Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

87,899cataloged exploits

40,763CVEs with public exploitation

24,696lab-tested

All Referência 26,463Exploit-DB 24,489GitHub PoC 18,324VulnCheck XDB 10,507Nuclei 4,577Metasploit 3,539✓ verified onlyrecent popular risk

87,899 exploits

GitHub PoC★ 1

Passive internet-wide discovery + responsible-disclosure helper for CVE-2026-74580 (Linux vhost metadata-cache bug) — queries existing scan data (Sonar/Shodan/Censys), triages exposure, and drafts (never auto-sends) notices to owners.

CVE-2026-74580HIGH17 Oct 2026

vhost: reset the vring metadata cache on vring reconfiguration

41RISK

GitHub PoC★ 3

cve-2026-99999-audit script (PwnEscape)

CVE-2026-99999CRITICAL17 Oct 2026

ipv4: validate checksum_start before completing checksum

48RISK

GitHub PoC

Vulnerability analysis, exploitation, and multi-layered defense hardening for Apache Struts 2 (CVE-2017-5638) & Windows Print Spooler / PrintNightmare (CVE-2021-34527) with ELK SIEM monitoring and Windows Event Log auditing.

CVE-2017-5638CRITICALunder attackransomware17 Oct 2026

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISK

GitHub PoC★ 2

CVE-2026-64560 temporary-root exploit for realme RMX6699 (Snapdragon 8 Elite, kernel 6.6.118, Android 17/COOS17)

CVE-2026-64560HIGH17 Oct 2026

posix-cpu-timers: Prevent UAF caused by non-leader exec() race

41RISK

GitHub PoC

songzzzz/CVE-2026-8933

CVE-2026-8933HIGH17 Oct 2026

snap-confine Local Privilege Escalation via Capabilities Misconfiguration or Flaw in Execution Environment Setup

41RISK

GitHub PoC★ 2

Lab PoC for CVE-2026-96889: Next.js Image Optimization SVG typed as AVIF reaches librsvg UAF (RUSTSEC-2026-0305). Unauthenticated RCE on glibc Linux.

CVE-2026-96889HIGH16 Oct 2026

Librsvg: use-after-free when xml includes have duplicated entities

41RISK

GitHub PoC

Security advisory — SQL Injection leading to RCE in Vedo Suite (Bottinelli Informatica). Responsible disclosure.

CVE-2026-51366CRITICAL16 Oct 2026

SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary c

48RISK

GitHub PoC★ 8

CVE-2026-89079 — WordPress Theme My Login multisite unauth password overwrite PoC (check, verify, exploit). Not version-only: requires MS + tml_user_passwords.

CVE-2026-89079CRITICAL16 Oct 2026

Theme My Login <= 7.2.1 - Unauthenticated Privilege Escalation via 'user_pass1' POST Parameter in wp_pre_insert_user_data Filter

63RISK

VulnCheck XDB

initial-access

CVE-2026-89079CRITICAL16 Oct 2026

Theme My Login <= 7.2.1 - Unauthenticated Privilege Escalation via 'user_pass1' POST Parameter in wp_pre_insert_user_data Filter

63RISK

VulnCheck XDB

initial-access

CVE-2024-2961HIGH16 Oct 2026

The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4

78RISK

GitHub PoC

Wheels SQL injection on MySQL/MariaDB with backslash escaping enabled

CVE-2026-111444CRITICAL16 Oct 2026

Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES absent)

48RISK

VulnCheck XDB

client-side

CVE-2021-22204MEDIUMunder attack16 Oct 2026

Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code exec

100RISK

GitHub PoC

azqzazq1/CVE-2026-110896

CVE-2026-110896MEDIUM16 Oct 2026

WordPress Passster plugin <= 4.3.18 - Broken Access Control vulnerability

33RISK

GitHub PoC★ 1

Reproducer for CVE-2026-79983 (Apache Camel camel-ftp): the consumer builds the remote path from the server's directory listing without containment, escaping the polled directory — Camel Spring Boot + Camel Quarkus

CVE-2026-79983HIGH16 Oct 2026

Apache Camel: camel-ftp resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside

41RISK

GitHub PoC

Reproducer for CVE-2026-78163 (Apache Camel camel-docling): unvalidated String body input source enables SSRF and local file disclosure in DoclingProducer — Camel Spring Boot + Camel Quarkus

