Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
85,682cataloged exploits
39,953CVEs with public exploitation
24,696lab-tested
AllReferência 25,887Exploit-DB 24,488GitHub PoC 17,378VulnCheck XDB 9,888Nuclei 4,513Metasploit 3,528✓ verified onlyrecentpopularrisk
4,513 exploits
Nucleimedium
LearnPress < 4.3.7 - Information Disclosure
LearnPress < 4.3.7 - Unauthenticated Sensitive User Information Disclosure via REST API
48RISK
open ↗Nucleimedium
WordPress WP Go Maps < 10.0.10 - Unauthenticated Marker Data Disclosure
WP Go Maps < 10.0.10 - Unauthenticated Sensitive Information Disclosure via Datatables AJAX Fallback
48RISK
open ↗Nucleimedium
WP Go Maps < 10.0.10 - Unauthenticated Marker Information Disclosure
WP Go Maps < 10.0.10 - Unauthenticated Sensitive Information Disclosure via Marker ID
48RISK
open ↗Nucleicritical
WordPress Gravity Forms Plugin <=3.1.0.4 - Unauthenticated Arbitrary File Upload
Gravity Forms <= 3.1.0.4 - Unauthenticated Arbitrary File Upload via Hidden File Upload Field
63RISK
open ↗Nucleicritical
Bricksforge WordPress Plugin <=3.1.8.9 - Unauthenticated Arbitrary File Upload
Bricksforge <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter
63RISK
open ↗Nucleihigh
GEO my WP <=4.5.5.3 - Unauthenticated Local File Inclusion
GEO my WP <= 4.5.5.3 - Unauthenticated Local File Inclusion
36RISK
open ↗Nucleicritical
TEN Framework - Arbitrary File Read & Write
TEN Framework 0.11.71 Unauthenticated File Read/Write via TMAN Designer
43RISK
open ↗Nucleicritical
GitLab CE/EE <=19.1.7/19.2.5/19.3.1 - Arbitrary File Read
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
100RISK
open ↗Nucleimedium
Pure-FTPd 1.0.24 - Security Vulnerability
An issue was discovered in Pure-FTPd 1.0.49. An out-of-bounds (OOB) read has been detected in the pure_strcmp function i
18RISK
open ↗Nucleihigh
vsftpd < 3.0.3 - DoS
VSFTPD 3.0.3 allows attackers to cause a denial of service due to limited number of connections allowed.
18RISK
open ↗Nucleicritical
NCR Command Center Agent 16.3 - Remote Command Execution
CMCAgent in NCR Command Center Agent 16.3 on Aloha POS/BOH servers permits the submission of a runCommand parameter (wit
40RISK
open ↗Nucleihigh
Pure-FTPd 1.0.23 < 1.0.50 - Arbitrary File Upload
In Pure-FTPd before 1.0.50, an incorrect max_filesize quota mechanism in the server allows attackers to upload files of
18RISK
open ↗Nucleicritical
Redis Sandbox Escape - Remote Code Execution
It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific
100RISK
open ↗Nucleicritical
CouchDB Erlang Distribution - Remote Command Execution
Remote Code Execution Vulnerability in Packaging
100RISK
open ↗Nucleihigh
muhttpd <=1.1.5 - Local Inclusion
do_request in request.c in muhttpd before 1.1.7 allows remote attackers to read arbitrary files by constructing a URL wi
23RISK
open ↗Nucleihigh
TitanFTP move-file Function ≤ 1.94.1205 - Path Traversal
An issue was discovered in TitanFTP through 1.94.1205. The move-file function has a path traversal vulnerability in the
61RISK
open ↗Nucleicritical
RocketMQ <= 5.1.0 - Remote Code Execution
Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function
100RISK
open ↗Nucleicritical
Fortinet FortiSIEM - Unauthenticated Command Injection
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet
85RISK
open ↗Nucleicritical
Apache RocketMQ - Remote Command Execution
Apache RocketMQ: Possible remote code execution when using the update configuration function
85RISK
open ↗Nucleicritical
Fortinet Forticlient Endpoint Management Server - SQL Injection
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS versio
100RISK
open ↗Nucleihigh
ProFTPD < 1.3.8a - DoS via Out-of-Bounds Read
make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandl
18RISK
open ↗Nucleicritical
Fortinet FortiSIEM - OS Command Injection
An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet
85RISK
open ↗Nucleihigh
Pure-FTPd < 1.0.52 - Buffer Overflow
pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow. There is an out of bounds read in the domlsd() function of the
36RISK
open ↗Nucleihigh
ProFTPD ≤ 1.3.8b - Privilege Escalation via mod_sql
In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access to GID 0 because of th
36RISK
open ↗Nucleimedium
MikroTik WinBox <= 6.49.17 - Username Enumeration
An issue was discovered in the Winbox service of MikroTik RouterOS long-term release v6.43.13 through v6.49.13 and stabl
28RISK
open ↗Nucleihigh
MongoDB Server - Information Disclosure (MongoBleed)
Zlib compressed protocol header length confusion may allow memory read
100RISK
open ↗Nucleicritical
Fortinet FortiSIEM - OS Command Injection
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] vul
75RISK
open ↗Nucleicritical
Güralp Systems FMUS Series - Unauthenticated Access
Güralp Systems FMUS Series and MIN Series Devices
43RISK
open ↗Nucleimedium
Mailpit < 1.28.2 - SMTP CRLF Injection
Mailpit has SMTP Header Injection via Regex Bypass
28RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.