Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
78,794cataloged exploits
36,057CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,459Referência 22,721GitHub PoC 14,946VulnCheck XDB 8,829Nuclei 4,350Metasploit 3,489✓ verified onlyrecentpopularrisk
14,316 exploits
GitHub PoC★ 5
CVE-2026-49176 WalletService LPE — standalone PoC + Cobalt Strike BOF (SYSTEM command on interactive session)
Windows WalletService Elevation of Privilege Vulnerability
41RISK
open ↗GitHub PoC
Tracking OVSwrap (CVE-2026-64531), the Open vSwitch datapath netlink overflow
net: openvswitch: reject oversized nested action attrs
41RISK
open ↗GitHub PoC★ 1
Gitea Docker Image Authentication Bypass
Gitea Docker image trusts spoofable reverse-proxy headers by default
75RISK
open ↗GitHub PoC
webshellseo8/CVE-2026-61511-POC
vBulletin < 6.2.2 Eval Injection RCE via vb5/template/runtime.php
48RISK
open ↗GitHub PoC
CVE-2026-2586 — Eclipse GlassFish EL injection to RCE
An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console. A user
48RISK
open ↗GitHub PoC★ 5
CVE-2026-61511 – vBulletin Pre-Auth RCE (CVSS 9.8). Vuln 5.x/6.x (unpatched). Multi-exploit via Endpoint Pool, AJAX, PHPFuck WAF bypass. Full toolkit: reverse shell, proxy, persistence, webshell, database operations, firewall control, log management, mass scanning. 2 versions: multi-exploit & safe-check. Python 3.8+ Use Ethically, Stay Legal. 🔒
vBulletin < 6.2.2 Eval Injection RCE via vb5/template/runtime.php
48RISK
open ↗GitHub PoC★ 9
CVE-2026-43813: CloudAttestation enforceEnvironment bypass
A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 26.6 and iPadOS 26.6, macO
41RISK
open ↗GitHub PoC★ 15
CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE. Split-controller upload bypass. CVSS 9.8 | CWE-434 | com_rsfiles < 1.17.12
Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17.12
63RISK
open ↗GitHub PoC
vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in the vB5_Template_Runtime::runMaths() method within the template runtime that allows unauthenticated remote attackers to execute arbitrary PHP code
vBulletin < 6.2.2 Eval Injection RCE via vb5/template/runtime.php
48RISK
open ↗GitHub PoC★ 5
CVE-2026-58025 — MediaWiki Deserialization RCE via Log Entry Import. LogEntryBase::extractParams() unserialize() user-controlled log_params. CVSS 9.8 | CWE-502 | MediaWiki < 1.43.9, < 1.44.6, < 1.45.4, < 1.46.0
Remote Code Execution via Unsafe Deserialization in LogItem Import
33RISK
open ↗GitHub PoC
Public technical advisory and reproduction evidence for CVE-2026-52134 affecting GOOSE replay handling in libiec61850 v1.6.
An issue in the parseGoosePayload() function (/goose/goose_receiver.c) of libiec61850 v1.6 allows attackers to bypass au
48RISK
open ↗GitHub PoC
CamilleGR/CVE-2026-73292
Semaphore UI: CSRF vulnerability on password change endpoint - No CSRF token or password confirmation
41RISK
open ↗GitHub PoC★ 23
PoC for CVE-2026-66066 in Ruby on Rails
Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing
48RISK
open ↗GitHub PoC
Reproducible SOC lab for CVE-2024-4577 detection and response
Argument Injection in PHP-CGI
100RISK
open ↗GitHub PoC★ 1
CVE-2026-66066
Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing
48RISK
open ↗GitHub PoC★ 11
A proof-of-concept script to exploit CVE-2026-16232, an authentication bypass via the SmartConsole login process using an application token.
Authentication Bypass in the SmartConsole Login Process Using an Application Token
100RISK
open ↗GitHub PoC
Simulated a real-world attack (CVE-2011-2523) against a vulnerable host, then cross-checked detection coverage against an existing Wazuh/Suricata/Zeek SOC — uncovering and fixing 5 real monitoring pipeline bugs along the way.
vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.
60RISK
open ↗GitHub PoC
bha-vin/CVE-2026-64600-Exploit
xfs: resample the data fork mapping after cycling ILOCK
41RISK
open ↗GitHub PoC★ 4
Fastjson 1.2.83 RCE 靶场环境 (CVE-2026-16723)
Remote Code Execution in fastjson 1.2.68–1.2.83
48RISK
open ↗GitHub PoC
letsr00t/RefluxFS_CVE-2026-64600
xfs: resample the data fork mapping after cycling ILOCK
41RISK
open ↗GitHub PoC
Perl Image::WebP library. Unofficial. CVE-2026-58586
Image::WebP versions before 0.3.0 for Perl bundle a vulnerable version of libwebp
28RISK
open ↗GitHub PoC★ 6
Security research on Liferay CE 7.0.3 GA4: pre-auth RCE as root (CVE-2020-7961 class) reproduced end-to-end, plus 16 more findings — 8+ with no known CVE. Agentic loop-hunt: 25 generators, 22 judges, 9 live validators on Docker. Evidence trail + one-go checker included.
Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary c
100RISK
open ↗GitHub PoC★ 3
CVE-2026-53264 - Draft or Todo
net/sched: act_api: use RCU with deferred freeing for action lifecycle
41RISK
open ↗GitHub PoC
CVE-2026-61511 - Draft or Todo
vBulletin < 6.2.2 Eval Injection RCE via vb5/template/runtime.php
48RISK
open ↗GitHub PoC★ 2
Exploit code for CVE-2026-55040, it can create auth header for any validate account.
Microsoft SharePoint Server Security Feature Bypass Vulnerability
78RISK
open ↗GitHub PoC
0xdak/CVE-2025-71389_exploit
Cal.com before 5.9.9 Remote Code Execution via RSC
48RISK
open ↗GitHub PoC★ 3
cve-2026-61511
vBulletin < 6.2.2 Eval Injection RCE via vb5/template/runtime.php
48RISK
open ↗GitHub PoC
CVE-2026-14856 TastyIgniter v4.3.0
Stored Cross-Site Scripting (XSS) in TastyIgniter Media Manager
33RISK
open ↗GitHub PoC★ 10
KSU installer for supported firmware with CVE-2026-43499
rtmutex: Use waiter::task instead of current in remove_waiter()
41RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.