Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,062cataloged exploits

31,617CVEs with public exploitation

0lab-tested

All Exploit-DB 22,467Referência 19,791GitHub PoC 13,086VulnCheck XDB 8,069Nuclei 4,187Metasploit 3,462✓ verified onlyrecent popular risk

13,086 exploits

GitHub PoC★ 1

CVE-2026-24207 — NVIDIA Triton SageMaker auth bypass to unauth RCE. Detection script, bypass demo, RCE-chain PoC, and IDS rules.

CVE-2026-24207CRITICAL26 Jun 2026

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A succes

63RISK

open ↗

GitHub PoC

Penpot's remote image import let an authenticated file editor turn a normal media convenience feature into backend-origin SSRF because attacker-controlled URLs crossed into a redirect-following server fetch path without destination filtering.

CVE-2026-45806HIGH26 Jun 2026

Penpot: Authenticated SSRF in remote image import via create-file-media-object-from-url

38RISK

open ↗

GitHub PoC

A public share looked clean in the page tree, but the search endpoint told a different story. In Docmost, restricted child pages hidden from public share viewers could still leak through public share search results.

CVE-2026-33146MEDIUM26 Jun 2026

Docmost's Public Share Search Exposes Metadata of Restricted Children

33RISK

open ↗

GitHub PoC★ 1

CVE-2026-8932

CVE-2026-8932HIGH26 Jun 2026

incomplete mTLS config matching in conn reuse

41RISK

open ↗

GitHub PoC

CVE-2026-54807 WooCommerce Privilege Escalation ║ ║ Unauthenticated Admin Role Assignment via Reg. Form

CVE-2026-54807CRITICAL26 Jun 2026

WordPress Registration Form for WooCommerce plugin <= 1.0.9 - Privilege Escalation vulnerability

48RISK

open ↗

GitHub PoC★ 15

mooder1/dirtyclone-CVE-2026-43503

CVE-2026-43503HIGH26 Jun 2026

net: skbuff: propagate shared-frag marker through frag-transfer helpers

41RISK

open ↗

GitHub PoC

A local package installation helper trusted caller-supplied package names too much. In yeoman-environment, missing generators could be installed without user confirmation, turning attacker-controlled project metadata into a package-install and code-execution path.

CVE-2026-42089HIGH26 Jun 2026

yeoman-environment Vulnerable to Arbitrary Package Installation without User Confirmation

41RISK

open ↗

GitHub PoC★ 26

CVE-2026-46331

CVE-2026-46331HIGH26 Jun 2026

net/sched: fix pedit partial COW leading to page cache corruption

41RISK

open ↗

GitHub PoC

Docmost accepted a javascript: URL inside an attachment node, preserved it through storage and rendering, and turned it back into a clickable anchor in the Docmost origin.

CVE-2026-34212MEDIUM26 Jun 2026

Docmost page content has stored XSS via unsanitized attachment URLs

33RISK

open ↗

GitHub PoC

The SSRF filter checked hostname text, but the actual destination was decided later by DNS. That gap let attacker-controlled Webhook URLs reach loopback, metadata, and private network targets.

CVE-2026-34207HIGH26 Jun 2026

TypeBot: SSRF Protection Bypass via DNS-Resolved Hostnames in Webhook / HTTP Request Validation

41RISK

open ↗

GitHub PoC★ 4

aexdyhaxor/CVE-2026-43503-DirtyClone

CVE-2026-43503HIGH26 Jun 2026

net: skbuff: propagate shared-frag marker through frag-transfer helpers

41RISK

open ↗

GitHub PoC★ 1

CVE-2026-7574

CVE-2026-7574HIGH25 Jun 2026

Anthropic Claude Desktop Cowork VM Image Contents Not Validated Before Use

41RISK

open ↗

GitHub PoC

Squamity/CVE-2026-8181-PoC

CVE-2026-8181CRITICAL25 Jun 2026

Burst Statistics 3.4.0 - 3.4.1.1 - Authentication Bypass to Admin Account Takeover

