Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
85,337cataloged exploits
39,873CVEs with public exploitation
24,696lab-tested
AllReferência 25,822Exploit-DB 24,487GitHub PoC 17,115VulnCheck XDB 9,874Nuclei 4,511Metasploit 3,528✓ verified onlyrecentpopularrisk
17,103 exploits
GitHub PoC★ 1
HPLIP < 3.26.6 — Full admin takeover via PAPPL web interface (no auth). Related to CVE-2026-91097 through CVE-2026-91106 (CVSS 9.3)
HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities
41RISK
open ↗GitHub PoC
pwnVader/CVE-2026-87915-PoC-pwnVader
Popup Maker <= 1.24.0 - Unauthenticated Stored Cross-Site Scripting via values[Name] Parameter
41RISK
open ↗GitHub PoC
pwnVader/CVE-2026-87902-PoC-pwnVader
An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph
98RISK
open ↗GitHub PoC
Improper Restriction of Rendered UI Layers or Frames (CWE-1021)
A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versi
48RISK
open ↗GitHub PoC★ 9
Unauthenticated RCE on Wordpress
An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph
98RISK
open ↗GitHub PoC
CVE-2026-13355 PoC — Meta Box AIO ≤3.11.0 unauthenticated admin privesc via MB Frontend Submission + User Profile shortcode chain. Python check/exploit, FOFA helper, mass scan with live flow.
Meta Box AIO <= 3.11.0 And Standalone Plugin Extensions - Unauthenticated Privilege Escalation to Administrator to 'rwmb_frontend_field_object_id' Parameter
48RISK
open ↗GitHub PoC★ 35
CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion (conditional RCE)
An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph
98RISK
open ↗GitHub PoC★ 55
cve-2026-86060 PoC
SSH session privilege manipulation via a crafted username in Mikrotik RouterOS
78RISK
open ↗GitHub PoC
Laboratório de pentest em rede isolada: enumeração com nmap/nikto e exploração manual do Metasploitable2 (backdoor vsFTPd CVE-2011-2523, bindshell) com relatório técnico completo.
vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.
60RISK
open ↗GitHub PoC★ 43
PoC for CVE-2026-87902 — unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with a pinned vulnerable lab
An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph
98RISK
open ↗GitHub PoC
Simple Checks to look for indicators of compromise
Directory Traversal and File upload allows execution of arbitrary script on the Management Server
100RISK
open ↗GitHub PoC
Example how to use this CVE
multer vulnerable to Denial of Service via crafted multipart field names
41RISK
open ↗GitHub PoC★ 31
Proof of concept for CVE-2026-43786, a local privilege escalation vulnerability in macOS CoreServices that allows an application to gain root privileges.
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia
41RISK
open ↗GitHub PoC
ExDev994/CVE-2026-90817
An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import proce
63RISK
open ↗GitHub PoC★ 2
Unauth REDCap RCE (CVE-2026-90817) mass check PoC — requires public survey hash for full validation.
An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import proce
63RISK
open ↗GitHub PoC
Redacted notes on CVE-2026-28618 / StreamBox APV lab — heap write into a session object via FRAME height mismatch
In dec_frm_prepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote cod
41RISK
open ↗GitHub PoC★ 1
XSS2Shell: WordPress Preauth XSS to RCE Chain (CVE-2026-64638)
WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen.
Via a specially crafted malici
56RISK
open ↗GitHub PoC
A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing unauthenticated attackers to gain root-level WHM access by injecting CRLF sequences into server-side session files via the Authorization header — no credentials required.
WebPros cPanel and WHM Authentication Bypass via Login Flow
100RISK
open ↗GitHub PoC
CVE-2026-8932 PoC - incomplete mTLS config matching in conn reuse
incomplete mTLS config matching in conn reuse
41RISK
open ↗GitHub PoC★ 1
PoC exploit and scanner for CVE-2026-89026, targeting the Issabel PBXAPI authentication vulnerability
Issabel Framework Hard-coded JWT Key RCE via pbxapi/manager/originate
63RISK
open ↗GitHub PoC
JSM Show Post Metadata < 4.9.1 - Contributor+ Stored XSS via Custom Field Meta Key
JSM Show Post Metadata < 4.9.1 - Contributor+ Stored XSS via Custom Field Meta Key
33RISK
open ↗GitHub PoC★ 1
Netcore NBR200V2 traceroute command injection PoC (CVE-2026-94095); ubus JSON-RPC -> system() root RCE; for authorized testing
Netcore NBR200V2 Traceroute Diagnostic Feature network_tools command injection
48RISK
open ↗GitHub PoC
Linux CVE-2026-43284 & CVE-2026-43500
xfrm: esp: avoid in-place decrypt on shared skb frags
78RISK
open ↗GitHub PoC★ 21
This repository documents the VectorFreed RCE chain and includes a PoC for CVE-2026-96889.
Librsvg: use-after-free when xml includes have duplicated entities
41RISK
open ↗GitHub PoC
Craft CMS CVE-2026-72778 condition.config RCE PoC
Craft CMS 5.0.0-RC1 before 5.10.6 Authenticated RCE via condition.config
41RISK
open ↗GitHub PoC
Craft CMS CVE-2026-72781 Twig sandbox escape RCE PoC
Craft CMS 5.0.0-RC1 before 5.10.7 Remote Code Execution via Twig Sandbox Escape
41RISK
open ↗GitHub PoC
Mass check/research exploit for HP HPLIP CVE-2026-91097–91106 (<3.26.6), PAPPL :8000 IPP probes + hpssd templates
HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities
41RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.