Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

85,039cataloged exploits

39,796CVEs with public exploitation

24,695lab-tested

All Referência 25,790Exploit-DB 24,487GitHub PoC 16,910VulnCheck XDB 9,820Nuclei 4,504Metasploit 3,528✓ verified onlyrecent popular risk

16,343 exploits

GitHub PoC

CVE-2026-15315, CVE-2026-15316 - Draft or TODO

CVE-2026-15315HIGH15 Sep 2026

Unauthenticated Administrative Authentication Bypass via device_confirm Replay in TP-Link Tapo C120 and C200

41RISK

open ↗

GitHub PoC

fix for not working exploit script on exploitdb (50057.py)

CVE-2009-2265—15 Sep 2026

Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable fil

60RISK

open ↗

GitHub PoC

Authenticated Arbitrary File Upload leading to Remote Code Execution Technical analysis and controlled reproduction of CVE-2026-38526 in Webkul Krayin CRM 2.2.x.

CVE-2026-38526CRITICAL15 Sep 2026

An authenticated arbitrary file upload vulnerability in the /admin/tinymce/upload endpoint of Webkul Krayin CRM v2.2.x a

48RISK

open ↗

GitHub PoC

CVE-2026-76461 - Draft or TODO

CVE-2026-76461CRITICALunder attack15 Sep 2026

Cisco Secure Email Gateway SQL Injection Vulnerability

83RISK

open ↗

GitHub PoC

Tenda Technology Co., Ltd NVR_4H: CH3 v2.1.V27.5.58.6 was discovered to contain a hardcoded cryptographic key.

CVE-2026-79551HIGH15 Sep 2026

Tenda Technology Co., Ltd NVR_4H CH3 v2.1 V27.5.58.6 was discovered to contain a hardcoded cryptographic key.

41RISK

open ↗

GitHub PoC★ 4

CVE-2026-82329 – JFrog Artifactory Auth Bypass Toolkit (CVSS 9.8) | Red/Blue Team suite for self-hosted Artifactory 7.x (111-161). 2 tools: Full Exploit (JWTforge, admin token, user create, mass scan, stealth, interactive menu, resistence, WAF bypass etc.), SafeChecker (version detect, audit, JSON report). 🦾 Use Ethically, Stay Legal :V

CVE-2026-82329CRITICALunder attack15 Sep 2026

Potential authentication bypass leading to administrative access in Artifactory

98RISK

open ↗

GitHub PoC

fevar54/CVE-2026-76461-Detection-Kit-

CVE-2026-76461CRITICALunder attack15 Sep 2026

Cisco Secure Email Gateway SQL Injection Vulnerability

83RISK

open ↗

GitHub PoC

0xf9b6a41ec/CVE-2026-69328

CVE-2026-69328HIGH15 Sep 2026

Windows Storage Elevation of Privilege Vulnerability

41RISK

open ↗

GitHub PoC

e5dfdd568a75282b712b6d93a7a18e12/CVE-2025-24813

CVE-2025-24813CRITICALunder attack15 Sep 2026

Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

100RISK

open ↗

GitHub PoC

isaca0315/CVE-2026-65013-BOLA-IDOR

CVE-2026-65013HIGH15 Sep 2026

Onlook tRPC Insecure Direct Object Reference via multiple procedures

41RISK

open ↗

GitHub PoC

Standalone PoC for CVE-2026-90782: status-clobbering NULL dereference in S2OPC alloc_notification_message_items() (DataChange fails, Event succeeds)

CVE-2026-90782MEDIUM14 Sep 2026

S2OPC through 1.7.3 NULL Pointer Dereference in alloc_notification_message_items()

33RISK

open ↗

GitHub PoC

hands on investigation of the heartbleed vulnerability (CVE-2014-0160).

CVE-2014-0160HIGHunder attack14 Sep 2026

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISK

open ↗

GitHub PoC

POC of cve-2026-52910

CVE-2026-52910HIGH14 Sep 2026

bpf: Free reuseport cBPF prog after RCU grace period.

41RISK

open ↗

GitHub PoC

Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.

