Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

85,039cataloged exploits

39,796CVEs with public exploitation

24,695lab-tested

All Referência 25,790Exploit-DB 24,487GitHub PoC 16,910VulnCheck XDB 9,820Nuclei 4,504Metasploit 3,528✓ verified onlyrecent popular risk

16,910 exploits

GitHub PoC

CVE-2026-19975 - Draft or TODO

CVE-2026-19975LOW17 Sep 2026

Azuriom CMS Money Transfer ProfileController.php transferMoney toctou

28RISK

open ↗

GitHub PoC

Issabel pbxapi hard coded JWT RCE POC

CVE-2026-89026CRITICAL17 Sep 2026

Issabel Framework Hard-coded JWT Key RCE via pbxapi/manager/originate

48RISK

open ↗

GitHub PoC

CVE-2026-48908 SP Page Builder (Joomla) unauth RCE suite — authorized testing only

CVE-2026-48908CRITICALunder attack17 Sep 2026

Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2

100RISK

open ↗

GitHub PoC★ 1

exploit para reverse shell en MCPJamInspector v1.4.2< por endpoint mal configurado

CVE-2026-23744CRITICAL17 Sep 2026

REC in MCPJam inspector due to HTTP Endpoint exposes

75RISK

open ↗

GitHub PoC

UVdesk unauth wizard super-admin POC

CVE-2026-92805CRITICAL17 Sep 2026

UVdesk Community Skeleton through 1.1.8 Missing Authentication on the Installation Wizard

28RISK

open ↗

GitHub PoC★ 3

Unbounded memory allocation in NanaZip's UFS handler via an attacker-controlled `fs_bsize` field.

CVE-2026-55781LOW17 Sep 2026

NanaZip: Unbounded memory allocation (DoS) in NanaZip UFS parser via unvalidated fs_bsize/fs_fsize superblock fields

28RISK

open ↗

GitHub PoC★ 2

Unbounded memory allocation in NanaZip's UFS handler via an attacker-controlled `fs_bsize` field.

CVE-2026-55781LOW17 Sep 2026

NanaZip: Unbounded memory allocation (DoS) in NanaZip UFS parser via unvalidated fs_bsize/fs_fsize superblock fields

28RISK

open ↗

GitHub PoC★ 4

CVE-2026-49179: Active Directory WriteSPNScript Command Injection

CVE-2026-49179HIGH17 Sep 2026

Windows Active Directory Domain Services Remote Code Execution Vulnerability

41RISK

open ↗

GitHub PoC

Isolated educational FreePBX-compatible cyber range for CVE-2025-57819 (CWE-89/CWE-288). Docker lab — not official Sangoma FreePBX.

CVE-2025-57819CRITICALunder attack17 Sep 2026

FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE

100RISK

open ↗

GitHub PoC★ 1

SneakyNachos/CVE-2026-85045

CVE-2026-85045HIGH17 Sep 2026

Race condition in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside

41RISK

open ↗

GitHub PoC★ 1

SneakyNachos/CVE-2026-85048-the-gpu-died

CVE-2026-85048HIGH17 Sep 2026

Use after free in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the

41RISK

open ↗

GitHub PoC

A Python-based security tool for checking sudo versions for potential exposure to CVE-2021-3156 (Baron Samedit). Designed for authorized security testing and learning.

CVE-2021-3156HIGHunder attack17 Sep 2026

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RISK

open ↗

GitHub PoC★ 1

CVE-2026-87930 Joomla Multi-CVE RCE suite — authorized testing only

CVE-2026-87930CRITICAL17 Sep 2026

MaxSite CMS through 109.6 PHP Object Injection via ci_session

48RISK

open ↗

GitHub PoC★ 1

CVE-2026-87796 - Multi Uploader for Gravity Forms <= 1.1.9; Unauthorized RCE (CRITICAL 9.8)

CVE-2026-87796CRITICAL17 Sep 2026

Multi Uploader for Gravity Forms <= 1.1.9 - Unauthenticated Arbitrary File Upload via Chunked File Upload

48RISK

open ↗

GitHub PoC★ 1

Forensic Analysis and Local Replication of the OpenAI-Artifactory Privilege Escalation Incident (CVE-2026-65616)

CVE-2026-65616HIGH17 Sep 2026

Potential privilege escalation to JFrog administrator privileges

41RISK

open ↗

GitHub PoC

Educational cyber range for CVE-2026-59827 (Metabase H2 unsafe deserialization / CWE-502). Isolated Docker lab — training only, not for attacking production Metabase.

