Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
87,464cataloged exploits
40,695CVEs with public exploitation
24,696lab-tested
AllReferência 26,426Exploit-DB 24,489GitHub PoC 18,182VulnCheck XDB 10,251Nuclei 4,577Metasploit 3,539✓ verified onlyrecentpopularrisk
87,464 exploits
VulnCheck XDB
initial-access
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISK
open ↗VulnCheck XDB
local
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISK
open ↗VulnCheck XDB
initial-access
Totolink A7000R cstecgi.cgi setUnloadUserData command injection
33RISK
open ↗VulnCheck XDB
initial-access
Samba: samba: remote code execution in printing subsystem via unescaped job description
68RISK
open ↗VulnCheck XDB
initial-access
A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4-1 running In
48RISK
open ↗VulnCheck XDB
initial-access
n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling
85RISK
open ↗GitHub PoC
GIMP 3.2.2 contains a stack-based buffer overflow in its APNG loader (load_apng_image) when processing the tRNS (transparency) chunk. This writeup demonstrates a proof of concept for remote code execution leveraging this vulnerability.
GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
41RISK
open ↗GitHub PoC
Hassham1/CVE-2026-120019-w3tc-mfunc-comment-xss-poc
W3 Total Cache <= 2.10.7 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Predictable Minify Placeholder
33RISK
open ↗GitHub PoC
CVE-2026-97798
Windows Error Reporting Service Elevation of Privilege Vulnerability
41RISK
open ↗GitHub PoC
Certbn/CVE-2026-98432-Linux-IPv4-TCP-IP-Use-After-Free
ipv4: free inet_opt and ireq_opt after an RCU grace period
48RISK
open ↗VulnCheck XDB
info-leak
LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion
63RISK
open ↗GitHub PoC
Python-based PoC for CVE-2026-98432, probing anomalous IPv4 TCP option behavior associated with a Linux kernel use-after-free race condition.
ipv4: free inet_opt and ireq_opt after an RCU grace period
48RISK
open ↗GitHub PoC
t0ge-kun/CVE-2026-98432-check
ipv4: free inet_opt and ireq_opt after an RCU grace period
48RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.