Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
87,464cataloged exploits
40,695CVEs with public exploitation
24,696lab-tested
AllReferência 26,426Exploit-DB 24,489GitHub PoC 18,182VulnCheck XDB 10,251Nuclei 4,577Metasploit 3,539✓ verified onlyrecentpopularrisk
87,464 exploits
GitHub PoC
Unofficial EL7 rebuild of Remi's php74 SCL packages with the PHP2Shell fix (CVE-2026-109618, CVE-2026-109619). Not supported by SUSE, Red Hat or Remi.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Multi-tool passive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP memory-corruption RCE pair). Cross-checks 6 independent detection tools, CMS-aware, no exploitation.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Offline Node.js evidence checker for CVE-2026-105483: TLS fullwidth-IP hostname validation bypass. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.
A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenticate a con
41RISK
open ↗GitHub PoC
PHP2Shell(CVE-2026-109618/109619) 취약점 점검·대응 도구와 한국어 런북 (비공식, 방어용). Defensive check & response toolkit: Linux/Unix/Windows/containers, patch plans, virtual patches.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Standalone defensive checker project for CVE-2026-21589: Atlassian self-managed products: Data Center arbitrary file access. One exploit per repository; implementation pending.
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft
100RISK
open ↗GitHub PoC
Standalone defensive checker project for Tinypool CVE-2026-104849. One exploit per repository; implementation pending.
Tinypool: Prototype Pollution Gadget to RCE in run() options
48RISK
open ↗GitHub PoC
A local test environment for PHP2Shell (CVE-2026-109618) on a vulnerable PHP server.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Offline SonicWall SMA1000 evidence checker for CVE-2026-102258. Reported build and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SMA1000 Appliance Managem
33RISK
open ↗GitHub PoC
Offline SonicWall SMA1000 evidence checker for CVE-2026-102257. Reported build and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extrac
41RISK
open ↗GitHub PoC
Standalone defensive checker project for Flowise CVE-2026-69254 (nodeVMOptions sandbox override). One exploit per repository; implementation pending.
Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override
48RISK
open ↗GitHub PoC
Standalone defensive checker project for CVE-2026-102826: simple-git configuration include command injection. One exploit per repository; implementation pending.
simple-git allows command execution through unblocked Git configuration includes
41RISK
open ↗GitHub PoC
Patched PHP 7.3 RPMs for EL8 / Rocky Linux 8 (Remi php73-php-*) fixing CVE-2026-109618 / CVE-2026-109619, with an installer that detects the server's PHP, upgrades it and can roll back.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
CVE-2026-76504 — Cisco Catalyst SD-WAN Manager Auth Bypass Exploit
Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability
90RISK
open ↗GitHub PoC★ 1
Nuclei template for CVE-2026-76504 — Cisco vManage authentication bypass
Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability
90RISK
open ↗GitHub PoC★ 14
PHP2Shell: version-aware research toolkit for CVE-2026-109618 / CVE-2026-109619 — pre-auth RCE in PHP session.upload_progress (mod_php). Build profiles, labs, heap calibration and detection guidance for authorized security testing.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Offline Node.js evidence checker for CVE-2026-58041: SQLite cached iterator write replay. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.
A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSync#createTagStore() to cont
33RISK
open ↗GitHub PoC
Offline Node.js evidence checker for CVE-2026-58045: zlib synchronous API spoofed TypedArray crash. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.
A flaw in Node.js allows a spoofed `TypedArray` `byteLength` to trigger a reachable assertion in the synchronous `node:z
33RISK
open ↗GitHub PoC
Offline Node.js evidence checker for CVE-2026-58044: HTTP header-limit request smuggling. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.
A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding proxies that rebuild ou
28RISK
open ↗GitHub PoC★ 1
Defensive research and tooling for PHP2Shell (CVE-2026-109618 / CVE-2026-109619)** - two critical memory-safety vulnerabilities in the PHP engine disclosed with the PHP 8.2.35 / 8.3.36 / 8.4.27 / 8.5.12 security releases (2026-10-21).
RCE via OOM corruption
100RISK
open ↗GitHub PoC
An educational PHP2Shell (CVE-2026-109618 / CVE-2026-109619) learning lab demonstrating HTTP upload handling, memory-safety concepts, safe request simulation, and defensive monitoring. Includes Python examples, Docker setup, unit tests, and a beginner-friendly guide. No exploit payloads or real-world attacks.
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 1
php2shell-detector - local + network detections for PHP2Shell (CVE-2026-109618 / CVE-2026-109619) by IONSEC. Python CLI: host posture, access-log fingerprints, binary drift; plus Sigma, Suricata, ModSecurity rules and curated references.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Single-file PoC for CVE-2026-109618/109619 (PHP session upload_progress OOM UAF -> RCE). Authorized internal testing only.
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 2
Black-box pentest lab for the PHP2Shell engine memory-corruption family (CVE-2026-109618 / CVE-2026-109619, CVSS 9.8/9.2). Dual-flag verified attack chain, agent-calibrated. EN/JP/ZH.
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 2
Defensive exposure and IOC scanner for PHP2Shell (CVE-2026-109618 / CVE-2026-109619). No exploit traffic.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Offline SonicWall SMA1000 evidence checker for CVE-2026-102258. Reported build and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SMA1000 Appliance Managem
33RISK
open ↗GitHub PoC★ 3
Reverse proxy that blocks PHP parser exploits (CVE-2026-109618/109619) by replaying requests through an 11-version canary array. Compensating control for EOL PHP 5.6–8.1.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Offline NetScaler ADC / Gateway evidence checker for CVE-2026-88772. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
Memory overflow vulnerability leading to Remote Code Execution or Denial of Service
100RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.