Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

85,039cataloged exploits

39,796CVEs with public exploitation

24,695lab-tested

All Referência 25,790Exploit-DB 24,487GitHub PoC 16,910VulnCheck XDB 9,820Nuclei 4,504Metasploit 3,528✓ verified onlyrecent popular risk

16,900 exploits

GitHub PoC

CVE-2026-59358 - Cloud Foundry UAA - High - Remote - Privilege leftover - user PKCE token as client_credentials Bearer

CVE-2026-59358HIGH07 Oct 2026

UAA OAuth Token Endpoint Vulnerability allows user access token reuse for client_credentials grant type

41RISK

open ↗

GitHub PoC

Benign, offline reproduction of CVE-2026-93355 — LiteLLM unverified-email JWT account takeover (runs LiteLLM's real code)

CVE-2026-93355HIGH07 Oct 2026

LiteLLM Weak JWT Authentication via Email-Based User Lookup

41RISK

open ↗

GitHub PoC

Hunt-Benito/the-cookie-in-the-error-message-cve-2026-102489-zammad-session-hijack-to-rce

CVE-2026-102489HIGHunder attack07 Oct 2026

Undisclosed RCE in Zammad v6.3 and higher

71RISK

open ↗

GitHub PoC

0xCyp1337/CVE-2026-81780

CVE-2026-81780CRITICAL07 Oct 2026

WordPress Hash Form plugin <= 1.4.2 - Arbitrary File Upload vulnerability

48RISK

open ↗

GitHub PoC

sungue1/CVE-2025-29927

CVE-2025-29927CRITICAL07 Oct 2026

Authorization Bypass in Next.js Middleware

85RISK

open ↗

GitHub PoC

cve-2026-87902 lab

CVE-2026-87902HIGHunder attack07 Oct 2026

An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph

98RISK

open ↗

GitHub PoC

DirtyFrag CVE-2026-43284 research for 5.4-qgki devices

CVE-2026-43284HIGH07 Oct 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

78RISK

open ↗

GitHub PoC★ 1

Authentication Bypass and Remote Code Execution in Remote Access and Site-to-Site VPN

CVE-2026-85102CRITICALunder attack07 Oct 2026

Improper Certificate Validation in Quantum Security Gateway

90RISK

open ↗

GitHub PoC★ 4

Independent PoC and reproducible lab for CVE-2026-97332 — User Private Files < 2.2.0 unauthenticated private file disclosure on WordPress Multisite.

CVE-2026-97332MEDIUM07 Oct 2026

User Private Files < 2.2.0 - Unauthenticated Private File Disclosure via .htaccess Rewrite Rule Bypass (Multisite)

33RISK

open ↗

GitHub PoC

CVE-2026-102422 POC

CVE-2026-102422CRITICAL07 Oct 2026

shell-quote `quote()` command injection via a line terminator in a token after a `{ comment }` token

48RISK

open ↗

GitHub PoC

DOS infinite-loop Vulnerability POC

CVE-2026-102253HIGH07 Oct 2026

iperf3 < 3.22 UDP Receive Worker Infinite Loop DoS

41RISK

open ↗

GitHub PoC★ 1

CVE-2026-105844 — Payload CMS @payloadcms/plugin-import-export <3.88.0 unauth prototype pollution (CWE-1321, CVSS 4.0 9.3). PoCbit PoC: POST /api/exports/export-preview fields __proto__.overrideAccess → ACL bypass / data leak. check/exploit/mass. Fix 3.88.0+. https://pocbit.org/pocs/cve-2026-105844

CVE-2026-105844CRITICAL07 Oct 2026

Payload: Prototype pollution in Payload Import Export plugin

48RISK

open ↗

GitHub PoC

Atlassian Arbitrary File Read

CVE-2026-21589CRITICALunder attack07 Oct 2026

This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft

98RISK

open ↗

GitHub PoC★ 7

CVE-2026-21589 detector for Atlassian Data Center webresource traversal. Pre-auth webroot file read confirm for Jira, Confluence and Bitbucket.

