Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
87,464cataloged exploits
40,695CVEs with public exploitation
24,696lab-tested
AllReferência 26,426Exploit-DB 24,489GitHub PoC 18,182VulnCheck XDB 10,251Nuclei 4,577Metasploit 3,539✓ verified onlyrecentpopularrisk
87,464 exploits
GitHub PoC
Hassham1/CVE-2026-112866-woo-product-filter-sqli-poc
WordPress Product Filter by WBW plugin <= 3.4.6 - SQL Injection vulnerability
63RISK
open ↗GitHub PoC★ 2
Proof of Concept (PoC) demonstrating Argument Injection in Pillow's Ghostscript call (Pillow < 13.0.0) potentially leading to arbitrary command execution (RCE).
Pillow: Argument Injection in Ghostscript call, potentially leading into RCE
48RISK
open ↗GitHub PoC
CVE-2026-59248
Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS
41RISK
open ↗GitHub PoC
unixreaper/CVE-2026-99999-Research
ipv4: validate checksum_start before completing checksum
48RISK
open ↗GitHub PoC
CVE-2026-85595 — Traefik digestAuth authentication bypass (unknown username => empty HA1). Lab-verified: v3.7.10 bypass, v3.7.11 401.
Traefik before v2.11.55 and v3.0.0 through v3.7.10 Authentication Bypass via digestAuth
63RISK
open ↗GitHub PoC★ 2
Next-generation exploit orchestrator for CVE-2026-109618/619 — adds Cloudflare WAF bypass, flexible target specification (URL/host/port/path/batch), multi-format output (JSON/CSV/table), resume capability, aslr bypass, revers shell, Authored by TESTERXMA.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Patch temporanee per sistemi con versioni di PHP inferiori a 8.2.35 contro CVE-2026-109618 - CVE-2026-109619 - CVE-2026-115560
RCE via OOM corruption
100RISK
open ↗GitHub PoC
PoC for CVE-2026-72708 (blind SQLi) and CVE-2026-109378 (SSRF) in SPIP, both fixed in 4.4.18
SPIP < 4.4.18 Unauthenticated Blind SQL Injection via sitemap.xml.html
41RISK
open ↗GitHub PoC
Non-invasive Python detector for CVE-2026-111497 with Brotli/Node.js version checks, JSON inventories, and CI-ready reports.
Out-of-Bounds Write in Google Brotli Decoder
70RISK
open ↗GitHub PoC★ 9
Agent Skills skill to detect, patch and verify PHP apps affected by PHP2Shell (CVE-2026-109618, CVE-2026-109619) or outdated PHP. Works with Claude Code, Codex, Copilot, Cursor, Gemini CLI, OpenCode.
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 1
Security backport toolkit for CVE-2026-111497 on Ubuntu 24.04, featuring upstream patch verification, custom Debian package builds, and offline remediation procedures.
Out-of-Bounds Write in Google Brotli Decoder
70RISK
open ↗GitHub PoC
在 REDMI K90 Max（代号 prague / OS4.0.0.14）上，从手机端一键开一个临时 root。利用 CVE-2026-64560（posix-cpu-timers UAF）加载 KernelSU LKM，重启即失效。不需要电脑、不刷机、不解锁 Bootloader。
posix-cpu-timers: Prevent UAF caused by non-leader exec() race
41RISK
open ↗GitHub PoC
Exploit & analysis for PHP2Shell (CVE-2026-109618 / CVE-2026-109619). Demonstrating memory disclosure, ASLR bypass, and RCE via session.upload_progress memory bailout dangling pointers.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
asvorg/CVE-2026-116191-poc
Rclone before 1.75.2 Path Traversal via serve webdav MKCOL
41RISK
open ↗GitHub PoC
CVE-2026-64849 — MLflow SSRF
MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)
98RISK
open ↗GitHub PoC★ 1
Bigfix PHP Vulnerability Scanner Content (CVE-2026-109618, CVE-2026-109619) for Windows, Linux and Mac.
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 1
Exact-build PHP 5.6 research and reproducible labs for CVE-2026-109618 and CVE-2026-109619
RCE via OOM corruption
100RISK
open ↗GitHub PoC
CVE-2026-83548 — SonicWall SMA1000 Work Place pre-auth SSRF
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended altern
93RISK
open ↗GitHub PoC
php:7.4.33-fpm-alpine + official PHP patch for CVE-2026-109618/109619
RCE via OOM corruption
100RISK
open ↗GitHub PoC
lucasbarros097/PHP2Shell__CVE-2026-109618__CVE2026-109619
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 1
A read-only Site Health check that compares the PHP version your site is running with the releases that fix PHP2Shell (CVE-2026-109618 and CVE-2026-109619)
RCE via OOM corruption
100RISK
open ↗GitHub PoC
C.A.S-Exploit — Python-based security research and proof-of-concept toolkit for CVE-2017-5689 (Intel AMT authentication bypass), featuring Shodan discovery, HTTP/WS-Management testing, batch scanning, and vulnerability logging.
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Mana
100RISK
open ↗GitHub PoC★ 3
vivo/IQOO (kernel 6.1.145) CVE-2026-98260 POSIX CPU timer UAF LPE
exec: Cleanup POSIX timers right after de_thread()
41RISK
open ↗GitHub PoC
Quarterly security briefing research notes and remediation tracking for Log4Shell (CVE-2021-44228).
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
open ↗GitHub PoC★ 1
CVE-2026-109618 PHP session.upload_progress detection & authorized testing toolkit
RCE via OOM corruption
100RISK
open ↗GitHub PoC
PHP2Shell Monitor - Real-time detection for CVE-2026-109618/109619 exploitation attempts
RCE via OOM corruption
100RISK
open ↗GitHub PoC
lushinshang/cve-2026-111497-http2shell-guide
Out-of-Bounds Write in Google Brotli Decoder
70RISK
open ↗GitHub PoC
Non-invasive Python detector for CVE-2026-111497 with Brotli/Node.js version checks, JSON inventories, and CI-ready reports.
Out-of-Bounds Write in Google Brotli Decoder
70RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.