Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

85,039cataloged exploits

39,796CVEs with public exploitation

24,695lab-tested

All Referência 25,790Exploit-DB 24,487GitHub PoC 16,910VulnCheck XDB 9,820Nuclei 4,504Metasploit 3,528✓ verified onlyrecent popular risk

16,908 exploits

GitHub PoC★ 1

Authentication Bypass and Remote Code Execution in Remote Access and Site-to-Site VPN

CVE-2026-85102CRITICALunder attack07 Oct 2026

Improper Certificate Validation in Quantum Security Gateway

90RISK

open ↗

GitHub PoC

CVE-2026-21589

CVE-2026-21589CRITICALunder attack07 Oct 2026

This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft

98RISK

open ↗

GitHub PoC

PoC for CVE-2026-67401 — cPanel/WHM EmailTrack SQL injection leading to arbitrary file write and root RCE. Includes a self-contained vulnerable lab, SQLi detection, and full exploit chain.

CVE-2026-67401CRITICAL06 Oct 2026

A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root through SQLi in EmailTr

48RISK

open ↗

GitHub PoC★ 2

CVE-2023-54391: Proxmox VE Authentication Bypass RCE Exploit

CVE-2023-54391CRITICAL06 Oct 2026

Proxmox VE 7.0-8.0 Authentication Bypass via tfa-challenge Parameter

63RISK

open ↗

GitHub PoC

One-day analysis + sanitizer PoC of CVE-2026-43805 (IOKit IODMACommand DriverKit RPC race, CWE-362)

CVE-2026-43805CRITICAL06 Oct 2026

A race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequ

48RISK

open ↗

GitHub PoC

Penetration test for Metasploitable 2 — Samba 3.0.20 Username Map Script (CVE-2007-2447)

CVE-2007-2447—06 Oct 2026

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands

50RISK

open ↗

GitHub PoC

Upstream OpenVPN kernel fix for CVE-2026-74727, tested on Ubuntu kernel 7.0.0-38.38. Includes build instructions and functional test results.

CVE-2026-74727CRITICAL06 Oct 2026

ovpn: skip rehash for peers already removed from by_id

48RISK

open ↗

GitHub PoC★ 11

CVE-2026-21589 - Atlassian Data Center Unauth Arbitrary File Read (CVSS 9.3). Red/Blue Team suite with 2 tools: Full Exploit (path traversal, WEB-INF read, interactive shell, 8 products, mass scan, SOCKS5/Tor, stealth) and SafeChecker (non-intrusive version audit, WAF detection, IoC guidance, JSON/CSV/JSONL reports). Use Ethically, Stay Legal.

CVE-2026-21589CRITICALunder attack06 Oct 2026

This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft

98RISK

open ↗

GitHub PoC

CVE-2025-55182 "Ghost Action" — pre-auth RCE (React Flight deserialization, Next.js 15.5.6) CTF challenge. Problem only; solve/writeup excluded.

CVE-2025-55182CRITICALunder attackransomware06 Oct 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISK

open ↗

GitHub PoC★ 1

PHP Object Injection -> Arbitrary File Deletion in FacturaScripts <= 2026.66 (CWE-502). PoC + advisory.

CVE-2026-104905MEDIUM06 Oct 2026

FacturaScripts < 2026.7 PHP Object Injection via WidgetSelect

33RISK

open ↗

GitHub PoC

PoC for CVE-2025-55182

CVE-2025-55182CRITICALunder attackransomware06 Oct 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISK

open ↗

GitHub PoC

CVE-2026-63277,

CVE-2026-63277HIGH06 Oct 2026

RCE via calcext:data-mappings, sql provider and jdbc connector

41RISK

open ↗

GitHub PoC

beyavuz/cve-2026-105080-poc

CVE-2026-105080CRITICAL06 Oct 2026

In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes them to the ebook-conve

48RISK

open ↗

GitHub PoC★ 1

CVE-2026-96940

CVE-2026-96940HIGH06 Oct 2026

Microsoft Exchange Server Elevation of Privilege Vulnerability

41RISK

open ↗

GitHub PoC★ 15

watchtowrlabs/watchTowr-vs-Atlassian-CVE-2026-21589

CVE-2026-21589CRITICALunder attack06 Oct 2026

This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft

98RISK

open ↗

GitHub PoC

CVE-2026-59265

CVE-2026-59265HIGH06 Oct 2026

Apache OpenOffice, Apache OpenOffice: Opening a malicious document can lead to system takeover

41RISK

open ↗

GitHub PoC

Python tool that detects Apache Struts versions vulnerable to CVE-2017-5638, the flaw behind the 2017 Equifax breach.

