Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

85,337cataloged exploits

39,873CVEs with public exploitation

24,696lab-tested

All Referência 25,822Exploit-DB 24,487GitHub PoC 17,115VulnCheck XDB 9,874Nuclei 4,511Metasploit 3,528✓ verified onlyrecent popular risk

17,115 exploits

GitHub PoC

A Python-based security tool for checking sudo versions for potential exposure to CVE-2021-3156 (Baron Samedit). Designed for authorized security testing and learning.

CVE-2021-3156HIGHunder attack17 Sep 2026

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RISK

GitHub PoC

Isolated educational FreePBX-compatible cyber range for CVE-2025-57819 (CWE-89/CWE-288). Docker lab — not official Sangoma FreePBX.

CVE-2025-57819CRITICALunder attack17 Sep 2026

FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE

100RISK

GitHub PoC★ 1

SneakyNachos/CVE-2026-85045

CVE-2026-85045HIGH17 Sep 2026

Race condition in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside

41RISK

GitHub PoC★ 2

Unbounded memory allocation in NanaZip's UFS handler via an attacker-controlled `fs_bsize` field.

CVE-2026-55781LOW17 Sep 2026

NanaZip: Unbounded memory allocation (DoS) in NanaZip UFS parser via unvalidated fs_bsize/fs_fsize superblock fields

28RISK

GitHub PoC★ 1

CVE-2026-87796 - Multi Uploader for Gravity Forms <= 1.1.9; Unauthorized RCE (CRITICAL 9.8)

CVE-2026-87796CRITICAL17 Sep 2026

Multi Uploader for Gravity Forms <= 1.1.9 - Unauthenticated Arbitrary File Upload via Chunked File Upload

48RISK

GitHub PoC★ 1

CVE-2026-85706 – GitLab Unauth File Read Toolkit (CVSS 10.0) | Red/Blue Team suite for self-managed GitLab CE/EE 18.7–19.3.1. 2 tools: Full Exploit (unauth file read, admin token, mass scan, loot, shell, stealth, SQLite/HTML/JSON output) etc., SafeChecker (version detect, audit, security headers, TLS check, MITRE). Only Use Ethically, Educ. <3

CVE-2026-85706CRITICALunder attack17 Sep 2026

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

100RISK

GitHub PoC

SangSenimanWartefak/CVE-2026-80467

CVE-2026-80467HIGH17 Sep 2026

Advanced Custom Fields: Extended 0.9.2.2 - 0.9.2.6 - Unauthenticated Privilege Escalation via Front-End User Insert Action

41RISK

GitHub PoC

CVE-2026-19975 - Draft or TODO

CVE-2026-19975LOW17 Sep 2026

Azuriom CMS Money Transfer ProfileController.php transferMoney toctou

28RISK

GitHub PoC

isaca0315/CVE-2026-44840-poc

CVE-2026-44840HIGH17 Sep 2026

Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query

41RISK

GitHub PoC

UVdesk unauth wizard super-admin POC

CVE-2026-92805CRITICAL17 Sep 2026

UVdesk Community Skeleton through 1.1.8 Missing Authentication on the Installation Wizard

28RISK

GitHub PoC

Educational cyber range for CVE-2026-59827 (Metabase H2 unsafe deserialization / CWE-502). Isolated Docker lab — training only, not for attacking production Metabase.

CVE-2026-59827CRITICAL17 Sep 2026

Metabase: Unsafe Deserialization of H2 Query Results

48RISK

GitHub PoC★ 2

CVE-2026-76460

CVE-2026-76460CRITICALunder attack17 Sep 2026

Cisco Identity Services Engine Authentication Bypass Vulnerability

98RISK

GitHub PoC★ 5

CVE-2026-49179: Active Directory WriteSPNScript Command Injection

CVE-2026-49179HIGH17 Sep 2026

Windows Active Directory Domain Services Remote Code Execution Vulnerability

41RISK

GitHub PoC★ 1

CVE-2026-76461

CVE-2026-76461CRITICALunder attack17 Sep 2026

Cisco Secure Email Gateway SQL Injection Vulnerability

83RISK

GitHub PoC★ 1

exploit para reverse shell en MCPJamInspector v1.4.2< por endpoint mal configurado

CVE-2026-23744CRITICAL17 Sep 2026

REC in MCPJam inspector due to HTTP Endpoint exposes

75RISK

GitHub PoC

CVE-2014-0160 (Heartbleed) lab: vulnerable OpenSSL 1.0.1f in Docker, a memory-leak PoC, and a demo. Authorised lab use only.

CVE-2014-0160HIGHunder attack16 Sep 2026

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISK

GitHub PoC

avergnaud/flight-sql-jdbc-driver-cve-2026-54512

CVE-2026-54512HIGH16 Sep 2026

jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation

41RISK

GitHub PoC★ 1

0xgh0stri13y/CVE-2026-109519

CVE-2026-109519MEDIUM16 Sep 2026

YouTransfer Template Rendering template path traversal

33RISK

GitHub PoC★ 1

Issabel pbxapi hard coded JWT RCE POC

CVE-2026-89026CRITICAL16 Sep 2026

Issabel Framework Hard-coded JWT Key RCE via pbxapi/manager/originate

63RISK

GitHub PoC★ 8

Reliable CVE-2025-32432 pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail

CVE-2025-32432CRITICALunder attack16 Sep 2026

Craft CMS Allows Remote Code Execution

100RISK

GitHub PoC★ 48

container escape POCs for CVE-2026-80521 and CVE-2026-52910

CVE-2026-80521HIGH16 Sep 2026

af_unix: Unlink scc_entry in unix_del_edge().

41RISK

GitHub PoC★ 1

Proof-of-Concept for CVE-2026-92680, the insecurely protected credentials vulnerability affecting Araxis Merge.

CVE-2026-92680MEDIUM16 Sep 2026

Araxis Merge insufficiently protected credentials

33RISK

GitHub PoC

CVE-2026-65374 - Draft or TODO

CVE-2026-65374HIGH16 Sep 2026

A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Seq

41RISK

GitHub PoC

Unofficial Apache Doris Spark connector 26.1.0 security fork for Java / Spark 3.5.1 / Scala 2.12; patched shaded Jackson for CVE-2026-54512.

CVE-2026-54512HIGH16 Sep 2026

jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation

41RISK

GitHub PoC

shivammittal2403/cve-2026-80428-ctf

CVE-2026-80428CRITICAL16 Sep 2026

ILIAS PHP Object Injection via Shibboleth Logout

48RISK

GitHub PoC★ 3

Proof of Concept and Write-up for CVE-2026-56096 (Blind Parameter Injection in TYPO3 EXT:solr)

CVE-2026-56096MEDIUM16 Sep 2026

Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)

33RISK

GitHub PoC★ 1

My first CVE

CVE-2026-65330MEDIUM16 Sep 2026

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoi

33RISK

GitHub PoC★ 4

CVE-2026-12793 PoC — JetFormBuilder ≤3.6.2 unauth Register User / admin account creation

CVE-2026-12793CRITICAL16 Sep 2026

JetFormBuilder <= 3.6.2 - Unauthenticated Privilege Escalation via '_jet_engine_booking_form_id' Parameter

48RISK

GitHub PoC

CVE-2026-5430 - Draft or TODO

CVE-2026-5430CRITICALunder attack16 Sep 2026

Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover

78RISK

GitHub PoC★ 2

spip exploits for CVE-2026-72708, CVE-2026-72709, CVE-2026-72710

CVE-2026-72708HIGH16 Sep 2026

SPIP < 4.4.18 Unauthenticated Blind SQL Injection via sitemap.xml.html

41RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.