Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,957cataloged exploits
32,195CVEs with public exploitation
1,932lab-tested
71,886 exploits
GitHub PoC1
George0Papasotiriou/CVE-2025-8110-Gogs-Remote-Code-Execution
CVE-2025-8110HIGHunder attack10 Feb 2026
File overwrite in file update API in Gogs
100RISK
open
VulnCheck XDB
remote-with-credentials
CVE-2025-6019HIGH10 Feb 2026
Libblockdev: lpe from allow_active to root in libblockdev via udisks
41RISK
open
VulnCheck XDB
remote-with-credentials
CVE-2025-3408510 Feb 2026
35RISK
open
VulnCheck XDB
remote-with-credentials
CVE-2026-1357CRITICAL10 Feb 2026
Migration, Backup, Staging <= 0.9.123 - Unauthenticated Arbitrary File Upload
75RISK
open
VulnCheck XDB
remote-with-credentials
CVE-2025-6019HIGH10 Feb 2026
Libblockdev: lpe from allow_active to root in libblockdev via udisks
41RISK
open
GitHub PoC1
George0Papasotiriou/CVE-2025-15556-Notepad-WinGUp-Updater-RCE
CVE-2025-15556HIGHunder attack10 Feb 2026
Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verification
71RISK
open
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALunder attackransomware10 Feb 2026
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open
VulnCheck XDB
initial-access
CVE-2020-36847CRITICAL10 Feb 2026
Simple File List < 4.2.3 - Remote Code Execution
68RISK
open
VulnCheck XDB
initial-access
CVE-2026-25939CRITICAL10 Feb 2026
FUXA Unauthenticated Remote Arbitrary Scheduler Write
53RISK
open
VulnCheck XDB
denial-of-service
CVE-2023-44487HIGHunder attack10 Feb 2026
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISK
open
GitHub PoC
RCE on Next 16.0.6
CVE-2025-55182CRITICALunder attackransomware10 Feb 2026
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open
VulnCheck XDB
initial-access
CVE-2025-49132CRITICAL10 Feb 2026
Pterodactyl Panel Allows Unauthenticated Arbitrary Remote Code Execution
68RISK
open
VulnCheck XDB
initial-access
CVE-2025-49132CRITICAL10 Feb 2026
Pterodactyl Panel Allows Unauthenticated Arbitrary Remote Code Execution
68RISK
open
GitHub PoC1
George0Papasotiriou/CVE-2025-61882-Oracle-BI-Publisher-RCE
CVE-2025-61882CRITICALunder attackransomware10 Feb 2026
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integratio
100RISK
open
GitHub PoC1
George0Papasotiriou/CVE-2025-55182-React2Shell-CVSS-10.0-
CVE-2025-55182CRITICALunder attackransomware10 Feb 2026
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open
GitHub PoC1
George0Papasotiriou/CVE-2025-59470-PostgreSQL-Command-Injection
CVE-2025-59470CRITICAL10 Feb 2026
This vulnerability allows a Backup Operator to perform remote code execution (RCE) as the postgres user by sending a mal
48RISK
open
VulnCheck XDB
remote-with-credentials
CVE-2025-54254HIGH10 Feb 2026
Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
63RISK
open
GitHub PoC
bixiPRO/Drupalgeddon2-CVE-2018-7600
CVE-2018-7600CRITICALunder attackransomware10 Feb 2026
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi
100RISK
open
VulnCheck XDB
client-side
CVE-2018-7600CRITICALunder attackransomware10 Feb 2026
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi
100RISK
open
VulnCheck XDB
initial-access
CVE-2017-7921CRITICALunder attack09 Feb 2026
An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16
100RISK
open
GitHub PoC
HikVision Auth Bypass CVE, tool is able to extract credentials, and take snapshots based on magic cookie or supplied credentials.
CVE-2017-7921CRITICALunder attack09 Feb 2026
An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16
100RISK
open
VulnCheck XDB
initial-access
CVE-2017-1254209 Feb 2026
A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53
60RISK
open
GitHub PoC1
IoCs and detection rules for the Notepad++ supply chain attack (CVE-2025-15556) — Lotus Blossom APT, June–December 2025. Includes Falcon LogScale queries, YARA/Sigma rules, and MITRE ATT&CK mapping.
CVE-2025-15556HIGHunder attack09 Feb 2026
Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verification
71RISK
open
VulnCheck XDB
client-side
CVE-2025-55182CRITICALunder attackransomware09 Feb 2026
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open
GitHub PoC
ISabbiI/PoC---CVE-2023-26482-RCE-LAB-Nextcloud
CVE-2023-26482CRITICAL09 Feb 2026
Scope of workflow operations is not validated in nextcloud server
63RISK
open
VulnCheck XDB
initial-access
CVE-2025-6019HIGH09 Feb 2026
Libblockdev: lpe from allow_active to root in libblockdev via udisks
41RISK
open
VulnCheck XDB
local
CVE-2025-6019HIGH09 Feb 2026
Libblockdev: lpe from allow_active to root in libblockdev via udisks
41RISK
open
VulnCheck XDB
remote-with-credentials
CVE-2025-6019HIGH09 Feb 2026
Libblockdev: lpe from allow_active to root in libblockdev via udisks
41RISK
open
GitHub PoC
CVE-2025-9074: Docker Desktop LPE via Docker Engine API wo/ AuthN in posix sh
CVE-2025-9074CRITICAL09 Feb 2026
Docker Desktop allows unauthenticated access to Docker Engine API from containers
48RISK
open
GitHub PoC1
This repo contains RCE exploit for Pterodactyl htb machine
CVE-2025-49132CRITICAL09 Feb 2026
Pterodactyl Panel Allows Unauthenticated Arbitrary Remote Code Execution
68RISK
open
previouspage 118 / 2,397next

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.