Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

85,682cataloged exploits

39,953CVEs with public exploitation

24,696lab-tested

All Referência 25,887Exploit-DB 24,488GitHub PoC 17,378VulnCheck XDB 9,888Nuclei 4,513Metasploit 3,528✓ verified onlyrecent popular risk

17,378 exploits

GitHub PoC

Read-only-by-default WordPress incident-response scanner for the “wp2shell” attack chain (CVE-2026-60137 / CVE-2026-63030): detects shadow-admin, database and filesystem IOCs, verifies core integrity, and exports evidence. Optional controlled account cleanup; does not remove malware.

CVE-2026-60137MEDIUMunder attack01 Aug 2026

WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query

78RISK

GitHub PoC

System Vulnerability Checklist & Network Security Hardening project featuring reconnaissance, vsFTPd backdoor analysis (CVE-2011-2523), and active transport-layer mitigation using IPTables.

CVE-2011-2523—01 Aug 2026

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

60RISK

GitHub PoC★ 1

This project demonstrates the publicly disclosed CVE-2018-9995 vulnerability found in multiple embedded DVR devices.

CVE-2018-9995—01 Aug 2026

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L

60RISK

GitHub PoC

CVE-2025-57819-RCE_PoC

CVE-2025-57819CRITICALunder attack01 Aug 2026

FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE

100RISK

GitHub PoC★ 1

Consul Template validated where a symlink pointed during template evaluation, but its later dependency fetch read the original path. Retargeting the link between those operations turned an in-sandbox file reference into an out-of-sandbox file disclosure.

CVE-2026-5061MEDIUM01 Aug 2026

Consul-template vulnerable to sandbox path bypass in file helper via a symlink attack

33RISK

GitHub PoC

Full-lifecycle vulnerability management on a live Log4Shell (CVE-2021-44228) target — scan, manual exploitation, network detection, and remediation verification. Nessus, Suricata, Wireshark, Docker.

CVE-2021-44228CRITICALunder attackransomware01 Aug 2026

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

GitHub PoC

CVE-2026-14483 POC EXPLOIT BY MADEXPLOITS

CVE-2026-14483CRITICAL01 Aug 2026

Realtyna Organic IDX plugin + WPL Real Estate <= 5.2.0 - Unauthenticated Arbitrary File Upload via 'files[file]' Parameter via Public I/O 'set_property' Command

63RISK

GitHub PoC★ 7

Root prototype for Galaxy S26 (SM-S942U) that is very much indev

CVE-2026-43499HIGH01 Aug 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

GitHub PoC★ 2

CVE-2026-64531

CVE-2026-64531HIGH01 Aug 2026

net: openvswitch: reject oversized nested action attrs

41RISK

GitHub PoC

aj2108/CVE-2026-9833

CVE-2026-9833HIGH01 Aug 2026

Tag Groups < 2.2.0 - Reflected XSS via 'tag_groups_task' Parameter

56RISK

GitHub PoC

raihants/cve-2026-10702

CVE-2026-10702MEDIUM01 Aug 2026

JIT miscompilation in the JavaScript Engine: JIT component

33RISK

GitHub PoC

MinhHK68/CVE-2026-13158

CVE-2026-13158HIGH01 Aug 2026

Everest Toolkit <= 1.2.3 - Admin+ Arbitrary File Upload

41RISK

GitHub PoC★ 1

PoC & checker for CVE-2026-15964 - unauthenticated password change in the WordPress plugin Single Sign On For TNG <= 2.0.0 (CVSS 9.8)

CVE-2026-15964CRITICAL01 Aug 2026

Single Sign On For TNG <= 2.0.0 - Unauthenticated Privilege Escalation via Unverified Password Change

48RISK

GitHub PoC

CVE-2026-8237 is an Insecure Direct Object Reference (IDOR) vulnerability caused by missing authorization checks in Concrete CMS 9.5.0 and earlier.

CVE-2026-8237MEDIUM01 Aug 2026

Concrete CMS 9.5.0 and below is vulnerable to IDOR in the`/ccm/frontend/conversations/message_detail` endpoint

48RISK

GitHub PoC★ 1

Standalone CVE-2026-43499 port for Galaxy A36 5G SM-A366W A366WVLS3AYG1 with KernelSU late-load

CVE-2026-43499HIGH01 Aug 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

GitHub PoC

CVE-2026-8239 is an Insecure Direct Object Reference (IDOR) vulnerability affecting Concrete CMS 9.5.0 and earlier.

