Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
85,679cataloged exploits
39,951CVEs with public exploitation
24,696lab-tested
AllReferência 25,887Exploit-DB 24,488GitHub PoC 17,375VulnCheck XDB 9,888Nuclei 4,513Metasploit 3,528✓ verified onlyrecentpopularrisk
17,375 exploits
GitHub PoC★ 1
IamDremig/CVE-2026-15598
antv layout object.js setNestedValue prototype pollution
33RISK
open ↗GitHub PoC
Three unauthenticated vulnerabilities in the Thinkware U3000 dashcam's local WiFi control protocol: arbitrary file write, arbitrary file read, and plaintext WiFi credential disclosure. CVE-2026-101053, CVE-2026-101054, CVE-2026-101055.
Thinkware U3000 TCP Service wpa_supplicant.conf PUT_FILE access control
33RISK
open ↗GitHub PoC
unpredictable21/CVE-2026-75429_PowerJob_friend_process_RCE
PowerJob versions 4.x through 5.1.2 contain an unauthenticated remote code execution vulnerability in the /friend/proces
48RISK
open ↗GitHub PoC
my poc for CVE-2026-53787
Amasty Order Attributes for Magento 2 < 4.0.0 Unauthenticated Arbitrary File Upload
63RISK
open ↗GitHub PoC★ 5
Community-maintained fork of image-size with fixes for CVE-2025-71329 and CVE-2025-71330
image-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF Parser
41RISK
open ↗GitHub PoC
spring retry 1.3.x fix with niche toolkit for CVE-2026-41710
Cache Exhaustion in Stateful Retries leads to Denial of Service
33RISK
open ↗GitHub PoC
Procjevt/CVE-2026-9198
Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation
98RISK
open ↗GitHub PoC★ 1
POC 4 CVE-2026-15038
InfiniteWP Client < 1.13.6 - Unauthenticated Administrator Account Takeover on Multisite
48RISK
open ↗GitHub PoC★ 1
WP2Shell is a powerful and modular exploit framework that combines two critical WordPress vulnerabilities (CVE-2026-63030 and CVE-2026-60137) to achieve complete compromise of a target site without any credentials.
WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
98RISK
open ↗GitHub PoC★ 1
PoC for CVE-2025-3248: unauthenticated RCE in Langflow < 1.3.0 via /api/v1/validate/code.
Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code
100RISK
open ↗GitHub PoC
Exploiting the .lnk vulnerability and operating system handling mechanisms regarding explorer.exe and USB drives.
Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201
100RISK
open ↗GitHub PoC
PoC for CVE-2025-59528 used to achieve remote code execution on the Silentium machine at HTB
Flowise has Remote Code Execution vulnerability
85RISK
open ↗GitHub PoC
KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499
rtmutex: Use waiter::task instead of current in remove_waiter()
41RISK
open ↗GitHub PoC
KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499 (Note: Fork)
rtmutex: Use waiter::task instead of current in remove_waiter()
41RISK
open ↗GitHub PoC★ 2
XSS2Shell ULTIMATE v3.0 is a powerful exploitation tool that chains Cross-Site Scripting (XSS) vulnerabilities in WordPress to achieve Remote Code Execution (RCE). This tool exploits CVE-2026-64638 to gain full control over vulnerable WordPress installations.
WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen.
Via a specially crafted malici
56RISK
open ↗GitHub PoC★ 1
CVE-2026-69084/69085 — SiYuan arbitrary SQL execution via searchEmbedBlock + searchDocs SQLi (CVSS 9.9). Verified on v3.7.2, rejected on v3.7.3.
SiYuan before v3.7.3 SQL Injection via searchEmbedBlock
63RISK
open ↗GitHub PoC★ 6
CVE-2026-34910/34909 — UniFi OS unauth RCE + file read via ..%2f auth bypass (CVSS 10.0, KEV, Mirai ITW)
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS
100RISK
open ↗GitHub PoC★ 1
A Proof-Of-Concept for the CVE-2021-44228 vulnerability.
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
open ↗GitHub PoC★ 3
🔥 XSS2Shell — CVE-2026-64638 Scanner & PoC Toolkit
WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen.
Via a specially crafted malici
56RISK
open ↗GitHub PoC★ 1
CVE-2026-64638 — WordPress Pre-Auth Reflected XSS → RCE via DOM Clobbering + Application Password Theft + REST API Plugin Activation. Dual-mode PoC (XSS chain & direct).
WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen.
Via a specially crafted malici
56RISK
open ↗GitHub PoC★ 3
eh-amish/CVE-2026-64638-XSS-to-Shell-PoC
WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen.
Via a specially crafted malici
56RISK
open ↗GitHub PoC★ 1
Windwos Zero Day Local PrivESc Exploit (CVE-2026-41091)
Microsoft Defender Elevation of Privilege Vulnerability
71RISK
open ↗GitHub PoC
Emaar1x/CVE-2021-41773
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
open ↗GitHub PoC
Technical vulnerability analysis and CVE briefing for CVE-2026-9645 affecting ScadaBR.
ScadaBR Authenticated Remote Code Execution
48RISK
open ↗GitHub PoC★ 1
yogaGymn/XSS2Shell-CVE-2026-64638
WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen.
Via a specially crafted malici
56RISK
open ↗GitHub PoC★ 2
Zapscape (CVE-2026-64561) KVM/x86 shadow MMU UAF guest-to-host escape PoC mirror — V4bel/@v4bel, MIT; for authorized security testing
KVM: x86: Check for invalid/obsolete root *after* making MMU pages available
41RISK
open ↗GitHub PoC★ 1
CVE-2026-64638 (XSS2shell) POC.
WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen.
Via a specially crafted malici
56RISK
open ↗GitHub PoC★ 1
A Linux kernel local privilege escalation affecting the XFS filesystem copy-on-write (CoW) path.
xfs: resample the data fork mapping after cycling ILOCK
41RISK
open ↗GitHub PoC★ 2
XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE PoC mirror — WordSec, MIT; for authorized security testing
WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen.
Via a specially crafted malici
56RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.