Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

85,039cataloged exploits

39,796CVEs with public exploitation

24,695lab-tested

All Referência 25,790Exploit-DB 24,487GitHub PoC 16,910VulnCheck XDB 9,820Nuclei 4,504Metasploit 3,528✓ verified onlyrecent popular risk

16,910 exploits

GitHub PoC

CVE-2026-100835 PoC: Edgeless Contrast <1.16.0 remote attestation relay (aTLS / CWE-295). Manifest audit (AllowedChipIDs/AllowedPIIDs), version & coordinator probe. https://pocbit.org/pocs/cve-2026-100835

CVE-2026-100835CRITICAL27 Sep 2026

Contrast before 1.16.0 Remote Attestation Relay Attack

48RISK

GitHub PoC★ 12

CVE-2026-88772 PoC: Citrix NetScaler ADC/Gateway DTLS memory overflow (RCE/DoS, CVSS 9.5). Fingerprints Gateway, build vs 14.1-73.37 / 13.1-64.23, UDP/443 DTLS probe. CTX697096; active exploitation reported. https://pocbit.org/pocs/cve-2026-88772

CVE-2026-88772CRITICALunder attack27 Sep 2026

Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

93RISK

GitHub PoC

Alexandertanay/jenkins-cve-2024-23897-lab

CVE-2024-23897CRITICALunder attackransomware27 Sep 2026

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an

100RISK

GitHub PoC★ 22

watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88771

CVE-2026-88771CRITICALunder attack27 Sep 2026

A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands

93RISK

GitHub PoC★ 1

Reproduction and root cause analysis of CVE-2026-39987 Marimo pre-auth WebSocket RCE in a local Docker lab.

CVE-2026-39987CRITICALunder attack27 Sep 2026

marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

100RISK

GitHub PoC

CVE-2026-88008 - Traefik (<=2.11.56 / <=3.7.12): a client-controlled h2c upgrade tunnels past routers and middleware (BasicAuth/ForwardAuth/IPAllowList), unauthorised access + no access logging. Stdlib-only Python PoC + real Jetty h2c lab, verified on v3.7.12 vs v3.7.13.

CVE-2026-88008HIGH27 Sep 2026

Traefik: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') and Incorrect Authorization

41RISK

GitHub PoC

A complete guide and workflow for integrating Agile sprints with DevOps CI/CD pipelines.

CVE-2026-8452HIGHunder attack27 Sep 2026

Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service

71RISK

GitHub PoC★ 11

watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88772

CVE-2026-88772CRITICALunder attack27 Sep 2026

Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

93RISK

GitHub PoC★ 1

Defensive WordPress security scanner for CVE-2026-87902 — local filesystem inspection and safe remote HTTP/HTTPS assessment.

CVE-2026-87902HIGHunder attack27 Sep 2026

An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph

98RISK

GitHub PoC★ 5

CVE-2026-67279 + CVE-2026-86060 – MikroTrick MikroTik RouterOS SSH Pre-Auth Takeover (CVSS 9.2) | Red/Blue Team suite. 2 tools: Full Exploit (rekey bypass, fd-2 policy swap, full-admin shell, plant, mass scan, SOCKS5/Tor, stealth) & SafeDetect (banner/version audit, IoC guidance, JSON/CSV/HTML). Use Ethically & Safety only.

CVE-2026-67279MEDIUMunder attack27 Sep 2026

SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS

63RISK

GitHub PoC★ 1

CVE-2026-12227 is a critical (CVSS 9.8) unauthenticated Local File Inclusion (LFI) vulnerability in the Visual Composer Website Builder plugin for WordPress, affecting all versions up to and including 45.16.0, This can lead to sensitive data exposure, access control bypass, or even full Remote Code Execution (RCE).

CVE-2026-12227CRITICAL27 Sep 2026

Visual Composer Website Builder <= 45.16.0 - Unauthenticated Local File Inclusion via 'vcv-template' Parameter

63RISK

GitHub PoC

PHP Object Injection in Profile Builder < 4.0.1

CVE-2026-76547MEDIUM27 Sep 2026

Profile Builder < 4.0.1 - Admin+ PHP Object Injection via Import/Export

33RISK

GitHub PoC

CVE-2026-43805 IOKit IODMACommand race analysis and proof of concept

CVE-2026-43805CRITICAL27 Sep 2026

A race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequ

48RISK

GitHub PoC★ 5

三星 Galaxy S25 Ultra（SM-S938B）适配版 DFRoot：开机自动获取 root（DirtyFrag CVE-2026-43284 + CVE-2026-43499 双链路），全中文界面，fork 自 diabl0w/DFRoot

CVE-2026-43284HIGH27 Sep 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

78RISK

GitHub PoC★ 1

Unauthenticated LFI and conditional RCE scanner for CVE-2026-87902 in WordPress Core (4.7.0 – 7.1.1).