CVE-2026-78163MEDIUM16 Oct 2026

Apache Camel: Camel-Docling Unvalidated Message Body Input Source Enables Server-Side Request Forgery and Local File Disclosure

33RISK

GitHub PoC

Reproducer for CVE-2026-79986 (Apache Camel camel-azure-files): the consumer builds the remote path from the share listing without containment (author-only; see CVE-2026-79983/79984 for the runnable mechanism) — Camel Spring Boot + Camel Quarkus

CVE-2026-79986HIGH16 Oct 2026

Apache Camel: camel-azure-files resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside

41RISK

GitHub PoC

Reproducer for CVE-2026-78165 (Apache Camel camel-spring-redis): default JdkSerializationRedisSerializer deserializes Redis PUBLISH payloads with no ObjectInputFilter (RCE) — Camel Spring Boot + Camel Quarkus

CVE-2026-78165HIGH16 Oct 2026

Apache Camel: Camel-Spring-Redis Unfiltered Java Deserialization of Redis Payloads

41RISK

GitHub PoC

cPanel & WHM Authentication Bypass via CVE-2026-41940 explotation

CVE-2026-41940CRITICALunder attackransomware16 Oct 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RISK

VulnCheck XDB

initial-access

CVE-2026-97229CRITICALunder attack16 Oct 2026

Integer Overflow or Wraparound in GitLab

100RISK

GitHub PoC

A read-only, passive scanner that checks a REDCap host for exposure to and compromise by **CVE-2026-90817** — the unauthenticated survey-endpoint remote-code-execution flaw abused by the XMRig cryptomining campaign documented by Palo Alto Unit 42

CVE-2026-90817CRITICAL16 Oct 2026

An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import proce

63RISK

GitHub PoC★ 3

Restricted eBPF TC ingress guard, CO-RE detector, verified loader, and C11 VMM launch supervisor for CVE-2026-99999

CVE-2026-99999CRITICAL16 Oct 2026

ipv4: validate checksum_start before completing checksum

48RISK

GitHub PoC

Reproducer for CVE-2026-79985 (Apache Camel camel-smb): the SMB consumer builds the remote path from the share listing without containment (author-only; see CVE-2026-79983/79984 for the runnable mechanism) — Camel Spring Boot + Camel Quarkus

CVE-2026-79985HIGH16 Oct 2026

Apache Camel: camel-smb resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside

41RISK

GitHub PoC★ 4

CVE-2026-102764 BeyondTrust Remote Support unauthenticated file write / RCE proof of concept

CVE-2026-102764CRITICALunder attack16 Oct 2026

Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support

100RISK

GitHub PoC

Reproducer for CVE-2026-78164 (Apache Camel HTTP producers): property placeholders resolved on the message-supplied CamelHttpUri/CamelRestHttpUri headers leak secrets into the outbound request — Camel Spring Boot + Camel Quarkus

CVE-2026-78164HIGH16 Oct 2026

Apache Camel: HTTP producers resolve property placeholders in message-supplied URI override headers

41RISK

GitHub PoC

BIBILZERODAY/CVE-2026-61979-miniOrange-SAML-Auth-Bypass-Exploit

CVE-2026-61979HIGH16 Oct 2026

WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability

21RISK

GitHub PoC

CVE-2026-92209

CVE-2026-92209HIGH16 Oct 2026

NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability

41RISK

GitHub PoC

CVE-2026-92208

CVE-2026-92208HIGH16 Oct 2026

NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability

41RISK

GitHub PoC

Frappe HRMS missing input validation SQL injection vulnerability

CVE-2026-111389HIGH16 Oct 2026

Frappe HRMS 14.0.0 before 14.38.2 SQL Injection via Missing Validation

41RISK

GitHub PoC

CVE-2026-104745 is a high-severity vulnerability rated 8.1/10 on the CVSS scale. The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation via the `alg_wc_ev_verify_email` parameter in versions up to, and including, 3.3.0.

CVE-2026-104745HIGH16 Oct 2026

Customer Email Verification for WooCommerce <= 3.3.0 - Unauthenticated Privilege Escalation to 'alg_wc_ev_verify_email' Parameter

41RISK

GitHub PoC

ExifTool Exploit CVE-2021-22204 \\ Arbitrary Code Execution

CVE-2021-22204MEDIUMunder attack16 Oct 2026

Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code exec

100RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.