Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

79,057cataloged exploits

36,288CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,460Referência 22,910GitHub PoC 14,997VulnCheck XDB 8,843Nuclei 4,358Metasploit 3,489✓ verified onlyrecent popular risk

14,997 exploits

GitHub PoC★ 1

CVE-2026-76060 PoC for a ZoneMinder vulnerability leading to RCE

CVE-2026-76060HIGH06 Jun 2026

OS Command Injection in PayRange API

41RISK

open ↗

GitHub PoC★ 8

0xEhab/FreePBX-CVE-2025-57819-RCE

CVE-2025-57819CRITICALunder attack06 Jun 2026

FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE

100RISK

open ↗

GitHub PoC

TechWithOrgito/CVE-2025-55182-Researching-process

CVE-2025-55182CRITICALunder attackransomware06 Jun 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISK

open ↗

GitHub PoC

Apache ActiveMQ RCE via Jolokia vulnerability analysis and reproduction notes

CVE-2026-34197HIGHunder attack06 Jun 2026

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans

100RISK

open ↗

GitHub PoC★ 6

🚀 CVE-2026-24061 - GNU inetutils-telnetd Auth Bypass Exploit - Full Control 💥 CRLF injection via NEW_ENVIRON leads to auth bypass & instant root shell. ✅ Single/Mass exploitation, multi-threading, custom port/user, pipe mode, session keep-alive, colored output, retries, timeout support. ⚡ Python & Bash versions. Critical CVSS 9.8.

CVE-2026-24061CRITICALunder attack06 Jun 2026

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment

100RISK

open ↗

GitHub PoC★ 3

CVE-2026-42588 - Apache ActiveMQ Jolokia 远程代码执行漏洞利用 (RCE Exploit)

CVE-2026-42588HIGH06 Jun 2026

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Remote Code Execution via Jolokia addNetworkConnector

41RISK

open ↗

GitHub PoC

CVE-2026-20245 - Cisco SD-WAN - Draft

CVE-2026-20245HIGHunder attack06 Jun 2026

Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability

76RISK

open ↗

GitHub PoC★ 1

horrister/moveit-transfer-cve-2023-34362

CVE-2023-34362CRITICALunder attackransomware06 Jun 2026

In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023.

100RISK

open ↗

GitHub PoC

CVE-2026-23744 Reverse shell

CVE-2026-23744CRITICAL06 Jun 2026

REC in MCPJam inspector due to HTTP Endpoint exposes

75RISK

open ↗

GitHub PoC★ 1

Hippoo Mobile App for WooCommerce <= 1.9.4 - Unauthenticated Authentication Bypass to Administrator Account Takeover

CVE-2026-10580CRITICAL06 Jun 2026

Hippoo Mobile App for WooCommerce <= 1.9.4 - Unauthenticated Authentication Bypass to Administrator Account Takeover via REST API

63RISK

open ↗

GitHub PoC

CVE-2023-46604-RCE exploit with Linux reverse shell payload

CVE-2023-46604CRITICALunder attackransomware06 Jun 2026

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISK

open ↗

GitHub PoC

HTTP/2 attack simulation & defense lab - Slowloris, Rapid Reset (CVE-2023-44487), HPACK Bomb attacks with 5 layered defenses. Built in pure Python with raw sockets and h2 library.

CVE-2023-44487HIGHunder attack06 Jun 2026

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many

93RISK

open ↗

GitHub PoC

Popcorn HTB write-up covering advanced directory fuzzing, file upload bypass via magic numbers/extension spoofing using Burp Suite, and privilege escalation via CVE-2010-0832 (PAM MOTD File Tampering).

