Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

84,127cataloged exploits
39,600CVEs with public exploitation
24,695lab-tested
AllReferência 25,618Exploit-DB 24,485GitHub PoC 16,333VulnCheck XDB 9,678Nuclei 4,488Metasploit 3,525✓ verified onlyrecentpopularrisk
16,313 exploits
GitHub PoC
CVE-2026-110025: bilingual analysis and safe local PoC for phpwcms unrestricted upload to RCE
CVE-2026-110025MEDIUM13 Oct 2026
slackero phpwcms Extension Check cnt23.article.inc.php unrestricted upload
33RISK
open ↗
GitHub PoC
Malware analysis of a malicious RTF document exploiting CVE-2017-11882, done in a REMnux lab with static analysis and shellcode emulation.
CVE-2017-11882HIGHunder attackransomware13 Oct 2026
Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi
100RISK
open ↗
GitHub PoC
Independent reconstruction, lab validation, and PoC for CVE-2026-9198, the Langflow unauthenticated RCE (fixed in 1.10.1)
CVE-2026-9198CRITICALunder attack12 Oct 2026
Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation
98RISK
open ↗
GitHub PoC
0xCyp1337/CVE-2026-63030-CVE-2026-60137-WP2SHELL
CVE-2026-63030CRITICALunder attack12 Oct 2026
WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
98RISK
open ↗
GitHub PoC
Working PoC + debugging writeup for CVE-2025-32432 (Craft CMS pre-auth RCE)
CVE-2025-32432CRITICALunder attack12 Oct 2026
Craft CMS Allows Remote Code Execution
100RISK
open ↗
GitHub PoC★ 1
For new CVEs without existing/working/non-mangled POCs
CVE-2026-9586CRITICALunder attack12 Oct 2026
Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMB
98RISK
open ↗
GitHub PoC
Independent public PoC for CVE-2026-79987 — Craft CMS 5.9.0–5.10.12 authenticated RCE. Patch-analysis n-day implementation, verified on vanilla lab. Advisory: GHSA-9c4j-cjw3-r3xx
CVE-2026-79987HIGH12 Oct 2026
Low-privilege RCE through element-search eager loading
41RISK
open ↗
GitHub PoC
CVE-2026-91136 Divi Plus <= 2.4.0 unauthenticated arbitrary file read (mass scanner + exploit)
CVE-2026-91136HIGH12 Oct 2026
Divi Plus <= 2.4.0 - Unauthenticated Arbitrary File Read via 'svg_image' Parameter
56RISK
open ↗
GitHub PoC
CVE-2026-104082, CVE-2026-104083, CVE-2026-104084
CVE-2026-104082HIGH12 Oct 2026
SmarterMail < Build 9777 SysAdmin Remote Code Execution via Volume Mount
41RISK
open ↗
GitHub PoC
AraxyAI/CVE-2026-92956__vm2__test__20261012
CVE-2026-92956CRITICAL12 Oct 2026
vm2 3.10.1 through 3.11.6 Sandbox Escape via WebAssembly.compileStreaming
48RISK
open ↗
GitHub PoC★ 7
CVE-2026-85097 – Bricksforge WordPress Plugin Unauth File Upload to RCE Toolkit (CVSS 10.0) | Red/Blue Team suite for Bricksforge Pro Forms < 3.1.8.9. 2 tools: Full Exploit (polyglot upload, web shell, mass scan, OPSEC, SQLite/JSON output) + SafeChecker (version detect, non-intrusive audit). Ethical & educational use only.
CVE-2026-85097CRITICAL12 Oct 2026
Bricksforge <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter
48RISK
open ↗
GitHub PoC★ 3
0xad3m/CVE-2026-13078-POC
CVE-2026-13078MEDIUM12 Oct 2026
Local File Disclosure in MongoDB Server via MozJS Scripting Engine Module Loader
33RISK
open ↗
GitHub PoC
Proof of concept and isolated Docker lab for CVE-2026-103889, an unauthenticated RCE vulnerability in Expivi 3D Product Configurator for WooCommerce ≤ 2.16.2.
