Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,622cataloged exploits
32,030CVEs with public exploitation
1,932lab-tested
13,187 exploits
GitHub PoC3
PoC exploit for CVE-2025-49132 (GHSA-24wv-6c99-f843) – Unauthenticated Remote Code Execution in Pterodactyl Panel ≤ 1.11.10
CVE-2025-49132CRITICAL11 Feb 2026
Pterodactyl Panel Allows Unauthenticated Arbitrary Remote Code Execution
68RISK
open
GitHub PoC1
This script exploits Remote Code Execution vulnerability in Pterodactyl Panel < 1.11.11
CVE-2025-49132CRITICAL11 Feb 2026
Pterodactyl Panel Allows Unauthenticated Arbitrary Remote Code Execution
68RISK
open
GitHub PoC
Cisco iOS SNMP Overflow Exploit Toolkit (CVE-2017-6736)
CVE-2017-6736HIGHunder attack11 Feb 2026
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabiliti
93RISK
open
GitHub PoC
Ahmedf000/CVE-2025-49132_HTB_SEASON10
CVE-2025-49132CRITICAL11 Feb 2026
Pterodactyl Panel Allows Unauthenticated Arbitrary Remote Code Execution
68RISK
open
GitHub PoC
A POC chain exploit using the recent Cisco SMP exploit (CVE-2017-6736) to chain into Spectre (CVE-2017-5753 and CVE-2017-5715)
CVE-2017-6736HIGHunder attack11 Feb 2026
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabiliti
93RISK
open
GitHub PoC
PowerShell remediation for CVE-2013-3900 (WinVerifyTrust) / Tenable Plugin 166555 using EnableCertPaddingCheck.
CVE-2013-3900MEDIUMunder attack11 Feb 2026
WinVerifyTrust Signature Validation Vulnerability
75RISK
open
GitHub PoC
This is a modified version of the time-based SQL injection exploit for CMS Made Simple <= 2.2.9. The exploit was originally created by Daniele Scanu and has been updated for better compatibility and modern Python practices.
CVE-2019-905311 Feb 2026
An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve
35RISK
open
GitHub PoC
IsmaelCosma/CVE-2025-8088
CVE-2025-8088HIGHunder attack11 Feb 2026
Path traversal vulnerability in WinRAR
93RISK
open
GitHub PoC
CVE-2025-62215 exploit development using Claude Code Agent Team
CVE-2025-62215HIGHunder attack11 Feb 2026
Windows Kernel Elevation of Privilege Vulnerability
71RISK
open
GitHub PoC1
Ni8mare, n8n RCE
CVE-2026-21858CRITICAL11 Feb 2026
n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling
85RISK
open
GitHub PoC
Wise-Security/CVE-2025-69599
CVE-2025-69599CRITICAL11 Feb 2026
RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH e
48RISK
open
GitHub PoC1
George0Papasotiriou/CVE-2025-61882-Oracle-BI-Publisher-RCE
CVE-2025-61882CRITICALunder attackransomware10 Feb 2026
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integratio
100RISK
open
GitHub PoC3
CVE-2025-54253 | CVE-2025-54254 | Adobe Experience Manager Forms XXE → RCE Framework
CVE-2025-54253CRITICALunder attack10 Feb 2026
Adobe Experience Manager | Incorrect Authorization (CWE-863)
100RISK
open
GitHub PoC
Laboratorio criado para PenTest da Vuln CVE 2024-214113(MONIKER LINK).
CVE-2024-21413CRITICALunder attack10 Feb 2026
Microsoft Outlook Remote Code Execution Vulnerability
100RISK
open
GitHub PoC1
Enumeration tool for CVE-2024-45440
CVE-2024-45440MEDIUM10 Feb 2026
core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of hash
48RISK
open
GitHub PoC1
George0Papasotiriou/CVE-2025-59470-PostgreSQL-Command-Injection
CVE-2025-59470CRITICAL10 Feb 2026
This vulnerability allows a Backup Operator to perform remote code execution (RCE) as the postgres user by sending a mal
48RISK
open
GitHub PoC1
George0Papasotiriou/CVE-2025-15556-Notepad-WinGUp-Updater-RCE
CVE-2025-15556HIGHunder attack10 Feb 2026
Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verification
71RISK
open
GitHub PoC
bixiPRO/Drupalgeddon2-CVE-2018-7600
CVE-2018-7600CRITICALunder attackransomware10 Feb 2026
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi
100RISK
open
GitHub PoC
RCE on Next 16.0.6
CVE-2025-55182CRITICALunder attackransomware10 Feb 2026
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open
GitHub PoC1
George0Papasotiriou/CVE-2025-55182-React2Shell-CVSS-10.0-
CVE-2025-55182CRITICALunder attackransomware10 Feb 2026
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open
GitHub PoC1
CVE-2025-49132: Pterodactyl Panel UnauthN LFI to RCE (w/ pearcmd) in posix sh
CVE-2025-49132CRITICAL10 Feb 2026
Pterodactyl Panel Allows Unauthenticated Arbitrary Remote Code Execution
68RISK
open
GitHub PoC
bananoname/CVE-2024-6386-WPML-SSTI
CVE-2024-6386CRITICAL10 Feb 2026
WPML Multilingual CMS <= 4.6.12 - Authenticated (Contributor+) Remote Code Execution via Twig Server-Side Template Injection
53RISK
open
GitHub PoC1
George0Papasotiriou/CVE-2025-8110-Gogs-Remote-Code-Execution
CVE-2025-8110HIGHunder attack10 Feb 2026
File overwrite in file update API in Gogs
100RISK
open
GitHub PoC3
George0Papasotiriou/CVE-2025-14174-Chrome-Zero-Day
CVE-2025-14174HIGHunder attack10 Feb 2026
Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perfor
76RISK
open
GitHub PoC
faysalferdous/CVE-2025-68645-Exploiting-Zimbra-Webmail-LFI-Vulnerability
CVE-2025-68645HIGHunder attack10 Feb 2026
A Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra Collaboration (ZCS) 10.0 and 10.1
98RISK
open
GitHub PoC
CVE-2025-9074: Docker Desktop LPE via Docker Engine API wo/ AuthN in posix sh
CVE-2025-9074CRITICAL09 Feb 2026
Docker Desktop allows unauthenticated access to Docker Engine API from containers
48RISK
open
GitHub PoC1
This repo contains RCE exploit for Pterodactyl htb machine
CVE-2025-49132CRITICAL09 Feb 2026
Pterodactyl Panel Allows Unauthenticated Arbitrary Remote Code Execution
68RISK
open
GitHub PoC
HikVision Auth Bypass CVE, tool is able to extract credentials, and take snapshots based on magic cookie or supplied credentials.
CVE-2017-7921CRITICALunder attack09 Feb 2026
An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16
100RISK
open
GitHub PoC1
IoCs and detection rules for the Notepad++ supply chain attack (CVE-2025-15556) — Lotus Blossom APT, June–December 2025. Includes Falcon LogScale queries, YARA/Sigma rules, and MITRE ATT&CK mapping.
CVE-2025-15556HIGHunder attack09 Feb 2026
Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verification
71RISK
open
GitHub PoC
Proof-of-concept exploit for CVE-2017-12542, an authentication bypass vulnerability in HP iLO. Allows vulnerability detection and unauthorized account creation on affected systems
CVE-2017-1254209 Feb 2026
A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53
60RISK
open

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.