept and Write-up for CVE-2026-56096 (Blind Parameter Injection in TYPO3 EXT:solr)
Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
33RISK
open ↗GitHub PoC
avergnaud/flight-sql-jdbc-driver-cve-2026-54512
jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation
41RISK
open ↗GitHub PoC
CVE-2026-15315, CVE-2026-15316 - Draft or TODO
Unauthenticated Administrative Authentication Bypass via device_confirm Replay in TP-Link Tapo C120 and C200
41RISK
open ↗GitHub PoC
Testing for CVE-2025-8191
macrozheng mall Swagger UI index.html cross site scripting
33RISK
open ↗GitHub PoC★ 4
CVE-2026-82329 – JFrog Artifactory Auth Bypass Toolkit (CVSS 9.8) | Red/Blue Team suite for self-hosted Artifactory 7.x (111-161). 2 tools: Full Exploit (JWTforge, admin token, user create, mass scan, stealth, interactive menu, resistence, WAF bypass etc.), SafeChecker (version detect, audit, JSON report). 🦾 Use Ethically, Stay Legal :V
Potential authentication bypass leading to administrative access in Artifactory
98RISK
open ↗GitHub PoC
fix for not working exploit script on exploitdb (50057.py)
Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable fil
60RISK
open ↗GitHub PoC
Tenda Technology Co., Ltd NVR_4H: CH3 v2.1.V27.5.58.6 was discovered to contain a hardcoded cryptographic key.
Tenda Technology Co., Ltd NVR_4H CH3 v2.1 V27.5.58.6 was discovered to contain a hardcoded cryptographic key.
41RISK
open ↗GitHub PoC
isaca0315/CVE-2026-65013-BOLA-IDOR
Onlook tRPC Insecure Direct Object Reference via multiple procedures
41RISK
open ↗GitHub PoC★ 3
Langflow 1.10.0 urllib SSRF POC
Incomplete Security Scanner Blocklist Enables Network-Based Code Execution
48RISK
open ↗GitHub PoC
0xf9b6a41ec/CVE-2026-69328
Windows Storage Elevation of Privilege Vulnerability
41RISK
open ↗GitHub PoC
fevar54/CVE-2026-76461-Detection-Kit-
Cisco Secure Email Gateway SQL Injection Vulnerability
83RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.