CVE-2026-87902HIGHunder attack27 Sep 2026

An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph

98RISK

GitHub PoC

khanna419/cve-2021-43798-lab

CVE-2021-43798HIGHunder attack27 Sep 2026

Grafana path traversal

100RISK

GitHub PoC

CVE-2026-71963 - Hermes Agent 0.18.2-0.21.0 RCE via a repository-delivered .git/config (core.fsmonitor). Stdlib-only Python, verified on real 0.21.0 with a clean negative control on the fixed build.

CVE-2026-71963HIGH27 Sep 2026

Hermes Agent 0.18.2 - 0.21.0 RCE via git core.fsmonitor Config Injection

41RISK

GitHub PoC

CVE-2024-4367 proof PDF for cpc docs-preview

CVE-2024-4367MEDIUM27 Sep 2026

A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js c

55RISK

GitHub PoC

snapshot of logpresso/CVE-2021-44228-Scanner at a pinned commit, for cross platform ci legs

CVE-2021-44228CRITICALunder attackransomware27 Sep 2026

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

GitHub PoC★ 1

Unauthenticated SQL injection PoC and vulnerable lab environment for WP2Shell (CVE-2026-63030 + CVE-2026-60137) — a WordPress REST API batch route confusion chained into a WP_Query SQL injection. Includes Docker Compose lab setup and a Python exploitation script. For authorized security research only.

CVE-2026-63030CRITICALunder attack27 Sep 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

98RISK

GitHub PoC

CVE-2020-14008 — ManageEngine Applications Manager Remote Code Execution

CVE-2020-14008—27 Sep 2026

Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to upload a vulnerable jar in

35RISK

GitHub PoC★ 3

nth347/mediawiki-CVE-2026-100382

CVE-2026-100382CRITICAL27 Sep 2026

Unauthenticated remote code execution through wikitext in ExternalData

48RISK

GitHub PoC

CVE-2026-48356 - Magento Open Source - Critical 9.3 - Unauthenticated POST /rest/default/V1/guest-carts/{cartId}/items - Unauthenticated Unrestricted File Upload (PolyShell)

CVE-2026-48356CRITICAL26 Sep 2026

Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)

48RISK

GitHub PoC★ 1

CVE-2026-15583 - Grafana MCP Server - High 8.6 - Unauthenticated POST /mcp - Unauthenticated Token Exfiltration (X-Grafana-URL Confused Deputy)

CVE-2026-15583HIGH26 Sep 2026

SSRF (confused deputy) in Grafana MCP Server via X-Grafana-URL header

41RISK

GitHub PoC★ 1

langz337/CVE-2026-63030

CVE-2026-63030CRITICALunder attack26 Sep 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

98RISK

GitHub PoC

xfs kernel LPE (CVE-2026-64600), disclosed by Qualys on 22 July 2026

CVE-2026-64600HIGH26 Sep 2026

xfs: resample the data fork mapping after cycling ILOCK

41RISK

GitHub PoC★ 13

CVE-2026-43682: HFS+ B-tree kernel heap overflow in macOS

CVE-2026-43682CRITICAL26 Sep 2026

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8,

48RISK

GitHub PoC★ 4

MikroTrick (MikroTik RouterOS SSH takeover chain) PoC mirror - CVE-2026-67279 + CVE-2026-86060 (+67276); for authorized lab testing

CVE-2026-67279MEDIUMunder attack26 Sep 2026

SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS

63RISK

GitHub PoC★ 1

Unauthenticated arbitrary file upload on Honeywell PD45 web admin (firmware F10.19.010040–before F10.22.030745) leading to RCE. Python check/exploit PoC

CVE-2026-13249CRITICAL26 Sep 2026

Unauthenticated RCE Arbitrary File Upload Honeywell PD45 Industrial Printer version F10.19.010040

48RISK

GitHub PoC★ 1

CVE-2026-14281

CVE-2026-14281CRITICAL26 Sep 2026

Automation Web Platform <= 4.8.6 - Unauthenticated Privilege Escalation via 'wawp_custom_fields' Parameter

48RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.