Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

85,566cataloged exploits

39,907CVEs with public exploitation

24,696lab-tested

All Referência 25,846Exploit-DB 24,488GitHub PoC 17,314VulnCheck XDB 9,877Nuclei 4,513Metasploit 3,528✓ verified onlyrecent popular risk

17,314 exploits

GitHub PoC

PoC: Shiori JWT CheckToken never re-validates account state (CVE-2026-71206, High 8.2)

CVE-2026-71206HIGH16 Aug 2026

shiori - JWT CheckToken Never Re-Validates Account State, Allowing Stale-Privilege Access After Deletion or Demotion

41RISK

open ↗

GitHub PoC★ 5

One-Day POC | GeoServer Unauthenticated SQL injection to complete RCE

CVE-2026-76904CRITICAL16 Aug 2026

GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers

63RISK

open ↗

GitHub PoC

PoC for CVE-2026-73519 - WolfStack hardcoded cluster secret leads to unauthenticated RCE (CVSS 9.8)

CVE-2026-73519CRITICAL16 Aug 2026

WolfStack < 25.9.2 Hard-coded Secret Authentication Bypass via X-WolfStack-Secret

48RISK

open ↗

GitHub PoC★ 3

Public writeup, PoC, and emulation materials for CVE-2026-6837 affecting Zyxel export-cgi PKCS#12 export handling.

CVE-2026-6837HIGH16 Aug 2026

A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel WAX650S firmware versions

41RISK

open ↗

GitHub PoC

PoC for CVE-2026-73847 - emlog AI Assistant CSRF to SQL execution to admin takeover (CVSS 6.8)

CVE-2026-73847MEDIUM16 Aug 2026

Emlog: Missing CSRF protection in AI Assistant execute_tool leads to full database compromise and admin account takeover

33RISK

open ↗

GitHub PoC

PoC: changedetection.io settings blind-merge mass assignment (CVE-2026-71204, Medium 6.3)

CVE-2026-71204MEDIUM16 Aug 2026

changedetection.io - Omitted Checkbox in /settings Save Silently Disables API Key Enforcement

33RISK

open ↗

GitHub PoC

Simple script to achieve safe and non-desruptive active detection of CVE-2026-72898 (SQLi in Metabase)

CVE-2026-72898CRITICALunder attack16 Aug 2026

Metabase SQL injection via password reset endpoint

100RISK

open ↗

GitHub PoC

React2Shell(CVE-2025-55182) 취약점 기반 침해 시나리오를 재현하고, Wazuh/Sysmon/Coraza WAF 로그로 침해사고를 분석·대응한 DFIR 프로젝트

CVE-2025-55182CRITICALunder attackransomware16 Aug 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISK

open ↗

GitHub PoC

Public writeup, PoC, and emulation materials for CVE-2026-8508 affecting Zyxel captive-portal social login.

CVE-2026-8508MEDIUM16 Aug 2026

An improper authentication vulnerability in the "social_login.cgi" CGI program in Zyxel WAX650S firmware versions throug

33RISK

open ↗

GitHub PoC

a-mansilla/CVE-2020-6418

CVE-2020-6418HIGHunder attack16 Aug 2026

Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corru

100RISK

open ↗

GitHub PoC★ 1

Non-destructive detector for CVE-2026-64638 (XSS2Shell) — WordPress pre-auth XSS reflection primitive

CVE-2026-64638HIGH16 Aug 2026

WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially crafted malici

56RISK

open ↗

GitHub PoC★ 2

Events Manager < 7.4.1 - Unauthenticated Privilege Escalation to Administrator

CVE-2026-18366CRITICAL16 Aug 2026

Events Manager < 7.4.1 - Unauthenticated Privilege Escalation to Administrator

48RISK

open ↗

GitHub PoC

POC of CVE-2026-51031 for arbitrary local file read

CVE-2026-51031HIGH16 Aug 2026

FlareSolverr before version 3.4.7 contains a server-side request forgery (SSRF) vulnerability in the /v1 API endpoint. T

41RISK

open ↗

GitHub PoC

PoC: changedetection.io unauthenticated OpenAPI schema disclosure (CVE-2026-71203, Medium 5.3)

CVE-2026-71203MEDIUM16 Aug 2026

changedetection.io - Missing Authentication on /api/v1/full-spec Discloses Full OpenAPI Schema

