Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
85,696cataloged exploits
39,957CVEs with public exploitation
24,696lab-tested
AllReferência 25,887Exploit-DB 24,488GitHub PoC 17,378VulnCheck XDB 9,888Nuclei 4,527Metasploit 3,528✓ verified onlyrecentpopularrisk
4,527 exploits
Nucleicritical
XWiki <= 17.3.0 - Server-Side Template Injection (SSTI)
XWiki through version 17.3.0 is vulnerable to Server-Side Template Injection (SSTI) in the Administration interface, spe
36RISK
open ↗Nucleicritical
MikoPBX - Unrestricted File Upload
PBXCoreREST/Controllers/Files/PostController.php in MikoPBX through 2024.1.114 allows uploading a PHP script to an arbit
43RISK
open ↗Nucleihigh
XWiki - HQL Injection
XWiki Platform vulnerable to HQL injection via wiki and space search REST API
43RISK
open ↗Nucleihigh
DNN (DotNetNuke) - Unicode Path Normalization NTLM Hash Disclosure
DNN.PLATFORM leaks NTLM hash via SMB Share Interaction with malicious user input
68RISK
open ↗Nucleicritical
UniFi Access - Broken Access Control
A malicious actor with access to the management network could exploit a misconfiguration in UniFi’s door access applicat
55RISK
open ↗Nucleicritical
Advantech WISE-IoTSuite/SaaS - SQL Injection
Execution of arbitrary SQL commands
75RISK
open ↗Nucleihigh
Likes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL Injection
Likes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL Injection
56RISK
open ↗Nucleihigh
Fortinet FortiWeb - Authentication Bypass to Admin Privilege
A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7 and below, versions 7.2.
61RISK
open ↗Nucleimedium
ONLYOFFICE Docs (DocumentServer) - Reflected Cross-Site Scripting
Reflected Cross-Site Scripting in ONLYOFFICE Docs (DocumentServer)
40RISK
open ↗Nucleicritical
Securden Unified PAM - Authentication Bypass
Securden Unified PAM Authentication Bypass
55RISK
open ↗Nucleimedium
Parse Server - GraphQL Schema Information Disclosure
Parse Server exposes the data schema via GraphQL API
28RISK
open ↗Nucleimedium
WSO2 - Server Side Request Forgery
SSRF and Reflected XSS Vulnerability in Deprecated Try-It Feature of Multiple WSO2 Products
28RISK
open ↗Nucleimedium
Pi-hole Reflected XSS in 404-Error Page
Pi-hole Admin Interface vulnerable to cross-site scripting via malformed URL path on 404 error page
28RISK
open ↗Nucleihigh
ZTE ZXHN-F660T/F660A - Default Credentials
ZXHN-F660T and ZXHN-F660A provided by ZTE Japan K.K. use a common credential for all installations. With the knowledge o
56RISK
open ↗Nucleihigh
Docusaurus Gists Plugin < 4.0.0 - GitHub Personal Access Token Exposure
docusaurus-plugin-content-gists Exposes GitHub Personal Access Token
43RISK
open ↗Nucleicritical
Microsoft SharePoint Server - Remote Code Execution (ToolShell)
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISK
open ↗Nucleimedium
Microsoft SharePoint Server - Authentication Bypass (ToolShell)
Microsoft SharePoint Server Spoofing Vulnerability
50RISK
open ↗Nucleicritical
LaRecipe < 2.8.1 Remote Code Execution via SSTI
LaRecipe is vulnerable to Server-Side Template Injection attacks
63RISK
open ↗Nucleimedium
Directus < 11.9.0 - Version Disclosure
Directus's exact version number is exposed by the OpenAPI Spec
28RISK
open ↗Nucleicritical
Unauthenticated Arbitrary Plugin Upload in Alone Theme
Alone – Charity Multipurpose Non-profit WordPress Theme <= 7.8.3 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation
75RISK
open ↗Nucleicritical
Laravel Livewire v3 - Remote Command Execution
Livewire vulnerable to remote command execution during property update hydration
100RISK
open ↗Nucleicritical
Hoverfly <= 1.11.3 - Remote Code Execution
Hoverfly vulnerable to remote code execution at `/api/v2/hoverfly/middleware` endpoint due to insecure middleware implementation
68RISK
open ↗Nucleihigh
XWiki XML View - Sensitive Information Exposure
XWiki Platform: Password and email exposure in xml.vm fields
36RISK
open ↗Nucleicritical
MLflow Job API - Authentication Bypass
Missing Authentication for Critical Function in mlflow/mlflow
36RISK
open ↗Nucleicritical
LolLMS <= 2.2.0 - Unauthenticated File Upload
Unauthenticated File Upload in parisneo/lollms
36RISK
open ↗Nucleihigh
LolLMS < 2.2.0 - Server-Side Request Forgery
Server-Side Request Forgery (SSRF) in parisneo/lollms
36RISK
open ↗Nucleimedium
Shield Security <= 21.0.8 - Unauthenticated Reflected XSS
Shield Security <= 21.0.8 - Unauthenticated Reflected Cross-Site Scripting via 'message' Parameter
28RISK
open ↗Nucleimedium
WordPress List Site Contributors < 1.1.8 - Reflected XSS
List Site Contributors <= 1.1.8 - Reflected Cross-Site Scripting via alpha
28RISK
open ↗Nucleicritical
OpenFlagr <= 1.1.18 - Authentication Bypass
OpenFlagr <= 1.1.18 Authentication Bypass via Prefix Whitelist Path Normalization
43RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.