CVE-2026-60004CRITICALunder attack14 Sep 2026

Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.

98RISK

open ↗

GitHub PoC

CVE-2026-85706 — GitLab unauthenticated arbitrary file read (CVSS 10.0). Root-cause analysis, vulnerable Docker lab, and PoC.

CVE-2026-85706CRITICALunder attack14 Sep 2026

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

100RISK

open ↗

GitHub PoC

vudangducminh/CVE-2016-5195

CVE-2016-5195HIGHunder attack14 Sep 2026

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISK

open ↗

GitHub PoC★ 1

PoC and write-up for the HackTheBox "Nexus" privilege escalation: root-run Gitea template-sync service vulnerable to path traversal via forged Git objects. Educational use only.

CVE-2026-38526CRITICAL14 Sep 2026

An authenticated arbitrary file upload vulnerability in the /admin/tinymce/upload endpoint of Webkul Krayin CRM v2.2.x a

48RISK

open ↗

GitHub PoC

miniOrange 2FA CVE POC

CVE-2026-77770CRITICAL14 Sep 2026

miniOrange 2FA (Free & Pro) - Unauthenticated Arbitrary Option Deletion via Out-of-Band Email Link Validator

48RISK

open ↗

GitHub PoC

OpenMAIC 1.0.0: Unauthenticated Outbound SSRF to Cloud Metadata Service via Fail-Open Middleware and Environment-Gated Validation Bypass

CVE-2026-86259CRITICAL14 Sep 2026

OpenMAIC before 1.0.1 SSRF via Environment-Gated URL Validation

48RISK

open ↗

GitHub PoC

rh-rahulshetty/log4shell-CVE-2021-44228

CVE-2021-44228CRITICALunder attackransomware14 Sep 2026

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

open ↗

GitHub PoC

e5dfdd568a75282b712b6d93a7a18e12/CVE-2025-32432

CVE-2025-32432CRITICALunder attack14 Sep 2026

Craft CMS Allows Remote Code Execution

100RISK

open ↗

GitHub PoC

CVE-2026-72898 exploit

CVE-2026-72898CRITICALunder attack14 Sep 2026

Metabase SQL injection via password reset endpoint

100RISK

open ↗

GitHub PoC

My implementation of the

CVE-2026-33017CRITICALunder attack14 Sep 2026

Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint

98RISK

open ↗

GitHub PoC

CVE-2026-85706 — GitLab unauthenticated arbitrary file read (CVSS 10.0). Root-cause analysis, vulnerable Docker lab, and PoC.

CVE-2026-85706CRITICALunder attack14 Sep 2026

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

100RISK

open ↗

GitHub PoC

CVE-2026-86218 - N-able N-central Struts BeanUtils Unauthenticated RCE

CVE-2026-86218CRITICALunder attack14 Sep 2026

pre-authentication remote code execution

98RISK

open ↗

GitHub PoC

Knowns 0.30.0: Unauthenticated Header Injection Grants AI Agent Unrestricted Access to Host Filesystem

CVE-2026-88899CRITICAL14 Sep 2026

knowns before 0.31.0 External Control of Agent Working Directory via x-opencode-directory Header

48RISK

open ↗

GitHub PoC

PwnKit - polkit pkexec Local Privilege Escalation <= 0.105-31

CVE-2021-4034HIGHunder attackransomware14 Sep 2026

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISK

open ↗

GitHub PoC

CVE-2026-85706 — GitLab Unauthenticated Arbitrary File Read exploit PoC.

CVE-2026-85706CRITICALunder attack14 Sep 2026

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

100RISK

open ↗

GitHub PoC

Si13NTTT/CVE-2025-32432

CVE-2025-32432CRITICALunder attack14 Sep 2026

Craft CMS Allows Remote Code Execution

100RISK

open ↗

GitHub PoC★ 2

CVE-2019-2215 & DirtyCOW exploit automation + post-root debloat + Magisk modules for Sony BRAVIA KDL-43W800C

CVE-2019-2215HIGHunder attack14 Sep 2026

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

100RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.