CVE-2026-21589CRITICALunder attack07 Oct 2026

This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft

98RISK

open ↗

GitHub PoC★ 2

Privilege Escalation vulnerability

CVE-2026-96451HIGH07 Oct 2026

WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability

41RISK

open ↗

GitHub PoC★ 3

CVE-2026-13043 - Exploiting Panda / WatchGuard pskmad.sys authentication bypass for privileged IOCTL access, MSR disclosure and arbitrary process memory reads.

CVE-2026-13043CRITICAL07 Oct 2026

WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access

48RISK

open ↗

GitHub PoC

Clean Login < 1.19 - Unauthenticated CAPTCHA Bypass via Empty Session Comparison

CVE-2026-90977MEDIUM07 Oct 2026

Clean Login < 1.19 - Unauthenticated CAPTCHA Bypass via Empty Session Comparison

33RISK

open ↗

GitHub PoC★ 1

Smarty is vulnerable to code injection through template inheritance. Crafted assigned data can inject a forged SmartyNocache marker into regenerated PHP cache files, potentially allowing attackers to execute arbitrary PHP code. The issue affects Smarty 4.5.7 and earlier, and 5.8.4 and earlier.

CVE-2026-82531CRITICAL07 Oct 2026

Smarty before 4.5.8 and 5.x before 5.8.5 PHP Code Injection via extends: Inheritance Cache

48RISK

open ↗

GitHub PoC

在AI辅助下利用cve-2019-2215 完成OPPO A77t提权

CVE-2019-2215HIGHunder attack07 Oct 2026

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

100RISK

open ↗

GitHub PoC

MCPJam Inspector Remote Code Execution

CVE-2026-23744CRITICAL07 Oct 2026

REC in MCPJam inspector due to HTTP Endpoint exposes

75RISK

open ↗

GitHub PoC

CVE-2026-21589

CVE-2026-21589CRITICALunder attack07 Oct 2026

This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft

98RISK

open ↗

GitHub PoC

CVE-2021-38759 — Raspberry Pi OS Default Credentials Exploit

CVE-2021-38759—07 Oct 2026

Raspberry Pi OS through 5.10 has the raspberry default password for the pi account. If not changed, attackers can gain a

28RISK

open ↗

GitHub PoC★ 179

CVE-2026-63030 + CVE-2026-60137 exploit RCE chain

CVE-2026-63030CRITICALunder attack07 Oct 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

98RISK

open ↗

GitHub PoC

BimBoxH4/CVE-2026-21589

CVE-2026-21589CRITICALunder attack07 Oct 2026

This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft

98RISK

open ↗

GitHub PoC

PoC for CVE-2025-55182

CVE-2025-55182CRITICALunder attackransomware06 Oct 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISK

open ↗

GitHub PoC

CVE-2025-55182 "Ghost Action" — pre-auth RCE (React Flight deserialization, Next.js 15.5.6) CTF challenge. Problem only; solve/writeup excluded.

CVE-2025-55182CRITICALunder attackransomware06 Oct 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISK

open ↗

GitHub PoC

CVE-2026-105221 - gist RubyGem - High - MITM - GitHub OAuth token theft

CVE-2026-105221CRITICAL06 Oct 2026

Gist RubyGem before 6.1.0 Disabled TLS Certificate Verification

48RISK

open ↗

GitHub PoC★ 2

CVE-2023-54391: Proxmox VE Authentication Bypass RCE Exploit

CVE-2023-54391CRITICAL06 Oct 2026

Proxmox VE 7.0-8.0 Authentication Bypass via tfa-challenge Parameter

63RISK

open ↗

GitHub PoC★ 9

MarcusProgram/CVE-2026-21589

CVE-2026-21589CRITICALunder attack06 Oct 2026

This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft

98RISK

open ↗

GitHub PoC

beyavuz/cve-2026-105080-poc

CVE-2026-105080CRITICAL06 Oct 2026

In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes them to the ebook-conve

48RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.