Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

85,682cataloged exploits

39,953CVEs with public exploitation

24,696lab-tested

All Referência 25,887Exploit-DB 24,488GitHub PoC 17,378VulnCheck XDB 9,888Nuclei 4,513Metasploit 3,528✓ verified onlyrecent popular risk

17,378 exploits

GitHub PoC★ 4

GhostLock (CVE-2026-43499) exploit for POCO F3 GT (aresin) — MediaTek Dimensity 1200, Linux 4.14.186 ARM64 kernel privilege escalation via futex PI chain manipulation

CVE-2026-43499HIGH31 Jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

GitHub PoC

VampSecure Labs: FortiOS CVE scanner (CVE-2018-13379, CVE-2022-40684, CVE-2023-27997, CVE-2024-21762)

CVE-2022-40684CRITICALunder attackransomware31 Jul 2026

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an

100RISK

GitHub PoC★ 2

VampSecure Labs: FortiOS CVE scanner (CVE-2018-13379, CVE-2022-40684, CVE-2023-27997, CVE-2024-21762)

CVE-2022-40684CRITICALunder attackransomware31 Jul 2026

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an

100RISK

GitHub PoC

VampSecure Labs: FortiOS CVE scanner (CVE-2018-13379, CVE-2022-40684, CVE-2023-27997, CVE-2024-21762)

CVE-2018-13379CRITICALunder attackransomware31 Jul 2026

An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.

100RISK

GitHub PoC★ 2

VampSecure Labs: FortiOS CVE scanner (CVE-2018-13379, CVE-2022-40684, CVE-2023-27997, CVE-2024-21762)

CVE-2018-13379CRITICALunder attackransomware31 Jul 2026

An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.

100RISK

GitHub PoC★ 3

LuZe0y/pd2425-cve-2026-43499-config

CVE-2026-43499HIGH31 Jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

GitHub PoC★ 4

A Metasploit auxiliary module that escalates from any low-privileged domain user to full domain compromise by abusing the AD CS enrollment "chase" fallback. The CA can be coerced into authenticating back to attacker-controlled infrastructure and then issuing a certificate that impersonates a Domain Controller.

CVE-2026-54121HIGH31 Jul 2026

Active Directory Certificate Services Elevation of Privilege Vulnerability

41RISK

GitHub PoC★ 1

CVE-2026-54121(CertiGhost) without MachineAccountQuota POC

CVE-2026-54121HIGH31 Jul 2026

Active Directory Certificate Services Elevation of Privilege Vulnerability

41RISK

GitHub PoC★ 4

CVE-2026-66066 + File Read, RCE, Scanner, Lab

CVE-2026-66066CRITICAL31 Jul 2026

Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing

68RISK

GitHub PoC★ 10

GhostLock (CVE-2026-43499) kernel exploit for Poco M6 Pro (emerald) with locked bootloader

CVE-2026-43499HIGH31 Jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISK

GitHub PoC★ 3

mahfuzreham/OVSwrap-CVE-2026-64531-Mitigation-Tool

CVE-2026-64531HIGH31 Jul 2026

net: openvswitch: reject oversized nested action attrs

41RISK

GitHub PoC

Unauthenticated RCE in DBGate <= 7.1.8

CVE-2026-47668CRITICAL31 Jul 2026

DbGate: Unauthenticated Remote Code Execution via JSON Script Runner

63RISK

GitHub PoC★ 1

This is N-day patch we releasing by testing our model capabilities

CVE-2026-16723CRITICAL31 Jul 2026

Remote Code Execution in fastjson 1.2.68–1.2.83

48RISK

GitHub PoC★ 2

A critical vulnerability affecting Fastjson versions 1.2.68 – 1.2.83.

