Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,114cataloged exploits

31,649CVEs with public exploitation

0lab-tested

All Exploit-DB 22,469Referência 19,810GitHub PoC 13,116VulnCheck XDB 8,069Nuclei 4,188Metasploit 3,462✓ verified onlyrecent popular risk

71,114 exploits

GitHub PoC

Verified vulnerability journey for CVE-2025-8110 (Gogs) and CVE-2025-3248 (Langflow) — risk triage, exploitability verification, verified patches.

CVE-2025-8110HIGHunder attack20 May 2026

File overwrite in file update API in Gogs

100RISK

open ↗

GitHub PoC

gitgudKrish/cve-2025-29927-nextjs

CVE-2025-29927CRITICAL20 May 2026

Authorization Bypass in Next.js Middleware

85RISK

open ↗

GitHub PoC

Maxime288/Fragnesia-CVE-2026-46300

CVE-2026-46300HIGH20 May 2026

net: skbuff: preserve shared-frag marker during coalescing

41RISK

open ↗

GitHub PoC

One-command scanner for the Mini Shai-Hulud npm supply-chain worm (CVE-2026-45321). Detect before rotating tokens.

CVE-2026-45321CRITICALunder attackransomware20 May 2026

Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys

78RISK

open ↗

GitHub PoC

julianertle/CVE-2023-0386-CTF

CVE-2023-0386HIGHunder attack20 May 2026

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities wa

86RISK

open ↗

VulnCheck XDB

local

CVE-2021-4034HIGHunder attack20 May 2026

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISK

open ↗

GitHub PoC★ 2

A Go implementation of fragnesia (CVE-2026-46300)

CVE-2026-46300HIGH20 May 2026

net: skbuff: preserve shared-frag marker during coalescing

41RISK

open ↗

VulnCheck XDB

remote-with-credentials

CVE-2025-8110HIGHunder attack20 May 2026

File overwrite in file update API in Gogs

100RISK

open ↗

GitHub PoC

Exploit for DirtyDecrypt - CVE-2026-31635 Local Privilege Escalation

CVE-2026-31635HIGH20 May 2026

rxrpc: fix oversized RESPONSE authenticator length check

41RISK

open ↗

GitHub PoC

POC for CVE-2026-30950 which allows session hijacking in AutoGpt

CVE-2026-30950HIGH20 May 2026

AutoGPT has Authenticated Session Hijacking via IDOR

41RISK

open ↗

GitHub PoC

POC_CVE-2026-35037

CVE-2026-35037HIGH20 May 2026

Ech0 affected by unauthenticated SSRF in GetWebsiteTitle allows access to internal services and cloud metadata

41RISK

open ↗

GitHub PoC

DirtyDecrypt PoC Released for Linux Kernel CVE-2026-31635 LPE Vulnerability

CVE-2026-31635HIGH20 May 2026

rxrpc: fix oversized RESPONSE authenticator length check

41RISK

open ↗

GitHub PoC

MGTx2/CVE-2026-39107

CVE-2026-39107MEDIUM20 May 2026

A Cross Site Scripting vulnerability exists in the Kimi AI v1.0 web interface's 'Preview' feature. The application fails

33RISK

open ↗

VulnCheck XDB

info-leak

CVE-2018-14847CRITICALunder attack20 May 2026

MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated

100RISK

open ↗

VulnCheck XDB

local

CVE-2021-4034HIGHunder attack20 May 2026

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISK

open ↗

GitHub PoC

The code for personally reproducing the corresponding vulnerability

CVE-2026-40217HIGH19 May 2026

LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/t

41RISK

open ↗

GitHub PoC★ 5

CVE-2026-31635

CVE-2026-31635HIGH19 May 2026

rxrpc: fix oversized RESPONSE authenticator length check

41RISK

open ↗

GitHub PoC★ 1

RedCrazyGhost/CVE-2026-42945

CVE-2026-42945CRITICAL19 May 2026

NGINX ngx_http_rewrite_module vulnerability

60RISK

open ↗

GitHub PoC

The code for personally reproducing the corresponding vulnerability

CVE-2026-35030CRITICAL19 May 2026

LiteLLM has an authentication bypass via OIDC userinfo cache key collision

48RISK

open ↗

GitHub PoC

The code for personally reproducing the corresponding vulnerability

CVE-2026-35029HIGH19 May 2026

LiteLLM affected by privilege escalation via unrestricted proxy configuration endpoint

61RISK

open ↗

GitHub PoC

imSre9/CVE-2026-42945

CVE-2026-42945CRITICAL19 May 2026

NGINX ngx_http_rewrite_module vulnerability

60RISK

open ↗

GitHub PoC

rufflabs/CVE-2026-36748

CVE-2026-36748CRITICAL19 May 2026

RockRMS v16.13 and before v.17.7.0 is vulnerable to Cross Site Scripting (XSS) via Social Media links in user profile.

48RISK

open ↗

VulnCheck XDB

local

CVE-2026-43284HIGH19 May 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

78RISK

open ↗

GitHub PoC★ 2

Example application, vulnerable to CVE-2023-32692 (Validation Rule Injection in the PHP Framework CodeIgniter)

CVE-2023-32692CRITICAL19 May 2026

Remote Code Execution Vulnerability in Validation Placeholders

48RISK

open ↗

GitHub PoC

NGINX CVE-2026-42945 一键修复脚本

CVE-2026-42945CRITICAL19 May 2026

NGINX ngx_http_rewrite_module vulnerability

60RISK

open ↗

GitHub PoC

Shell scanner for CVE-2026-31431 "Copy Fail" — a local privilege escalation via Linux kernel page cache corruption (algif_aead/AF_ALG). Checks kernel version, patch status, module state, setuid exposure and mitigations. Supports Debian 11–13 and Ubuntu 20.04–25.10. CI/CD-ready (exit codes + JSON output).

CVE-2026-31431HIGHunder attack19 May 2026

crypto: algif_aead - Revert to operating out-of-place

100RISK

open ↗

GitHub PoC

CVE-2026-30691: Stored Cross-Site Scripting (XSS) in @cyntler/react-doc-viewer

CVE-2026-30691MEDIUM19 May 2026

Cross-Site Scripting (XSS) vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote attackers to execute arbitra

33RISK

open ↗

GitHub PoC

anonmrc/CVE-2026-34486-e-Tomcat-Tribes

CVE-2026-34486HIGH19 May 2026

Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor

61RISK

open ↗

GitHub PoC

Maxime288/CVE-2026-8838-RCE

CVE-2026-8838CRITICAL19 May 2026

Remote Code Execution via eval() Injection in amazon-redshift-python-driver

48RISK

open ↗

GitHub PoC

Writeup da sala Blue do TryHackMe — exploração do EternalBlue (MS17-010/CVE-2017-0143).

CVE-2017-0143HIGHunder attackransomware19 May 2026

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.