CVE-2010-0832—05 Jun 2026

pam_motd (aka the MOTD module) in libpam-modules before 1.1.0-2ubuntu1.1 in PAM on Ubuntu 9.10 and libpam-modules before

23RISK

open ↗

GitHub PoC

t1ckprivate/CVE-2026-43284-Dirty-Frag

CVE-2026-43284HIGH05 Jun 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

78RISK

open ↗

GitHub PoC

cve-2026-23744 python exploit

CVE-2026-23744CRITICAL05 Jun 2026

REC in MCPJam inspector due to HTTP Endpoint exposes

75RISK

open ↗

GitHub PoC★ 1

Modern Events Calendar Lite <= 7.33.0 — Unauthenticated SQL Injection

CVE-2026-11349HIGH05 Jun 2026

Modern Events Calendar (Lite & Pro) < 7.34.0 - Unauthenticated SQL Injection via mec_list_load_more

41RISK

open ↗

GitHub PoC

yurahshell/CVE-2025-55182

CVE-2025-55182CRITICALunder attackransomware05 Jun 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISK

open ↗

GitHub PoC★ 66

Safely detect whether a UniFi OS Server is vulnerable to CVE-2026-34908

CVE-2026-34908CRITICALunder attack05 Jun 2026

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS de

100RISK

open ↗

GitHub PoC

yurahshell/CVE-2025-49132

CVE-2025-49132CRITICAL05 Jun 2026

Pterodactyl Panel Allows Unauthenticated Arbitrary Remote Code Execution

75RISK

open ↗

GitHub PoC

ARMember Premium <= 7.3.1 Full Admin Account Takeover

CVE-2026-5076CRITICAL05 Jun 2026

ARMember Premium <= 7.3.1 - Insecure Password Reset Mechanism to Unauthenticated Privilege Escalation

48RISK

open ↗

GitHub PoC★ 21

TheCyberGeek/CVE-2026-4480-PoC

CVE-2026-4480CRITICAL05 Jun 2026

Samba: samba: remote code execution in printing subsystem via unescaped job description

68RISK

open ↗

GitHub PoC★ 1

CVE-2026-48866 — Gravity Forms <= 2.10.0.1 Arbitrary File Deletion via Path Traversal (CVSS 9.6)

CVE-2026-48866CRITICAL05 Jun 2026

WordPress Gravity Forms plugin <= 2.10.0.1 - Arbitrary File Deletion vulnerability

48RISK

open ↗

GitHub PoC

Technical writeup and penetration testing report for CVE-2010-2075, demonstrating UnrealIRCd backdoor exploitation and remediation.

CVE-2010-2075—05 Jun 2026

UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally

60RISK

open ↗

GitHub PoC

t1ckprivate/CVE-2026-31431-Copy-Fail

CVE-2026-31431HIGHunder attack05 Jun 2026

crypto: algif_aead - Revert to operating out-of-place

100RISK

open ↗

GitHub PoC

react CVE-2025-55182

CVE-2025-55182CRITICALunder attackransomware05 Jun 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISK

open ↗

GitHub PoC

rootdirective-sec/CVE-2026-8206-Lab

CVE-2026-8206CRITICAL05 Jun 2026

Kirki 6.0.0 - 6.0.6 - Unauthenticated Privilege Escalation via 'handle_forgot_password'

48RISK

open ↗

GitHub PoC

react2shell - CVE-2025-55182 (Next.js: CVE-2025-66478) - Unauthenticated RCE in React Server Components (Flight Protocol) - PoC Exploit

CVE-2025-55182CRITICALunder attackransomware05 Jun 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISK

open ↗

GitHub PoC

adamshaikhma/CVE-2026-3300

CVE-2026-3300CRITICAL05 Jun 2026

Everest Forms Pro <= 1.9.12 - Unauthenticated Remote Code Execution via Calculation Field

75RISK

open ↗

GitHub PoC

CVE-2026-3300

CVE-2026-3300CRITICAL05 Jun 2026

Everest Forms Pro <= 1.9.12 - Unauthenticated Remote Code Execution via Calculation Field

75RISK

open ↗

GitHub PoC

PoC for CVE-2026-26179 / ZDI-26-276, my very own Secure Kernel bug

CVE-2026-26179HIGH05 Jun 2026

Windows Kernel Elevation of Privilege Vulnerability

41RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.