CVE-2026-103889CRITICAL12 Oct 2026
3D Product configurator for WooCommerce <= 2.16.2 - Unauthenticated Remote Code Execution via 'xpv_image' Parameter
48RISK
open ↗
GitHub PoC★ 9
CVE-2026-91737 Chrome renderer RCE PoC (PDFium)
CVE-2026-91737HIGH12 Oct 2026
Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside
41RISK
open ↗
GitHub PoC
CVE-2026-102255 - Draft or TODO
CVE-2026-102255CRITICAL12 Oct 2026
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended altern
48RISK
open ↗
GitHub PoC
Independent reconstruction, lab validation, and PoC for CVE-2026-72898 — Metabase unauthenticated SQLi (patched in 0.63.5)
CVE-2026-72898CRITICALunder attack12 Oct 2026
Metabase SQL injection via password reset endpoint
100RISK
open ↗
GitHub PoC
A complete guide and workflow for integrating Agile sprints with DevOps CI/CD pipelines.
CVE-2026-102255CRITICAL12 Oct 2026
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended altern
48RISK
open ↗
GitHub PoC★ 1
CVE-2026-84411 root cause notes and a non-destructive probe (RouterOS before 7.24)
CVE-2026-84411CRITICAL12 Oct 2026
MikroTik RouterOS Integer Underflow
48RISK
open ↗
GitHub PoC★ 213
cPanel & WHM Authentication Bypass via CVE-2026-41940 explotation
CVE-2026-41940CRITICALunder attackransomware11 Oct 2026
WebPros cPanel and WHM Authentication Bypass via Login Flow
100RISK
open ↗
GitHub PoC★ 1
Reactor es una máquina Linux fácil vulnerable a CVE-2025-55182 (React2Shell), RCE sin autenticación en React Server Components. Accedemos como node, crackeamos un hash MD5 de una base de datos SQLite y pivotamos a engineer por SSH. La escalada abusa del flag --inspect de Node.js para ejecutar código como root vía depuración V8.
CVE-2025-55182CRITICALunder attackransomware11 Oct 2026
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
GitHub PoC★ 7
CVE-2026-102489 exploit in golang
CVE-2026-102489HIGHunder attack11 Oct 2026
Undisclosed RCE in Zammad v6.3 and higher
71RISK
open ↗
GitHub PoC
toyplan/cve-2025-24813
CVE-2025-24813CRITICALunder attack11 Oct 2026
Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
100RISK
open ↗
GitHub PoC
Unauthenticated RCE in WordPress Forminator Forms <= 1.56.1 (CVSS 9.8)
CVE-2026-15748CRITICAL11 Oct 2026
Forminator Forms <= 1.56.1 - Unauthenticated Arbitrary File Upload via Forged Upload Field Configuration
48RISK
open ↗
GitHub PoC
ctroy999/CVE-2026-107406
CVE-2026-107406CRITICAL11 Oct 2026
Memory overflow vulnerability leading to Remote Code Execution or Denial of Service
48RISK
open ↗
GitHub PoC
PoC CVE-2026-104286 FortiMail
CVE-2026-104286CRITICALunder attack11 Oct 2026
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.
78RISK
open ↗
GitHub PoC
Farih123/CVE-2026-104335
CVE-2026-104335HIGH11 Oct 2026
Langflow OSS is affected by multiple vulnerabilities
41RISK
open ↗
GitHub PoC
CVE-2026-105306: Token Introspection Audience Bypass via Dynamic Client Registration in Keycloak - Writeup by DungSoCool
CVE-2026-105306MEDIUM11 Oct 2026
Keycloak-services: keycloak-services: token introspection audience bypass via dynamic client registration
33RISK
open ↗
GitHub PoC
Binary diff analysis and non-destructive PoC for CVE-2026-43805
CVE-2026-43805CRITICAL11 Oct 2026
A race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequ
48RISK
open ↗
GitHub PoC
FreePBX unauthenticated SQLi (endpoint module)
CVE-2025-57819CRITICALunder attack11 Oct 2026
FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE
100RISK
open ↗
GitHub PoC
webserverdude/f5_CVE-2026-21589_mitigation
CVE-2026-21589CRITICALunder attack10 Oct 2026
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft
98RISK
open ↗
← previouspage 7 / 544next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.