CVE-2026-8239MEDIUM01 Aug 2026

Concrete CMS 9.5.0 and below is vulnerable to IDOR in '/ccm/frontend/conversations/get_rating'

33RISK

GitHub PoC★ 168

YellowKey BitLocker CVE-2026-45585 free open-source utility to extract, backup and view BitLocker recovery keys on Windows 10/11. BitLocker bypass vulnerability tool, remediation and mitigation. Tom's Hardware coverage. Check TPM status, protector types, encryption state. Download YellowKey free, portable, no install needed.

CVE-2026-45585MEDIUM01 Aug 2026

Windows BitLocker Security Feature Bypass Vulnerability

33RISK

GitHub PoC

Vulnerability Research

CVE-2026-51954—01 Aug 2026

An issue in Webasyst Framework 4.0.3 and before allows a remote attacker to execute arbitrary code via a crafted OAuth a

23RISK

GitHub PoC

PD2229B的43499(ghostlock)可行性研究

CVE-2026-43499HIGH01 Aug 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

GitHub PoC

Kestra Unauthenticated RCE Exploit (CVE-2026-53576)

CVE-2026-53576CRITICAL01 Aug 2026

Kestra: Unauthenticated RCE via /configs path-suffix auth-filter bypass

63RISK

GitHub PoC

CVE-2026-8337 is an Insecure Direct Object Reference (IDOR) vulnerability in Concrete CMS that affects the Survey feature. Unlike CVE-2026-8347 (which involved Express associations), this vulnerability allows an unauthenticated attacker to participate in a restricted/private survey under specific site configurations.

CVE-2026-8337MEDIUM31 Jul 2026

Concrete CMS 9.5.0 and below is vulnerable to IDOR in surveys when sites are running concurrent public surveys and private surveys

33RISK

GitHub PoC★ 1

CVE-2026-54121(CertiGhost) without MachineAccountQuota POC

CVE-2026-54121HIGH31 Jul 2026

Active Directory Certificate Services Elevation of Privilege Vulnerability

41RISK

GitHub PoC★ 3

Forensic audit of mcp-remote: seven OAuth trust-boundary advisories, five CVE records (CVE-2026-51994/51995/51996/51997/52001). Server-selected request path (CWE-918) run against loopback canaries in 62 stable releases, 0.1.32 to the current 0.15.1; selected code and namespace signatures under 12 other npm names; search blind spots above 350 KiB.

CVE-2026-51994CRITICAL31 Jul 2026

mcp-remote versions 0.1.32 through 0.1.38 are vulnerable to Server-Side Request Forgery (SSRF) via the resource_metadata

48RISK

GitHub PoC★ 2

VampSecure Labs: FortiOS CVE scanner (CVE-2018-13379, CVE-2022-40684, CVE-2023-27997, CVE-2024-21762)

CVE-2022-40684CRITICALunder attackransomware31 Jul 2026

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an

100RISK

GitHub PoC★ 10

GhostLock (CVE-2026-43499) kernel exploit for Poco M6 Pro (emerald) with locked bootloader

CVE-2026-43499HIGH31 Jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

GitHub PoC

VampSecure Labs: FortiOS CVE scanner (CVE-2018-13379, CVE-2022-40684, CVE-2023-27997, CVE-2024-21762)

CVE-2018-13379CRITICALunder attackransomware31 Jul 2026

An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.

100RISK

GitHub PoC★ 3

mahfuzreham/OVSwrap-CVE-2026-64531-Mitigation-Tool

CVE-2026-64531HIGH31 Jul 2026

net: openvswitch: reject oversized nested action attrs

41RISK

GitHub PoC★ 4

GhostLock (CVE-2026-43499) exploit for POCO F3 GT (aresin) — MediaTek Dimensity 1200, Linux 4.14.186 ARM64 kernel privilege escalation via futex PI chain manipulation

CVE-2026-43499HIGH31 Jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

GitHub PoC

CVE-2026-8347 is an Insecure Direct Object Reference (IDOR) combined with a wrong authorization level vulnerability in Concrete CMS versions 9.5.0 and earlier. The flaw exists in the Express association Reorder dialog, allowing a user with only view permissions on an Express entry to modify the ordering of associations for another entity.

CVE-2026-8347LOW31 Jul 2026

Concrete CMS 9.5.0 and below is vulnerable to IDOR + wrong-authorization-level in Express association Reorder dialog

28RISK

GitHub PoC★ 4

CVE-2026-66066 + File Read, RCE, Scanner, Lab

CVE-2026-66066CRITICAL31 Jul 2026

Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing

68RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.