Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
84,139cataloged exploits
39,601CVEs with public exploitation
24,695lab-tested
AllReferência 25,624Exploit-DB 24,485GitHub PoC 16,337VulnCheck XDB 9,680Nuclei 4,488Metasploit 3,525✓ verified onlyrecentpopularrisk
16,313 exploits
GitHub PoC
CVE-2019-2215 temporary root toolkit for Smartisan Nut Pro (OD105)
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti
100RISK
open ↗GitHub PoC
KyrieKlay/CVE-2026-37107
An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the get_feed function in the admin.php com
48RISK
open ↗GitHub PoC
Synthetic-data billing portal pinned to next@14.2.24 (CVE-2025-29927) — test customer for oopsie
Authorization Bypass in Next.js Middleware
85RISK
open ↗GitHub PoC
Zombify <= 1.7.7 Unauthenticated Arbitrary File Upload
WordPress Zombify plugin <= 1.7.7 - Arbitrary File Upload vulnerability
48RISK
open ↗GitHub PoC★ 1
Bricksforge <= 3.1.8.9 Unauthenticated Arbitrary File Upload
Bricksforge <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter
48RISK
open ↗GitHub PoC
webserverdude/f5_CVE-2026-21589_mitigation
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft
98RISK
open ↗GitHub PoC
**CVE-2026-69414** is an elevation of privilege vulnerability in the **Microsoft Malware Protection Engine** (part of Windows Defender / Microsoft Defender Antivirus), publicly referred to as **"RoguePlanet"**. It represents a **patch bypass** of the original vulnerability **CVE-2026-50656**.
Microsoft Defender Elevation of Privilege Vulnerability
41RISK
open ↗GitHub PoC
CVE-2026-102428 PoC: OrdaSoft Joomla OS CCK (com_os_cck) <=8.3.15 unauth SQLi — order_field/order_direction ORDER BY injection on public listings. Check + mass exploit, POCBIT-102428-OK marker, CVSS 9.3. https://pocbit.org/pocs/cve-2026-102428
Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16
48RISK
open ↗GitHub PoC
SQL injection (CWE-89) in itsourcecode Leave Management System 1.0 - CVE-2026-103690 / VulDB VDB-412559
itsourcecode Leave Management System controller.php sql injection
33RISK
open ↗GitHub PoC
FortiMail CVE-2026-104286 (CVSS 9.8) 점검·대응 도구 (버전 확인, IoC 점검, 완화·패치 체크리스트)
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.
78RISK
open ↗GitHub PoC
MIT-licensed braces 3.0.3 with reviewed CVE-2026-93687 depth backport; pinned consumption only
braces through 3.0.3 Stack Overflow via Deeply Nested Patterns
41RISK
open ↗GitHub PoC★ 13
Reproducible macOS automountd research and lab PoCs for CVE-2026-84568 and CVE-2026-84570: fstype path traversal, NFS payload delivery, Gatekeeper behavior, and root code execution.
A path traversal issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS S
41RISK
open ↗GitHub PoC★ 1
AppleFDEKeyStore poc
A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27. A local atta
48RISK
open ↗GitHub PoC★ 1
PoC: OrdaSoft Joomla OS CCK (com_os_cck) 8.3.15 unauth SQLi —mass+exploit+dork
Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16
48RISK
open ↗GitHub PoC
Technical analysis of Log4Shell (CVE-2021-44228) for CS50 Cybersecurity.
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
open ↗GitHub PoC★ 3
CVE-2026-106445 — Handlebars 4.0.0–4.7.9 RCE via Function.prototype.constructor bypass (GHSA-p8wg-vrv2-v86f). PoCbit PoC + Docker lab (4.7.9), check/exploit HTTP client, GHSA template chain. Fixed 4.7.10. https://pocbit.org/pocs/cve-2026-106445
Handlebars: JavaScript Injection via Own Property Check Bypass
48RISK
open ↗GitHub PoC★ 7
CVE-2026-107806 — nginx-ui 2.3.8–2.4.x auth RCE via forged backup restore (TestConfigCmd). PoCbit PoC: GET /api/backup, tamper app.ini, POST /api/restore, POST /api/nginx/test. check/exploit, batch url|JWT. Fixed 2.5.0. https://pocbit.org/pocs/cve-2026-107806
Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite
48RISK
open ↗GitHub PoC
Docker lab to test proof of concepts for CVE-2024-4367. A high-severity type confusion and remote code execution flaw in Firefox PDF.js font handling due to missing type checks (affecting Firefox < 126, Firefox ESR < 115.11, and PDF.js < 4.2.67).
A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js c
55RISK
open ↗GitHub PoC
CVE-2026-108592 — Environment Variable Exposure PoC in mini-swe-agent
mini-swe-agent 1.10.0 through 2.4.6 Environment Exposure via BubblewrapEnvironment
33RISK
open ↗GitHub PoC★ 19
Telegram CVE-2026-107181
Telegram Desktop before 7.2.9 IPC Record Injection File Exfiltration via interpret: Scheme
41RISK
open ↗GitHub PoC
hoangvvthu/CVE-2021-44228-Log4Shell-Lab
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
open ↗GitHub PoC
Penetration test of Apache Tomcat — Ghostcat, CVE-2017-12615 and Struts2/OGNL exploitation with MITRE ATT&CK mapping
When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisati
100RISK
open ↗GitHub PoC★ 2
ILIAS ≤ 9.21 / 10.9 / 11.2 — Unauthenticated PHP Object Injection (RCE)
ILIAS PHP Object Injection via Shibboleth Logout
48RISK
open ↗GitHub PoC
AmalJafarzade/CVE-2026-104587
blob42 gosuki through commit 6e2bf34 contains a Stored Cross-Site Scripting (XSS) vulnerability. The application uses te
33RISK
open ↗GitHub PoC★ 1
Atlassian Arbitrary File Read
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft
98RISK
open ↗GitHub PoC
AmalJafarzade/CVE-2026-104586
AUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borg_restore.cgi.
48RISK
open ↗GitHub PoC★ 2
Write-up for CVE-2026-88776
Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service
41RISK
open ↗GitHub PoC
AmalJafarzade/CVE-2026-104585
Mobile Security Framework (MobSF) v4.5.2 is vulnerable to Command Injection in /download_data/, /api/v1/scan, Dynamic An
48RISK
open ↗GitHub PoC
AmalJafarzade/CVE-2026-104584
reNgine up to v2.2.0 and current master branch (commit de4199222cca5618f1255930ce78987e47d43a99) is vulnerable to OS Com
48RISK
open ↗GitHub PoC★ 1
荣耀 90 GT (MAG-AN00) 提权尝试全记录：CVE-2026-64560 移植、堆喷射原语穷举与漏洞判定方法论
posix-cpu-timers: Prevent UAF caused by non-leader exec() race
41RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.