Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
89,340cataloged exploits
41,245CVEs with public exploitation
24,696lab-tested
AllReferência 26,769Exploit-DB 24,491GitHub PoC 18,603exploitation intelligence 11,309Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
11,309 exploits
initial-access
A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb
100RISK
local
Code Execution / Escalation of Privileges in ThrottleStop
41RISK
client-side
Path traversal vulnerability in WinRAR
93RISK
client-side
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, wa
41RISK
local
Host Process for Windows Tasks Elevation of Privilege Vulnerability
71RISK
remote-with-credentials
XWiki Platform: Remote code execution as guest via DatabaseSearch
75RISK
denial-of-service
A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated atta
35RISK
denial-of-service
A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated atta
45RISK
initial-access
CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1205 allows unauthenticated remote code execution via shell
100RISK
local
Host Process for Windows Tasks Elevation of Privilege Vulnerability
71RISK
initial-access
getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb allows remote attackers t
100RISK
infoleak
Multiple Sitecore products allow remote code execution. This affects Experience Manager, Experience Platform, and Experi
60RISK
initial-access
An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerabi
100RISK
initial-access
ingress-nginx admission controller RCE escalation
85RISK
initial-access
Command injection in React Native Community CLI allows remote attackers to perform remote code execution by sending HTTP requests
100RISK
initial-access
Monsta FTP <= 2.11 Unauthenticated Arbitrary File Upload
85RISK
infoleak
mod_proxy SSRF
100RISK
client-side
Git allows arbitrary code execution through broken config quoting
71RISK
infoleak
AI Engine <= 3.1.3 - Unauthenticated Sensitive Information Exposure to Privilege Escalation
85RISK
initial-access
Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
100RISK
client-side
Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitra
83RISK
initial-access
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic
100RISK
client-side
Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability
55RISK
client-side
Path traversal vulnerability in WinRAR
93RISK
initial-access
@nestjs/devtools-integration's CSRF to Sandbox Escape Allows for RCE against JS Developers
75RISK
initial-access
Adobe Commerce | Improper Input Validation (CWE-20)
100RISK
local
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti
100RISK
client-side
Microsoft Outlook Remote Code Execution Vulnerability
100RISK
client-side
DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite
75RISK
initial-access
Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
100RISK
We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and exploitation-intelligence sources. A public PoC existing does not mean the flaw is exploitable in your environment.