CVE-2017-5638CRITICALunder attackransomware06 Oct 2026

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISK

open ↗

GitHub PoC★ 9

MarcusProgram/CVE-2026-21589

CVE-2026-21589CRITICALunder attack06 Oct 2026

This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft

98RISK

open ↗

GitHub PoC★ 1

CVE-2026-57967 PoC — Apache ActiveMQ Artemis unauthenticated session hijacking via SESSION_REATTACH (2.50.0–2.56.0)

CVE-2026-57967CRITICAL06 Oct 2026

Apache Artemis, Apache ActiveMQ Artemis: Missing authentication on CORE protocol session reattachment

48RISK

open ↗

GitHub PoC★ 1

0xCyp1337/CVE-2026-10196

CVE-2026-10196CRITICAL06 Oct 2026

Mail Mint <= 1.31.0 - Unauthenticated PHP Object Injection in Arbitrary Form Fields

48RISK

open ↗

GitHub PoC

CVE-2026-105221 - gist RubyGem - High - MITM - GitHub OAuth token theft

CVE-2026-105221CRITICAL06 Oct 2026

Gist RubyGem before 6.1.0 Disabled TLS Certificate Verification

48RISK

open ↗

GitHub PoC

CVE-2023-54391: Proxmox VE Authentication Bypass RCE

CVE-2023-54391CRITICAL06 Oct 2026

Proxmox VE 7.0-8.0 Authentication Bypass via tfa-challenge Parameter

63RISK

open ↗

GitHub PoC★ 6

Zammad Session Leak to Remote Code Execution

CVE-2026-102489HIGHunder attack06 Oct 2026

Undisclosed RCE in Zammad v6.3 and higher

71RISK

open ↗

GitHub PoC

Python 3 reverse-shell exploit for Zenphoto <= 1.4.1.4 / CVE-2011-4825 (EDB-18083)

CVE-2011-4825—06 Oct 2026

Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinym

50RISK

open ↗

GitHub PoC

Technical advisory and proof of concept for CVE-2026-97286 in the WordPress Strong Testimonials plugin

CVE-2026-97286MEDIUM06 Oct 2026

WordPress Strong Testimonials plugin <= 3.3.11 - Cross Site Scripting (XSS) vulnerability

33RISK

open ↗

GitHub PoC

kashishtopi/CVE-2026-105314

CVE-2026-105314HIGH05 Oct 2026

Papermerge 3.5.3 allows remote code execution by a standard user via directory traversal in a /api/documents/upload call

41RISK

open ↗

GitHub PoC★ 1

hhg69/CVE-2026-41875-EXPLOIT-QuickCart-one-click-Account-Takeover

CVE-2026-41875MEDIUM05 Oct 2026

Cross-Site Request Forgery in admin panel of Quick.Cart

33RISK

open ↗

GitHub PoC★ 1

CVE-2026-86950

CVE-2026-86950HIGHunder attack05 Oct 2026

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 2

71RISK

open ↗

GitHub PoC

Controlled vulnerability assessment of Metasploitable 2, identifying and validating CVE-2011-2523 in vsftpd 2.3.4 within an isolated lab environment.

CVE-2011-2523—05 Oct 2026

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

60RISK

open ↗

GitHub PoC

Ubuntu's node-braces plus the CVE-2026-93687 nesting-depth fix, for ppa:pillarsdotnet/ppa

CVE-2026-93687HIGH05 Oct 2026

braces through 3.0.3 Stack Overflow via Deeply Nested Patterns

41RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.