Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,114cataloged exploits
31,649CVEs with public exploitation
0lab-tested
13,116 exploits
GitHub PoC29
CVE-2026-0091, play with an issue in android window management to perform arbitrary code execution in Launcher process from adb
CVE-2026-0091HIGH25 May 2026
In multiple locations, there is a possible way to execute code in the launcher process due to an over-privileged shell u
41RISK
open
GitHub PoC5
CVE-2026-42945 NGINX 堆溢出漏洞扫描与验证工具
CVE-2026-42945CRITICAL25 May 2026
NGINX ngx_http_rewrite_module vulnerability
60RISK
open
GitHub PoC
CVE-2026-33712 - Typebot <= 3.15.2 Unauthenticated SSRF via isolated-vm sandbox fetch
CVE-2026-33712CRITICAL25 May 2026
TypeBot: Unauthenticated SSRF via isolated-vm fetch in preview chat endpoint bypasses SSRF controls
48RISK
open
GitHub PoC1
Proof-of-concept for CVE-2026-43494 (PinTheft): Linux LPE via RDS zerocopy refcount bug + io_uring fixed buffers → SUID page-cache overwrite. Authorized research only.
CVE-2026-43494HIGH25 May 2026
net/rds: reset op_nents when zerocopy page pin fails
41RISK
open
GitHub PoC
XWiki Platform - CVE-2026-33137 PoC - Unauthenticated XAR Import via REST /wikis/{wikiName}
CVE-2026-33137CRITICAL25 May 2026
XWiki Platform has an Unauthenticated XAR Import via REST /wikis/{wikiName}
48RISK
open
GitHub PoC
Tomcat AJP文件读取/包含漏洞
CVE-2020-1938CRITICALunder attack25 May 2026
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc
100RISK
open
GitHub PoC
renewablehacking/CVE-2026-45321-Tanstack
CVE-2026-45321CRITICALunder attackransomware25 May 2026
Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys
78RISK
open
GitHub PoC
The code for personally reproducing the corresponding vulnerability
CVE-2026-47102HIGH25 May 2026
LiteLLM < 1.83.10 Privilege Escalation via User Update
41RISK
open
GitHub PoC45
PoC for CVE-2026-28990, an ImageIO bug patched in iOS/macOS 26.5
CVE-2026-28990HIGH25 May 2026
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Sequoia 15
41RISK
open
GitHub PoC6
CVE-2025-55182 Exploit Tool – Python 2.7 exploit for Next.js prototype pollution leading to RCE
CVE-2025-55182CRITICALunder attackransomware25 May 2026
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open
GitHub PoC3
CVE-2026-41096: Heap Overflow in the Windows DNS Client
CVE-2026-41096CRITICAL24 May 2026
Windows DNS Client Remote Code Execution Vulnerability
48RISK
open
GitHub PoC4
BitLocker TPM+PIN Hardening Against CVE-2026-45585 (YellowKey)
CVE-2026-45585MEDIUM24 May 2026
Windows BitLocker Security Feature Bypass Vulnerability
33RISK
open
GitHub PoC
mein-0/cve-2026-29923
CVE-2026-29923HIGH24 May 2026
The pstrip64.sys driver in EnTech Taiwan PowerStrip <=3.90.736 allows local users to escalate privileges to SYSTEM via a
41RISK
open
GitHub PoC1
CVE-2026-39987 Exploitation Tool - Marimo < 0.23.0 Pre-Auth RCE (WebSocket)
CVE-2026-39987CRITICALunder attack24 May 2026
marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass
100RISK
open
GitHub PoC2
copy_fail:CVE-2026-31431
CVE-2026-31431HIGHunder attack24 May 2026
crypto: algif_aead - Revert to operating out-of-place
100RISK
open
GitHub PoC
Tracking the nginx CVE-2026-9256 rewrite-module heap overflow
CVE-2026-9256CRITICAL24 May 2026
NGINX ngx_http_rewrite_module vulnerability
48RISK
open
GitHub PoC
w3nch/CVE-2025-55182-in-go
CVE-2025-55182CRITICALunder attackransomware24 May 2026
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open
GitHub PoC7
Drupal CVE-2026-9082 Blind SQL Injection Checker
CVE-2026-9082CRITICALunder attack24 May 2026
Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
100RISK
open
GitHub PoC39
windows api bug
CVE-2026-41096CRITICAL24 May 2026
Windows DNS Client Remote Code Execution Vulnerability
48RISK
open
GitHub PoC1
Local Privilege Escalation in Amazon WorkSpaces via TOCTOU and Arbitrary File Write
CVE-2026-7791HIGH24 May 2026
Improper privilege management in the log rotation mechanism of the Skylight Workspace Config Service in Amazon WorkSpace
41RISK
open
GitHub PoC
CVE-2025-55182 — Unauthenticated RCE in React Server Components (React2Shell). CVSS 10.0 exploit tool for authorized penetration testing.
CVE-2025-55182CRITICALunder attackransomware24 May 2026
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open
GitHub PoC
Ambiente Docker para demonstração prática da CVE-2025-54236 (SessionReaper): PHP Object Deserialization levando a RCE em Magento Open Source 2.4.7
CVE-2025-54236CRITICALunder attack24 May 2026
Adobe Commerce | Improper Input Validation (CWE-20)
100RISK
open
GitHub PoC1
Automated scanner & post-exploitation toolkit for CVE-2026-41940 — cPanel & WHM root authentication bypass via session-file CRLF injection
CVE-2026-41940CRITICALunder attackransomware24 May 2026
WebPros cPanel and WHM Authentication Bypass via Login Flow
100RISK
open
GitHub PoC
CMS Made Simple CVE-2019-9053 Exploit (Python 3)
CVE-2019-905324 May 2026
An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve
35RISK
open
GitHub PoC
🎓 PoC Educativo para CVE-2026-23520. Laboratorio de análisis de vulnerabilidades y mitigación controlada. 🧪
CVE-2026-23520CRITICAL24 May 2026
Arcane has a Command Injection in Arcane Updater Lifecycle Labels Enables RCE
48RISK
open
GitHub PoC
CVE-2026-20182
CVE-2026-20182CRITICALunder attack24 May 2026
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
100RISK
open
GitHub PoC
CVE-2025-47812 Poc for wingdata HTB
CVE-2025-47812CRITICALunder attack24 May 2026
In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection o
100RISK
open
GitHub PoC
Leemyunglyul/cve-2021-4034-mock
CVE-2021-4034HIGHunder attack24 May 2026
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open
GitHub PoC
Lab detection exercise for DirtyFrag (CVE-2026-43284) - Linux kernel privilege escalation via xfrm-ESP page cache corruption. Full write-up covering exploit execution, detection gaps, and corrected EQL rules using Elastic Stack
CVE-2026-43284HIGH24 May 2026
xfrm: esp: avoid in-place decrypt on shared skb frags
78RISK
open
GitHub PoC
CVE-2026-0926 exploit. The Prodigy Commerce plugin for WordPress Local File Inclusion
CVE-2026-0926CRITICAL23 May 2026
Prodigy Commerce <= 3.3.0 - Unauthenticated Local File Inclusion via parameters[template_name]
63RISK
open

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.