68RISK

open ↗

GitHub PoC

POC of CVE-2026-53075

CVE-2026-53075HIGH25 Jun 2026

ppp: require CAP_NET_ADMIN in target netns for unattached ioctls

41RISK

open ↗

GitHub PoC

7whyex/CVE-2026-45321-Tanstack

CVE-2026-45321CRITICALunder attackransomware25 Jun 2026

Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys

78RISK

open ↗

GitHub PoC★ 24

CVE-2026-43503

CVE-2026-43503HIGH25 Jun 2026

net: skbuff: propagate shared-frag marker through frag-transfer helpers

41RISK

open ↗

GitHub PoC★ 1

W5M1n9/Cisco-Unified-Communications-Manager-Server-Side-Forgery-Request-Vulnerability-CVE-2026-20230

CVE-2026-20230HIGH25 Jun 2026

Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability

53RISK

open ↗

GitHub PoC

Proof of Concept of CVE-2026-38526 in Krayin CRM <= v2.2.x. Arbitrary File Upload leading to Remote Code Execution

CVE-2026-38526CRITICAL24 Jun 2026

An authenticated arbitrary file upload vulnerability in the /admin/tinymce/upload endpoint of Webkul Krayin CRM v2.2.x a

48RISK

open ↗

GitHub PoC★ 1

Unauthenticated Account Takeover via Weak Password Reset Validation via 'reset_user_id' Parameter | Unauthenticated Privilege Escalation via Weak Password Reset Validation via 'reset_activation_code' Leading to Account Takeover

CVE-2026-12416CRITICAL24 Jun 2026

Invoice Generator <= 1.0.0 - Unauthenticated Account Takeover via Weak Password Reset Validation via 'reset_user_id' Parameter

48RISK

open ↗

GitHub PoC★ 60

CVE-2026-45504 Microsoft Exchange File Read

CVE-2026-45504HIGH24 Jun 2026

Microsoft Exchange Server Elevation of Privilege Vulnerability

41RISK

open ↗

GitHub PoC

CVE-2026-49777, CVE-2026-10735 - Draft

CVE-2026-49777CRITICAL24 Jun 2026

WordPress Product Slider Pro for WooCommerce plugin < 3.5.4 - Backdoor vulnerability

63RISK

open ↗

GitHub PoC★ 13

Y5neKO/CVE-2026-8461-EXP

CVE-2026-8461HIGH24 Jun 2026

Heap out-of-bounds write via odd slice_height in FFmpeg MagicYUV decoder

41RISK

open ↗

GitHub PoC

Unauthenticated RCE PoC for CVE-2026-48908 SP Page Builder (Joomla) arbitrary file upload and remote code execution exploit with mass scaning support.

CVE-2026-48908CRITICAL24 Jun 2026

Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2

48RISK

open ↗

GitHub PoC★ 1

CVE-2026-48908

CVE-2026-48908CRITICAL24 Jun 2026

Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2

48RISK

open ↗

GitHub PoC

CVE-2026-31431 getroot from a Turkish Cryptominer

CVE-2026-31431HIGHunder attack24 Jun 2026

crypto: algif_aead - Revert to operating out-of-place

100RISK

open ↗

GitHub PoC★ 1

CVE-2026-8461 - Draft

CVE-2026-8461HIGH24 Jun 2026

Heap out-of-bounds write via odd slice_height in FFmpeg MagicYUV decoder

41RISK

open ↗

GitHub PoC★ 1

Proof of concept for CVE-2026-56111, an out-of-bounds write in the M421 G-code handler of Marlin Firmware

CVE-2026-56111HIGH24 Jun 2026

Marlin Firmware 2.1.2.7 Out-of-Bounds Write via M421 G-code Handler

41RISK

open ↗

GitHub PoC

CVE-2026-48908 - SP Page Builder Joomla Unauthenticated RCE

CVE-2026-48908CRITICAL24 Jun 2026

Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2

48RISK

open ↗

GitHub PoC

s1lentf00thold/CVE-2020-11651-Poc

CVE-2020-11651CRITICALunder attack23 Jun 2026

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs cla

100RISK

open ↗

GitHub PoC

Public advisory for CVE-2026-39253, addressing an insecure deserialisation in Pivotal CRM 6.6.04.08 allowing remote code execution via unsafe BinaryFormatter usage in Smart Client and PBS components. Includes vulnerability details, affected versions, and remediation guidance.

CVE-2026-39253HIGH23 Jun 2026

An issue in Pivotal CRM v.6.6.04.08 allows a remote attacker to execute arbitrary code via the Pivotal.Core.Common.dll a

41RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.