Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

88,871cataloged exploits
40,961CVEs with public exploitation
24,696lab-tested
AllReferência 26,571Exploit-DB 24,489GitHub PoC 18,446VulnCheck XDB 11,241Nuclei 4,584Metasploit 3,540✓ verified onlyrecentpopularrisk
88,871 exploits
GitHub PoC★ 1
Educational / research tool related to React / Next.js vulnerability CVE‑2025‑55182 (“React2Shell”).
CVE-2025-55182CRITICALunder attackransomware11 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-1938CRITICALunder attack11 Dec 2025
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc
100RISK
open ↗
GitHub PoC
exrienz/CVE-2025-55182-NextJS-Scanner-React2Shell-PoC
CVE-2025-55182CRITICALunder attackransomware11 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
GitHub PoC★ 1
Intentionally vulnerable Next.js app for CVE-2025-55182 security research and CTF challenges
CVE-2025-55182CRITICALunder attackransomware11 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-22965CRITICALunder attack11 Dec 2025
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISK
open ↗
GitHub PoC★ 2
CVE-2021-4045 CVE-2021-4045 is a Command Injection vulnerability that allows Remote Code Execution in the TP-Link Tapo c200 IP camera. It affects all firmware versions prior to 1.1.16 Build 211209 Rel. 37726N due to insufficient checks on user input in uhttpd, which is one of the main binaries of the device.
CVE-2021-4045CRITICAL11 Dec 2025
TP-LINK Tapo C200 remote code execution vulnerability
70RISK
open ↗
GitHub PoC★ 2
LC-pro/CVE-2025-55182-EXP
CVE-2025-55182CRITICALunder attackransomware11 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
GitHub PoC
Apache Tomcat AJP Ghostcat (CVE-2020-1938) exploit tool for file disclosure with multi-target scanning, custom wordlists, and upload point detection capabilities
CVE-2020-1938CRITICALunder attack11 Dec 2025
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc
100RISK
open ↗
Metasploit300
FreePBX Custom Extension SQL Injection
CVE-2025-66039CRITICAL11 Dec 2025
FreePBX Endpoint Manager Allows Unauthenticated Logins to Administrator Control Panel via Forged Basic Auth Header
63RISK
open ↗
Metasploit600
FreePBX firmware file upload
CVE-2025-61678HIGH11 Dec 2025
FreePBX Endpoint Manager vulnerable to authenticated arbitrary file upload via fwbrand parameter
48RISK
open ↗
GitHub PoC★ 1
Burp Suite extension for identifying the React Server Components unsafe deserialization vulnerability (React2Shell / CVE-2025-55182). It provides a focused UI tab, context-menu actions, active-scanner integration, and optional Burp Collaborator confirmation.
CVE-2025-55182CRITICALunder attackransomware11 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
Metasploit600
FreePBX firmware file upload
CVE-2025-66039CRITICAL11 Dec 2025
FreePBX Endpoint Manager Allows Unauthenticated Logins to Administrator Control Panel via Forged Basic Auth Header
63RISK
open ↗
GitHub PoC★ 1
CVE-2025-55182
CVE-2025-55182CRITICALunder attackransomware11 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
Metasploit300
FreePBX Custom Extension SQL Injection
CVE-2025-61675HIGH11 Dec 2025
FreePBX Endpoint Manager vulnerable to authenticated SQL injection in multiple configuration parameters
48RISK
open ↗
Metasploit600
FreePBX endpoint SQLi to RCE
CVE-2025-61675HIGH11 Dec 2025
FreePBX Endpoint Manager vulnerable to authenticated SQL injection in multiple configuration parameters
48RISK
open ↗
Metasploit600
FreePBX endpoint SQLi to RCE
CVE-2025-66039CRITICAL11 Dec 2025
FreePBX Endpoint Manager Allows Unauthenticated Logins to Administrator Control Panel via Forged Basic Auth Header
63RISK
open ↗
GitHub PoC★ 1
Gymnott1/CVE-2025-55182
CVE-2025-55182CRITICALunder attackransomware10 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
GitHub PoC
Sotatek-KhaiNguyen3/CVE-2025-55182
CVE-2025-55182CRITICALunder attackransomware10 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
GitHub PoC★ 1
SneeitScanner - PoC & Scanner para RCE não autenticada no Sneeit Framework (CVE-2025-6389)
CVE-2025-6389CRITICAL10 Dec 2025
Sneeit Framework <= 8.3 - Unauthenticated Remote Code Execution in sneeit_articles_pagination_callback
85RISK
open ↗
Metasploit300
Gladinet CentreStack/Triofox Access Ticket Forge
CVE-2025-14611HIGHunder attack10 Dec 2025
Gladinet CentreStack and TrioFox Hard Coded AES Keys
98RISK
open ↗
GitHub PoC
Vulnerable ThinkPHP 8.0.4 test environment for CVE-2024-44902 nuclei template validation
CVE-2024-44902CRITICAL10 Dec 2025
A deserialization vulnerability in Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code.
48RISK
open ↗
GitHub PoC★ 1
b0ySie7e/CVE-2025-3248-POC
CVE-2025-3248CRITICALunder attackransomware10 Dec 2025
Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALunder attackransomware10 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
GitHub PoC
DanielXavierJob/-CVE-2025-55182
CVE-2025-55182CRITICALunder attackransomware10 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2025-3248CRITICALunder attackransomware10 Dec 2025
Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code
100RISK
open ↗
GitHub PoC★ 1
Nmap NSE script for scanning React2Shell (CVE-2025-55182)
CVE-2025-55182CRITICALunder attackransomware10 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
GitHub PoC
Proof-of-Concept exploit for CVE-2025-9074
CVE-2025-9074CRITICAL10 Dec 2025
Docker Desktop allows unauthenticated access to Docker Engine API from containers
48RISK
open ↗
GitHub PoC★ 3
A CTF challenge based on CVE-2025-55182 Vulnerability
CVE-2025-55182CRITICALunder attackransomware10 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
GitHub PoC
Reproduction for Next.js CVE-2025-55182 version string confusion issue
CVE-2025-55182CRITICALunder attackransomware10 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
GitHub PoC
CrazyloveforWeb/Golang-CVE-2025-55182-POC
CVE-2025-55182CRITICALunder attackransomware10 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
← previouspage 375 / 2,963next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.