Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
71,886cataloged exploits
32,153CVEs with public exploitation
1,932lab-tested
71,886 exploits
VulnCheck XDB
local
crypto: algif_aead - Revert to operating out-of-place
GitHub PoC★ 1
CVE-2026-41940 Direct Shell Acess
WebPros cPanel and WHM Authentication Bypass via Login Flow
VulnCheck XDB
initial-access
WebPros cPanel and WHM Authentication Bypass via Login Flow
VulnCheck XDB
initial-access
WebPros cPanel and WHM Authentication Bypass via Login Flow
VulnCheck XDB
initial-access
WebPros cPanel and WHM Authentication Bypass via Login Flow
VulnCheck XDB
initial-access
WebPros cPanel and WHM Authentication Bypass via Login Flow
VulnCheck XDB
local
crypto: algif_aead - Revert to operating out-of-place
GitHub PoC
Hunt-Benito/cve-2026-41200-stig-manager-oidc-reflected-xss
STIG Manager has reflected XSS vulnerability in the Web App
VulnCheck XDB
local
crypto: algif_aead - Revert to operating out-of-place
VulnCheck XDB
local
crypto: algif_aead - Revert to operating out-of-place
VulnCheck XDB
local
crypto: algif_aead - Revert to operating out-of-place
VulnCheck XDB
local
crypto: algif_aead - Revert to operating out-of-place
VulnCheck XDB
local
crypto: algif_aead - Revert to operating out-of-place
VulnCheck XDB
local
crypto: algif_aead - Revert to operating out-of-place
VulnCheck XDB
local
crypto: algif_aead - Revert to operating out-of-place
GitHub PoC
Proof of concept exploit for CVE-2024-53677 - Apache Struts file upload path traversal vulnerability leading to Remote Code Execution
Apache Struts: Mixing setters for uploaded files and normal fields can allow bypass file upload checks
VulnCheck XDB
local
crypto: algif_aead - Revert to operating out-of-place
VulnCheck XDB
local
crypto: algif_aead - Revert to operating out-of-place
VulnCheck XDB
local
crypto: algif_aead - Revert to operating out-of-place
VulnCheck XDB
local
crypto: algif_aead - Revert to operating out-of-place
VulnCheck XDB
local
crypto: algif_aead - Revert to operating out-of-place
VulnCheck XDB
local
crypto: algif_aead - Revert to operating out-of-place
VulnCheck XDB
local
crypto: algif_aead - Revert to operating out-of-place
VulnCheck XDB
local
Microsoft Defender Elevation of Privilege Vulnerability
GitHub PoC
CVE-2026-31431 - Copy Fail - PoC exploit
crypto: algif_aead - Revert to operating out-of-place
GitHub PoC★ 3
Easy-to-understand version of CVE-2026-31431
crypto: algif_aead - Revert to operating out-of-place
VulnCheck XDB
local
crypto: algif_aead - Revert to operating out-of-place
VulnCheck XDB
local
crypto: algif_aead - Revert to operating out-of-place
VulnCheck XDB
local
crypto: algif_aead - Revert to operating out-of-place
VulnCheck XDB
remote-with-credentials
Flowise has Remote Code Execution vulnerability
We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.