33RISK

open ↗

GitHub PoC

eh-amish/Windows-Defender-Security-Auditor-CVE-2026-50656-

CVE-2026-50656HIGH16 Aug 2026

Microsoft Defender Elevation of Privilege Vulnerability

41RISK

open ↗

GitHub PoC★ 9

CVE-2026-72898 PoC : Metabase Unauthenticated SQL Injection

CVE-2026-72898CRITICALunder attack15 Aug 2026

Metabase SQL injection via password reset endpoint

100RISK

open ↗

GitHub PoC

Full root in kernel domain with selinux permissive **MOVED TO THIS REPO https://github.com/CamsShaft/IonStack-S22 WILL DELETE THIS ONE SOON**

CVE-2026-43499HIGH15 Aug 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

open ↗

GitHub PoC

CVE-2026-17544: PHP bcmath OOB write → universal memory-only RCE & disable_functions/open_basedir bypass. Offset-free runtime resolver. Verified on PHP 8.4.x / 8.5.x.

CVE-2026-17544HIGH15 Aug 2026

Out-of-bounds write in bccomp() via crafted operand and scale

41RISK

open ↗

GitHub PoC★ 2

SambaCry Explanation and Exploitation Demo with POC

CVE-2017-7494CRITICALunder attackransomware15 Aug 2026

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allo

100RISK

open ↗

GitHub PoC★ 401

CVE-2026-9830 Proof of Concept

CVE-2026-9830HIGH15 Aug 2026

BookingPress Pro < 5.7.3 - Unauthenticated Customer PII Disclosure and Booking Tampering via Permission Callback Bug

41RISK

open ↗

GitHub PoC★ 2

CVE-2026-43499 (GhostLock) rt_mutex stack-UAF privilege escalation research on Honor BVL-AN16 (Magic6 Pro, SM8650, kernel 6.1.128). Includes analysis docs, reverse-engineering scripts, disassembly artifacts, and exploit source with honor-BVL-AN16 target adaptation.

CVE-2026-43499HIGH15 Aug 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

open ↗

GitHub PoC

DuyDuongDuyDuong/CVE-2024-4577-Exploitation-AsyncRAT-Deployment-DFIR-Investigation

CVE-2024-4577CRITICALunder attackransomware15 Aug 2026

Argument Injection in PHP-CGI

100RISK

open ↗

GitHub PoC

Responsible disclosure write-ups for CVE-2026-8793 - PaperCut NG 25.0.11

CVE-2026-8793MEDIUM15 Aug 2026

PaperCut NG/MF: Insufficient brute-force protection

33RISK

open ↗

GitHub PoC★ 1

CVE-2026-72898-Metabase-SQLi-Fix

CVE-2026-72898CRITICALunder attack15 Aug 2026

Metabase SQL injection via password reset endpoint

100RISK

open ↗

GitHub PoC★ 1

An explanation and PoC to exploit CVE-2026-20896 Authentication Bypass Vulnerability on Gitea. Being able to steal session tokens for valid users in the Gitea instance.

CVE-2026-20896CRITICAL15 Aug 2026

Gitea Docker image trusts spoofable reverse-proxy headers by default

63RISK

open ↗

GitHub PoC

ghostpels/CVE-2026-13610

CVE-2026-13610HIGH15 Aug 2026

KiviCare < 4.5.2 - Unauthenticated Privilege Escalation via Registration

41RISK

open ↗

GitHub PoC

uproot <= 5.7.4 code injection via unsafe Python source generation from ROOT TStreamerInfo metadata.

CVE-2026-9147HIGH15 Aug 2026

uproot 5.7.4 and prior Code Injection via TStreamerInfo Metadata

41RISK

open ↗

GitHub PoC

S2-072（CVE-2026-73633）poc

CVE-2026-73633HIGH15 Aug 2026

Apache Struts: Unbounded read of a JSON request body

41RISK

open ↗

GitHub PoC

CVE-2026-43499 research port for Galaxy Z Fold4 SM-F936W F936WVLU1AVGA (in progress)

CVE-2026-43499HIGH15 Aug 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

open ↗

GitHub PoC

mencari sebuah kerentanan, wodpres dan mengungah shell di kerentanan wodpres tersebut

CVE-2026-6440MEDIUM15 Aug 2026

GoodMeet <= 1.1.8 - Cross-Site Request Forgery to Google Meet Credential Reset via 'goodmeet_reset_google_meet_credential'

33RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.