Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
87,899cataloged exploits
40,763CVEs with public exploitation
24,696lab-tested
AllReferência 26,463Exploit-DB 24,489GitHub PoC 18,324VulnCheck XDB 10,507Nuclei 4,577Metasploit 3,539✓ verified onlyrecentpopularrisk
87,899 exploits
GitHub PoC
CVE-2026-86478 - JetBrains YouTrack Helpdesk unauthenticated account takeover via self-asserted email (CVSS 9.8)
In JetBrains YouTrack before 2025.3.161254,
2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthent
48RISK
open ↗VulnCheck XDB
client-side
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RISK
open ↗GitHub PoC
Plex2Shell (CVE-2026-96652/54/55/56) IOC/IOA dossier and read-only Windows hunt script
Plex Media Server SSRF
83RISK
open ↗GitHub PoC★ 1
PHP2Shell · CVE-2026-109618 / CVE-2026-109619 的 PHP RCE 源码审计与补丁分析 | PHP remote code execution source audit, request lifecycle analysis and upstream patch review
RCE via OOM corruption
100RISK
open ↗VulnCheck XDB
initial-access
Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack
100RISK
open ↗VulnCheck XDB
initial-access
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
open ↗GitHub PoC
Reproducer for CVE-2026-85300 — Apache Camel camel-pqc private key written with permissive file permissions (CWE-276); Spring Boot + Quarkus, affected vs fixed
Apache Camel: Camel-PQC Private Key Disclosure via Key Material Written with Default File Permissions
33RISK
open ↗GitHub PoC
Linux penetration testing lab: reverse shell, SUID privilege escalation, NFS misconfiguration, writable /etc/passwd, PATH hijacking, and PwnKit (CVE-2021-4034), with evidence and remediation.
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗GitHub PoC
Secure REST API with CI/CD and CVE-2021-41773 analysis
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
open ↗GitHub PoC★ 1
Proof of Concept for CVE-2026-86950
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.11 and iPadOS
76RISK
open ↗VulnCheck XDB
local
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti
100RISK
open ↗GitHub PoC
Exploit and writeup for CVE-2026-87690
Metasploit Framework ios_image_gather Path Traversal Leading to Arbitrary File Write and Code Execution
41RISK
open ↗GitHub PoC★ 1
cve-2026-62911-exploit
Microsoft Exchange Server Elevation of Privilege Vulnerability
41RISK
open ↗GitHub PoC
Reproducer for CVE-2026-85314 — Apache Camel camel-mail MimeMultipart mail.smtp header injection (CWE-20). Camel Spring Boot + Camel Quarkus.
Apache Camel: Camel-Mail Header Injection via Unfiltered mail.smtp Headers in the MimeMultipart Data Format (Incomplete Fix of CVE-2026-46584)
33RISK
open ↗GitHub PoC
Exploit and writeup for CVE-2026-87690
Metasploit Framework ios_image_gather Path Traversal Leading to Arbitrary File Write and Code Execution
41RISK
open ↗VulnCheck XDB
initial-access
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5
48RISK
open ↗GitHub PoC
CVE-2026-108097
Drupal core - Critical - Remote code execution - SA-CORE-2026-014
41RISK
open ↗GitHub PoC
Research attribution and coordinated disclosure status for CVE-2026-105484.
TOTOLINK X6000R UploadFirmwareFile cstecgi.cgi firmware_check os command injection
48RISK
open ↗GitHub PoC
MARIMO RCE & NKABUSE EXPLOIT FRAMEWORK (CVE-2026-39987) - RE-WEAPONIZED - This framework exploits CVE-2026-39987, a critical Remote Code Execution (RCE) vulnerability in Marimo, a popular Python-based data visualization tool. Attackers actively exploit this flaw to deploy NKAbuse, a blockchain-based botnet malware.
marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass
100RISK
open ↗GitHub PoC
Laboratorio de análisis y explotación de la vulnerabilidad CVE-2025-5548
FreeFloat FTP Server NOOP Command buffer overflow
38RISK
open ↗GitHub PoC★ 2
CVE-2026-106173
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5
48RISK
open ↗GitHub PoC
CVE-2026-99999 Educational Analysis — attack chain simulation of Linux kernel csum_start bug (CVSS 9.3). See also: CVE-2026-99999-exploit (Working PoC).
ipv4: validate checksum_start before completing checksum
48RISK
open ↗GitHub PoC
BlessingOlaniyan/cve-2017-0143-smbv1-analysis
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RISK
open ↗GitHub PoC
利用CVE-2019-2215给小米5获取临时root（比较通用？）
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti
100RISK
open ↗GitHub PoC
Work 1 — secure Flask REST API with CI/CD (bandit, pip-audit) and a CVE-2021-41773 analysis
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
open ↗GitHub PoC
Log4Shell (CVE-2021-44228) audit findings and Actions smoke-test workflow
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
open ↗GitHub PoC
CVE-2026-99999 Working PoC — real VM escape for Linux kernel csum_start bug (CVSS 9.3). Guest-to-Host heap leak. See also: CVE-2026-99999-analysis (Educational).
ipv4: validate checksum_start before completing checksum
48RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.