Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,957cataloged exploits

32,195CVEs with public exploitation

1,932lab-tested

All Exploit-DB 22,786Referência 20,003GitHub PoC 13,307VulnCheck XDB 8,182Nuclei 4,217Metasploit 3,462✓ verified onlyrecent popular risk

71,886 exploits

GitHub PoC★ 2

SQL Injection vulnerability in NASA EOSDIS MODAPS due to improper input validation in the `category` parameter. This flaw allows attackers to manipulate backend SQL queries, potentially leading to unauthorized data access and database compromise.

CVE-2024-46636CRITICAL22 Apr 2026

NASA Earth Observing System Data and Information System (EOSDIS) MODAPS v8.1 was discovered to contain a SQL injection v

48RISK

GitHub PoC

Cybersecurity lab demonstrating exploitation of CVE-2017-0144 (EternalBlue) using Metasploit against a vulnerable Windows 7 VM, achieving SYSTEM-level access via Meterpreter. Includes full attack chain, post exploitation, and mitigation via MS17-010 patching, tested in an isolated ethical lab environment.

CVE-2017-0144HIGHunder attackransomware22 Apr 2026

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISK

GitHub PoC

Sanitized advisory for CVE-2025-51846 affecting CryptPad WebSocket handling.

CVE-2025-51846HIGH22 Apr 2026

CryptPad unbounded WebSocket frame flood

41RISK

GitHub PoC★ 2

Full exploit for the Android vulnerability Bad Binder found in early Google Pixel phones.

CVE-2019-2215HIGHunder attack22 Apr 2026

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

100RISK

GitHub PoC

Multi-Stage Attack Modeling and Detection of Log4Shell for CVE-2021-44228

CVE-2021-44228CRITICALunder attackransomware22 Apr 2026

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

GitHub PoC

jpselva/CVE-2023-4863

CVE-2023-4863HIGHunder attack22 Apr 2026

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to

93RISK

VulnCheck XDB

initial-access

CVE-2026-32201MEDIUMunder attack22 Apr 2026

Microsoft SharePoint Server Spoofing Vulnerability

68RISK

Metasploit600

Xerte Online Toolkits Arbitrary File Upload - Unauthenticated Media Upload

CVE-2026-41459MEDIUM22 Apr 2026

Xerte Online Toolkits Path Disclosure via /setup

48RISK

Metasploit600

Xerte Online Toolkits Arbitrary File Upload - Unauthenticated Media Upload

CVE-2026-34415CRITICAL22 Apr 2026

Xerte Online Toolkits File Upload RCE via elfinder Connector

63RISK

Metasploit600

Xerte Online Toolkits Arbitrary File Upload - Unauthenticated Media Upload

CVE-2026-34413HIGH22 Apr 2026

Xerte Online Toolkits Missing Authentication via connector.php

56RISK

GitHub PoC★ 2

Hack The Box - Silentium machine writeup | CVE-2025-58434, CVE-2025-59528, CVE-2025-8110

CVE-2025-58434CRITICAL22 Apr 2026

Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover

75RISK

Metasploit600

Xerte Online Toolkits Arbitrary File Upload - Unauthenticated Media Upload

CVE-2026-34414HIGH22 Apr 2026

Xerte Online Toolkits Path Traversal via connector.php

56RISK

Metasploit600

Flowise CSV Agent Prompt Injection RCE

CVE-2026-41264CRITICAL22 Apr 2026

Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability

43RISK

GitHub PoC

ClaraSto/CVE-2024-1086_Ausarbeitung

CVE-2024-1086HIGHunder attackransomware21 Apr 2026

Use-after-free in Linux kernel's netfilter: nf_tables component

76RISK

GitHub PoC★ 1

Jorrit-VM/CVE-2026-33017

CVE-2026-33017CRITICALunder attack20 Apr 2026

Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint

100RISK

GitHub PoC

Black-box test whether an LLM chatbot is vulnerable to markdown/HTML exfil (CVE-2025-32711 class). Spins up a sink, sends payloads, renders in headless Chromium, correlates via network.

CVE-2025-32711CRITICAL20 Apr 2026

M365 Copilot Information Disclosure Vulnerability

48RISK

Metasploit300

BerriAI LiteLLM Proxy Pre-Auth SQL Injection Scanner

CVE-2026-42208CRITICALunder attack20 Apr 2026

LiteLLM: SQL injection in Proxy API key verification

100RISK

GitHub PoC

The forgot-password endpoint in Flowise returns sensitive information including a valid password reset tempToken without authentication or verification. This enables any attacker to generate a reset token for arbitrary users and directly reset their password, leading to a complete account takeover (ATO).

CVE-2025-58434CRITICAL20 Apr 2026

Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover

75RISK

VulnCheck XDB

info-leak

CVE-2026-35616CRITICALunder attack20 Apr 2026

A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated atta

100RISK

VulnCheck XDB

initial-access

CVE-2024-3400CRITICALunder attackransomware20 Apr 2026

PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect

100RISK

VulnCheck XDB

local

CVE-2021-3493HIGHunder attack20 Apr 2026

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o

98RISK

VulnCheck XDB

initial-access

CVE-2026-34197HIGHunder attack20 Apr 2026

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans

100RISK

GitHub PoC

micheaol/distccd_rce_CVE-2004-2687

CVE-2004-2687—20 Apr 2026

distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote at

60RISK

GitHub PoC★ 1

wa6n3r/CVE-2024-3400

CVE-2024-3400CRITICALunder attackransomware20 Apr 2026

PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect

100RISK

GitHub PoC

We hope to reproduce CVE-2021-41773 to deepen our understanding of real-world cybersecurity vulnerabilities so that we can be knowledgeable about exploits in industry and academic work.

CVE-2021-41773HIGHunder attackransomware20 Apr 2026

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISK

GitHub PoC★ 77

Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)

CVE-2023-46604CRITICALunder attackransomware20 Apr 2026

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISK

GitHub PoC★ 1

CVE-2025-31161

CVE-2025-31161CRITICALunder attackransomware20 Apr 2026

CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unle

100RISK

GitHub PoC

Type Local Privilege Escalation exploit for CVE-2021-3493(Ubuntu Kernel vulnerability) documrnted during TryHackme Lab

CVE-2021-3493HIGHunder attack20 Apr 2026

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o

98RISK

GitHub PoC★ 77

Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)

CVE-2016-3088CRITICALunder attack20 Apr 2026

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitr

100RISK

GitHub PoC★ 79

Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)

CVE-2026-34197HIGHunder attack20 Apr 2026

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans

100RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.