CVE-2026-16723CRITICAL30 Jul 2026

Remote Code Execution in fastjson 1.2.68–1.2.83

48RISK

GitHub PoC★ 2

Security Advisory: Unauthenticated Stored Cross-Site Scripting Leading To Administrator Account Takeover (openclaw-dashboard)

CVE-2026-66418CRITICAL30 Jul 2026

OpenClaw Dashboard v3.0.0 Stored XSS via Failed Login Username Field

48RISK

GitHub PoC

shootcannon/CVE-2026-61511

CVE-2026-61511CRITICAL30 Jul 2026

vBulletin < 6.2.2 Eval Injection RCE via vb5/template/runtime.php

63RISK

GitHub PoC

PoC exploits for CVE-2026-52824 (GHSA-jr9p-4h4j-6c58) — Kimai time-tracking default APP_SECRET authentication bypass affecting versions ≤ 2.57.0

CVE-2026-52824CRITICAL30 Jul 2026

Kimai: Default APP_SECRET in Docker Image Enables Cookie Forgery and Account Takeover

63RISK

GitHub PoC

Hasanuyarrr/CVE-2026-18782-TREX-MES-Uygulamalarinda-SQL-Zafiyeti

CVE-2026-18782CRITICAL30 Jul 2026

SQL Injection in Trex Digital Manufacturing's Trex MES

48RISK

GitHub PoC

nawalacheker1/CVE-2026-46331

CVE-2026-46331HIGH30 Jul 2026

net/sched: fix pedit partial COW leading to page cache corruption

41RISK

GitHub PoC

Security Advisory: Stored Cross-Site Scripting Via Agent Messages Leading To Session Token Theft (openclaw-dashboard)

CVE-2026-66421HIGH30 Jul 2026

OpenClaw Dashboard Stored XSS via lastMessage Session Field

41RISK

GitHub PoC

HeltonPojo/CVE-2025-32432

CVE-2025-32432CRITICALunder attack30 Jul 2026

Craft CMS Allows Remote Code Execution

100RISK

GitHub PoC★ 1

CVE-2026-10702

CVE-2026-10702MEDIUM30 Jul 2026

JIT miscompilation in the JavaScript Engine: JIT component

33RISK

GitHub PoC

Demonstrate the unauthenticated remote code execution vulnerability in the RSFiles! Joomla component through an arbitrary file upload.

CVE-2026-57827CRITICAL30 Jul 2026

Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17.12

63RISK

GitHub PoC

KunalKhandelwal-dev/cve-2021-41773-lab

CVE-2021-41773HIGHunder attackransomware30 Jul 2026

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISK

GitHub PoC

CVE-2026-63030 Exploit | by gr1tx

CVE-2026-63030CRITICALunder attack30 Jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

98RISK

GitHub PoC★ 30

rails/rails-forensics-CVE-2026-66066

CVE-2026-66066CRITICAL30 Jul 2026

Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing

68RISK

GitHub PoC

CVE-2026-59726 - Draft or Todo

CVE-2026-59726CRITICAL30 Jul 2026

Ruflo: Unauthenticated RCE in MCP bridge default docker-compose deployment

63RISK

GitHub PoC★ 1

Gitea diffpatch RCE

CVE-2026-60004CRITICALunder attack30 Jul 2026

Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.

98RISK

GitHub PoC

Hands-on exploit lab for CVE-2024-28000 — unauthenticated privilege escalation in LiteSpeed Cache (WordPress plugin, <=6.3.0.1). Spins up a vulnerable environment with Docker and includes a Go-based brute-forcer that cracks the weak mt_rand hash to create an administrator account.

CVE-2024-28000CRITICAL30 Jul 2026

WordPress LiteSpeed Cache plugin <= 6.3.0.1 - Unauthenticated Privilege Escalation vulnerability

75RISK

GitHub PoC

PoC exploits for CVE-2026-52824 (GHSA-jr9p-4h4j-6c58) — Kimai time-tracking default APP_SECRET authentication bypass affecting versions ≤ 2.57.0

CVE-2026-49865MEDIUM30 Jul 2026

Kimai has Server-Side Request Forgery in Invoice PDF Rendering via Markdown Image URLs

13RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.