CVE-2026-59827CRITICAL17 Sep 2026

Metabase: Unsafe Deserialization of H2 Query Results

48RISK

open ↗

GitHub PoC

CVE-2026-85706

CVE-2026-85706CRITICALunder attack17 Sep 2026

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

100RISK

open ↗

GitHub PoC

isaca0315/CVE-2026-44840-poc

CVE-2026-44840HIGH17 Sep 2026

Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query

41RISK

open ↗

GitHub PoC

SangSenimanWartefak/CVE-2026-80467

CVE-2026-80467HIGH17 Sep 2026

Advanced Custom Fields: Extended 0.9.2.2 - 0.9.2.6 - Unauthenticated Privilege Escalation via Front-End User Insert Action

41RISK

open ↗

GitHub PoC★ 2

CVE-2026-76460

CVE-2026-76460CRITICALunder attack17 Sep 2026

Cisco Identity Services Engine Authentication Bypass Vulnerability

83RISK

open ↗

GitHub PoC★ 4

PoC for CVE-2026-67401 — cPanel/WHM EmailTrack SQL injection leading to arbitrary file write and root RCE. Includes a self-contained vulnerable lab, SQLi detection, and full exploit chain.

CVE-2026-67401CRITICAL17 Sep 2026

A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root through SQLi in EmailTr

48RISK

open ↗

GitHub PoC★ 1

CVE-2026-76461

CVE-2026-76461CRITICALunder attack17 Sep 2026

Cisco Secure Email Gateway SQL Injection Vulnerability

83RISK

open ↗

GitHub PoC★ 1

CVE-2026-85706 – GitLab Unauth File Read Toolkit (CVSS 10.0) | Red/Blue Team suite for self-managed GitLab CE/EE 18.7–19.3.1. 2 tools: Full Exploit (unauth file read, admin token, mass scan, loot, shell, stealth, SQLite/HTML/JSON output) etc., SafeChecker (version detect, audit, security headers, TLS check, MITRE). Only Use Ethically, Educ. <3

CVE-2026-85706CRITICALunder attack17 Sep 2026

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

100RISK

open ↗

GitHub PoC

CVE-2026-12793 - JetFormBuilder Unauthorized RCE (CRITICAL 9.8)

CVE-2026-12793CRITICAL17 Sep 2026

JetFormBuilder <= 3.6.2 - Unauthenticated Privilege Escalation via '_jet_engine_booking_form_id' Parameter

48RISK

open ↗

GitHub PoC★ 526

A cPanel and WHM authentication bypassing tool

CVE-2026-41940CRITICALunder attackransomware16 Sep 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RISK

open ↗

GitHub PoC★ 10

research on finding the bug and fix of CVE-2026-84616 and CVE-2026-84607

CVE-2026-84616MEDIUM16 Sep 2026

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS

33RISK

open ↗

GitHub PoC

CVE-2014-0160 (Heartbleed) lab: vulnerable OpenSSL 1.0.1f in Docker, a memory-leak PoC, and a demo. Authorised lab use only.

CVE-2014-0160HIGHunder attack16 Sep 2026

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISK

open ↗

GitHub PoC

CVE-2021-29447 is an authenticated XML External Entity (XXE) vulnerability in WordPress

CVE-2021-29447HIGH16 Sep 2026

WordPress Authenticated XXE attack when installation is running PHP 8

63RISK

open ↗

GitHub PoC★ 2

spip exploits for CVE-2026-72708, CVE-2026-72709, CVE-2026-72710

CVE-2026-72708HIGH16 Sep 2026

SPIP < 4.4.18 Unauthenticated Blind SQL Injection via sitemap.xml.html

41RISK

open ↗

GitHub PoC★ 1

0xgh0stri13y/CVE-2026-109519

CVE-2026-109519MEDIUM16 Sep 2026

YouTransfer Template Rendering template path traversal

33RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.