Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
87,899cataloged exploits
40,763CVEs with public exploitation
24,696lab-tested
AllReferência 26,463Exploit-DB 24,489GitHub PoC 18,324VulnCheck XDB 10,507Nuclei 4,577Metasploit 3,539✓ verified onlyrecentpopularrisk
87,899 exploits
VulnCheck XDB
initial-access
RevPi Webstatus application is vulnerable to an authentication bypass
75RISK
open ↗GitHub PoC★ 5
CVE-2026-85097 – Bricksforge WordPress Plugin Unauth File Upload to RCE Toolkit (CVSS 10.0) | Red/Blue Team suite for Bricksforge Pro Forms < 3.1.8.9. 2 tools: Full Exploit (polyglot upload, web shell, mass scan, OPSEC, SQLite/JSON output) + SafeChecker (version detect, non-intrusive audit). Ethical & educational use only.
Bricksforge <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter
63RISK
open ↗VulnCheck XDB
info-leak
Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak
63RISK
open ↗VulnCheck XDB
initial-access
Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache CouchDB be
60RISK
open ↗GitHub PoC★ 1
For new CVEs without existing/working/non-mangled POCs
Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMB
98RISK
open ↗VulnCheck XDB
initial-access
Chamilo LMS Unauthenticated Big Upload File Remote Code Execution
78RISK
open ↗VulnCheck XDB
initial-access
Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file
100RISK
open ↗VulnCheck XDB
info-leak
Divi Plus <= 2.4.0 - Unauthenticated Arbitrary File Read via 'svg_image' Parameter
56RISK
open ↗GitHub PoC
0xCyp1337/CVE-2026-63030-CVE-2026-60137-WP2SHELL
WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
98RISK
open ↗GitHub PoC
Independent reconstruction, lab validation, and PoC for CVE-2026-9198, the Langflow unauthenticated RCE (fixed in 1.10.1)
Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation
98RISK
open ↗VulnCheck XDB
initial-access
FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca
60RISK
open ↗VulnCheck XDB
initial-access
Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution
100RISK
open ↗VulnCheck XDB
initial-access
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISK
open ↗GitHub PoC
Unencrypted JWT Transmission in War Thunder's Initial Client-Server Handshake
War Thunder Account Impersonation
33RISK
open ↗VulnCheck XDB
initial-access
Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing
75RISK
open ↗GitHub PoC
CVE-2026-104082, CVE-2026-104083, CVE-2026-104084
SmarterMail < Build 9777 SysAdmin Remote Code Execution via Volume Mount
41RISK
open ↗VulnCheck XDB
remote-with-credentials
OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and exe
83RISK
open ↗VulnCheck XDB
initial-access
Pterodactyl Panel Allows Unauthenticated Arbitrary Remote Code Execution
75RISK
open ↗VulnCheck XDB
local
A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities wa
86RISK
open ↗GitHub PoC★ 3
0xad3m/CVE-2026-13078-POC
Local File Disclosure in MongoDB Server via MozJS Scripting Engine Module Loader
33RISK
open ↗GitHub PoC★ 1
Proof of concept and isolated Docker lab for CVE-2026-103889, an unauthenticated RCE vulnerability in Expivi 3D Product Configurator for WooCommerce ≤ 2.16.2.
3D Product configurator for WooCommerce <= 2.16.2 - Unauthenticated Remote Code Execution via 'xpv_image' Parameter
48RISK
open ↗GitHub PoC★ 8
CVE-2026-91737 Chrome renderer RCE PoC (PDFium)
Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside
41RISK
open ↗GitHub PoC
Working PoC + debugging writeup for CVE-2025-32432 (Craft CMS pre-auth RCE)
Craft CMS Allows Remote Code Execution
100RISK
open ↗GitHub PoC
Independent public PoC for CVE-2026-79987 — Craft CMS 5.9.0–5.10.12 authenticated RCE. Patch-analysis n-day implementation, verified on vanilla lab. Advisory: GHSA-9c4j-cjw3-r3xx
Low-privilege RCE through element-search eager loading
41RISK
open ↗VulnCheck XDB
client-side
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and
76RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.