Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
87,464cataloged exploits
40,695CVEs with public exploitation
24,696lab-tested
AllReferência 26,426Exploit-DB 24,489GitHub PoC 18,182VulnCheck XDB 10,251Nuclei 4,577Metasploit 3,539✓ verified onlyrecentpopularrisk
87,464 exploits
GitHub PoC★ 1
Find every PHP install vulnerable to PHP2Shell (CVE-2026-109618, CVE-2026-109619) on hosts and container images. Single static binary, backport-aware, defensive only.
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 8
ZeroHack: Node2Shell (CVE-2026-111497) Docker Lab & PoC Framework
Out-of-Bounds Write in Google Brotli Decoder
70RISK
open ↗GitHub PoC
Standalone defensive checker project for CVE-2026-21589: Atlassian self-managed products: Data Center arbitrary file access. One exploit per repository; implementation pending.
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft
100RISK
open ↗GitHub PoC
Standalone defensive checker project for Tinypool CVE-2026-104849. One exploit per repository; implementation pending.
Tinypool: Prototype Pollution Gadget to RCE in run() options
48RISK
open ↗GitHub PoC★ 3
Detect systems affected by Node2Shell (CVE-2026-111497) on Unix and Windows
Out-of-Bounds Write in Google Brotli Decoder
70RISK
open ↗GitHub PoC★ 1
CVE-2026-109618/109619 (php2shell) PHP exposure classifier and remediation planner. BSD-2-Clause.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Offline SonicWall SMA1000 evidence checker for CVE-2026-102258. Reported build and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SMA1000 Appliance Managem
33RISK
open ↗GitHub PoC
Free PHP2Shell (CVE-2026-109618, CVE-2026-109619) check skill for Claude Code and Codex. Reads the PHP package and runtime evidence you supply. MIT.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Offline SonicWall SMA1000 evidence checker for CVE-2026-102257. Reported build and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extrac
41RISK
open ↗GitHub PoC★ 3
🧪 Laboratorio Docker aislado para reproducir y estudiar PHP2Shell (CVE-2026-109618 / CVE-2026-109619), RCE no autenticado en PHP ≤8.5.11. Incluye exploit unificado en Python, verificación automática y documentación fase a fase con fines defensivos.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Offline NetScaler ADC / Gateway evidence checker for CVE-2026-88773. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
HTTP Request Smuggling
63RISK
open ↗GitHub PoC
Defensive remediation helper for the PHP2Shell RCE (CVE-2026-109618 / CVE-2026-109619): detects exposure and applies the official fix, with a source-build drop-in for end-of-life PHP 7.4/8.0/8.1.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
php2shell rce proof of concept for cve-2026-109618 and cve-2026-109619
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 3
Reverse proxy that blocks PHP parser exploits (CVE-2026-109618/109619) by replaying requests through an 11-version canary array. Compensating control for EOL PHP 5.6–8.1.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
A defensive incident-response scanner for the PHP2Shell vulnerabilities (CVE-2026-109618 / CVE-2026-109619). am-i-infected answers one question: does this server show signs that PHP2Shell was used against it?
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 2
PHP2Shell (CVE-2026-109618/109619): mod_php pre-auth heap-corruption RCE — working PoC, non-destructive checker, per-build offset recovery for stripped distro packages, lab harness
RCE via OOM corruption
100RISK
open ↗GitHub PoC
PHP2Shell patches for PHP 7.0.33 on CentOS 7 (Remi RPMs)
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 2
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Offline Node.js evidence checker for CVE-2026-58044: HTTP header-limit request smuggling. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.
A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding proxies that rebuild ou
28RISK
open ↗GitHub PoC
Offline Node.js evidence checker for CVE-2026-58045: zlib synchronous API spoofed TypedArray crash. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.
A flaw in Node.js allows a spoofed `TypedArray` `byteLength` to trigger a reachable assertion in the synchronous `node:z
33RISK
open ↗GitHub PoC
Offline Node.js evidence checker for CVE-2026-58041: SQLite cached iterator write replay. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.
A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSync#createTagStore() to cont
33RISK
open ↗GitHub PoC
Standalone defensive checker project for CVE-2026-88776: Citrix NetScaler ADC / Gateway: Oracle load-balancer memory corruption. One exploit per repository; implementation pending.
Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service
41RISK
open ↗GitHub PoC
Standalone defensive checker project for CVE-2026-88777: Citrix NetScaler ADC / Gateway: Non-HTTP L7 memory corruption. One exploit per repository; implementation pending.
Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service
41RISK
open ↗GitHub PoC
Standalone defensive checker project for CVE-2026-88778: Citrix NetScaler ADC / Gateway: Predictable TCP initial sequence numbers. One exploit per repository; implementation pending.
TCP Initial Sequence Number (ISN) prediction
41RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.