Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,114cataloged exploits

31,649CVEs with public exploitation

0lab-tested

All Exploit-DB 22,469Referência 19,810GitHub PoC 13,116VulnCheck XDB 8,069Nuclei 4,188Metasploit 3,462✓ verified onlyrecent popular risk

13,116 exploits

GitHub PoC★ 1

Repository for studying the CVE-2026-42945 vulnerability in nginx < 1.30

CVE-2026-42945CRITICAL25 May 2026

NGINX ngx_http_rewrite_module vulnerability

60RISK

open ↗

GitHub PoC

Critical vulnerability in Siemens RuggedCom ROS devices allowing attackers to derive a hidden factory account password from the device MAC address and gain unauthorized administrative access via TELNET, rsh, or serial interfaces. Affects ROS 3.10.x and earlier.

CVE-2012-1803—25 May 2026

RuggedCom Rugged Operating System (ROS) 3.10.x and earlier has a factory account with a password derived from the MAC Ad

50RISK

open ↗

GitHub PoC

notthemystery/CVE-2026-20700-POC-that-ll-never-work

CVE-2026-20700HIGHunder attack25 May 2026

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3,

71RISK

open ↗

GitHub PoC

A proof of concept for CVE 2024 23113 inspired by WatchTowr's article.

CVE-2024-23113CRITICALunder attack25 May 2026

A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.

90RISK

open ↗

GitHub PoC

CVE-2026-38427 — Integer Wraparound → Heap Buffer Overflow in Tasmota fetch_jpg() uint16_t (Tasmota <= 15.3.0.3)

CVE-2026-38427HIGH25 May 2026

An issue in fetch_jpg() in xdrv_10_scripter.ino in Tasmota through 15.3.0.3 allows a remote attacker to cause heap buffe

41RISK

open ↗

GitHub PoC★ 29

CVE-2026-0091, play with an issue in android window management to perform arbitrary code execution in Launcher process from adb

CVE-2026-0091HIGH25 May 2026

In multiple locations, there is a possible way to execute code in the launcher process due to an over-privileged shell u

41RISK

open ↗

GitHub PoC

Educational laboratory for studying CVE-2014-0160 (Heartbleed) and framing inconsistencies in TLS heartbeat handling.

CVE-2014-0160HIGHunder attack25 May 2026

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISK

open ↗

GitHub PoC

Manual, non-Metasploit authenticated Remote Code Execution (RCE) exploit via the browser URL bar for Webmin 1.580 (CVE-2012-2982)

CVE-2012-2982—25 May 2026

file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid

50RISK

open ↗

GitHub PoC

The code for personally reproducing the corresponding vulnerability

CVE-2026-47102HIGH25 May 2026

LiteLLM < 1.83.10 Privilege Escalation via User Update

41RISK

open ↗

GitHub PoC

translating original python exploit to C

CVE-2026-0073HIGH25 May 2026

In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic err

41RISK

open ↗

GitHub PoC★ 1

Automated scanner & post-exploitation toolkit for CVE-2026-41940 — cPanel & WHM root authentication bypass via session-file CRLF injection

CVE-2026-41940CRITICALunder attackransomware24 May 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RISK

open ↗

GitHub PoC

CMS Made Simple CVE-2019-9053 Exploit (Python 3)

CVE-2019-9053—24 May 2026

An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve

35RISK

open ↗

GitHub PoC

🎓 PoC Educativo para CVE-2026-23520. Laboratorio de análisis de vulnerabilidades y mitigación controlada. 🧪

CVE-2026-23520CRITICAL24 May 2026

Arcane has a Command Injection in Arcane Updater Lifecycle Labels Enables RCE

48RISK

open ↗

GitHub PoC★ 1

CVE-2026-39987 Exploitation Tool - Marimo < 0.23.0 Pre-Auth RCE (WebSocket)

CVE-2026-39987CRITICALunder attack24 May 2026

marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

100RISK

open ↗

GitHub PoC

CVE-2026-20182

CVE-2026-20182CRITICALunder attack24 May 2026

Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

100RISK

open ↗

GitHub PoC

Leemyunglyul/cve-2021-4034-mock

CVE-2021-4034HIGHunder attack24 May 2026

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISK

open ↗

GitHub PoC

mein-0/cve-2026-29923

CVE-2026-29923HIGH24 May 2026

The pstrip64.sys driver in EnTech Taiwan PowerStrip <=3.90.736 allows local users to escalate privileges to SYSTEM via a

41RISK

open ↗

GitHub PoC★ 1

Local Privilege Escalation in Amazon WorkSpaces via TOCTOU and Arbitrary File Write

CVE-2026-7791HIGH24 May 2026

Improper privilege management in the log rotation mechanism of the Skylight Workspace Config Service in Amazon WorkSpace

41RISK

open ↗

GitHub PoC★ 4

BitLocker TPM+PIN Hardening Against CVE-2026-45585 (YellowKey)

CVE-2026-45585MEDIUM24 May 2026

Windows BitLocker Security Feature Bypass Vulnerability

33RISK

open ↗

GitHub PoC★ 2

copy_fail:CVE-2026-31431

CVE-2026-31431HIGHunder attack24 May 2026

crypto: algif_aead - Revert to operating out-of-place

100RISK

open ↗

GitHub PoC

Ambiente Docker para demonstração prática da CVE-2025-54236 (SessionReaper): PHP Object Deserialization levando a RCE em Magento Open Source 2.4.7

CVE-2025-54236CRITICALunder attack24 May 2026

Adobe Commerce | Improper Input Validation (CWE-20)

100RISK

open ↗

GitHub PoC

CVE-2025-47812 Poc for wingdata HTB

CVE-2025-47812CRITICALunder attack24 May 2026

In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection o

100RISK

open ↗

GitHub PoC★ 39

windows api bug

CVE-2026-41096CRITICAL24 May 2026

Windows DNS Client Remote Code Execution Vulnerability

48RISK

open ↗

GitHub PoC

w3nch/CVE-2025-55182-in-go

CVE-2025-55182CRITICALunder attackransomware24 May 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISK

open ↗

GitHub PoC

Lab detection exercise for DirtyFrag (CVE-2026-43284) - Linux kernel privilege escalation via xfrm-ESP page cache corruption. Full write-up covering exploit execution, detection gaps, and corrected EQL rules using Elastic Stack

CVE-2026-43284HIGH24 May 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

78RISK

open ↗

GitHub PoC★ 7

Drupal CVE-2026-9082 Blind SQL Injection Checker

CVE-2026-9082CRITICALunder attack24 May 2026

Drupal core - Highly critical - SQL injection - SA-CORE-2026-004

100RISK

open ↗

GitHub PoC

CVE-2025-55182 — Unauthenticated RCE in React Server Components (React2Shell). CVSS 10.0 exploit tool for authorized penetration testing.

CVE-2025-55182CRITICALunder attackransomware24 May 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISK

open ↗

GitHub PoC

Tracking the nginx CVE-2026-9256 rewrite-module heap overflow

CVE-2026-9256CRITICAL24 May 2026

NGINX ngx_http_rewrite_module vulnerability

48RISK

open ↗

GitHub PoC★ 3

CVE-2026-41096: Heap Overflow in the Windows DNS Client

CVE-2026-41096CRITICAL24 May 2026

Windows DNS Client Remote Code Execution Vulnerability

48RISK

open ↗

GitHub PoC★ 1

renewablehacking/CVE-2025-55182-React-19.2.0

CVE-2025-55182CRITICALunder attackransomware23 May 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.