Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
87,464cataloged exploits
40,695CVEs with public exploitation
24,696lab-tested
AllReferência 26,426Exploit-DB 24,489GitHub PoC 18,182VulnCheck XDB 10,251Nuclei 4,577Metasploit 3,539✓ verified onlyrecentpopularrisk
87,464 exploits
GitHub PoC
CVE-2026-75650 (StyleSmuggler): unauthenticated RCE via template injection in Magento Open Source / Adobe Commerce 2.4.4–2.4.9 — b63 showcase, lab-verified with patched-build negative test
Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
100RISK
open ↗VulnCheck XDB
initial-access
Laravel TokenGuard authentication bypass through non-string API credentials
63RISK
open ↗GitHub PoC★ 1
This was the exploit released by Offsec for CVE-2026-109618 on 23rd October 2026. Source: https://www.exploit-db.com/exploits/52704
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Detection-only triage scanner for PHP2Shell CVE-2026-109618 / CVE-2026-109619: PHP version fingerprinting, SAPI detection, and local php.ini audit. No exploit payloads.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
This is a Exploit Code For CVE-2021-3560 - Polkit Privilege Escalation Develop using Bash Language.
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RISK
open ↗GitHub PoC
NXP Semiconductors USB middleware <2.13.0 contains an out-of-bounds read vulnerability in USB_DeviceCdcRndisSetCommand() that trusts a host-supplied informationBufferOffset.
NXP MCUXpresso SDK USB Middleware before 2.13.0 RNDIS Out-of-Bounds Read
33RISK
open ↗GitHub PoC
Reproducible local Docker lab for CVE-2026-109618 PHP-FPM validation
RCE via OOM corruption
100RISK
open ↗GitHub PoC
CVE-2020-25213 - Unauthenticated RCE exploit for WP File Manager plugin (≤ 6.0) | Educational purposes only
The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitra
100RISK
open ↗GitHub PoC
Quarterly security briefing research notes and remediation tracking for Log4Shell (CVE-2021-44228).
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
open ↗GitHub PoC★ 9
A deliberately limited, read-only security scanner for assessing exposure to CVE-2026-109618 (RFC 1867 multipart OOM memory corruption) and CVE-2026-109619 (stale global state use-after-free) in PHP deployments.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Detection-only exposure scanner for PHP2Shell (CVE-2026-109618/109619): finds PHP across repositories, hosts, a network perimeter, and AWS, and grades each install by version and config without triggering the bug.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
php:8.0.30-fpm-alpine + official PHP patch for CVE-2026-109618/109619
RCE via OOM corruption
100RISK
open ↗GitHub PoC
CVE-2026-116105 - HeyCyan App 1.0.103 (Android) transmissao em texto claro / cleartext transmission (CWE-319) - VulDB VDB-426173
HeyCyan App Network Security Configuration AndroidManifest.xml cleartext transmission
33RISK
open ↗GitHub PoC★ 3
Curated IoCs, detection engineering rules, and automated threat intel feeds for PHP2Shell (CVE-2026-109618 & CVE-2026-109619).
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 1
Isolated Docker adversary-emulation lab: PHP2Shell (CVE-2026-109618/619, CVE-2026-115560) exploit chains, 11-scenario patch & WAF audit, Sliver C2, Cloudflare Quick Tunnel + Tor egress, guided mitigation validation.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Fork of datfooldive/DFRoot (DirtyFrag CVE-2026-43284, ReSukiSU) + GitHub Actions APK build
xfrm: esp: avoid in-place decrypt on shared skb frags
78RISK
open ↗GitHub PoC★ 1
Bigfix PHP Vulnerability Scanner Content (CVE-2026-109618, CVE-2026-109619) for Windows, Linux and Mac.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
lushinshang/cve-2026-111497-http2shell-guide
Out-of-Bounds Write in Google Brotli Decoder
70RISK
open ↗GitHub PoC
Check PHP for PHP2Shell (CVE-2026-109618, CVE-2026-109619): fixed PHP and Ubuntu/Debian/AlmaLinux packages, plus a read-only version check script.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
This is a Docker Image of php:7.4-fpm which is **CVE-2026-109618-109691-patched**.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
在 REDMI K90 Max（代号 prague / OS4.0.0.14）上，从手机端一键开一个临时 root。利用 CVE-2026-64560（posix-cpu-timers UAF）加载 KernelSU LKM，重启即失效。不需要电脑、不刷机、不解锁 Bootloader。
posix-cpu-timers: Prevent UAF caused by non-leader exec() race
41RISK
open ↗GitHub PoC★ 2
PoC for CVE-2026-111497, a buffer overflow in Google Brotli 1.0.3–1.2.0 that may cause memory corruption, data disclosure, DoS, or RCE when processing crafted compressed data.
Out-of-Bounds Write in Google Brotli Decoder
70RISK
open ↗GitHub PoC
moprius/CVE-2026-112900-Pillow-PoC
Pillow: Argument Injection in Ghostscript call, potentially leading into RCE
48RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.