Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
75,445cataloged exploits
34,432CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,497GitHub PoC 13,627VulnCheck XDB 8,198Nuclei 4,217Metasploit 3,463✓ verified onlyrecentpopularrisk
4,217 exploits
Nucleicritical
DELMIA Apriso - Command Injection
Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025
88RISK
open ↗Nucleihigh
DELMIA Apriso - Broken Access Control
Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025
95RISK
open ↗Nucleimedium
WordPress Varnish/Nginx Proxy Caching <= 1.8.3 - Information Exposure
WordPress Varnish/Nginx Proxy Caching plugin <= 1.8.3 - Sensitive Data Exposure vulnerability
28RISK
open ↗Nucleicritical
Squid Proxy - HTTP Authentication Credentials Disclosure
Squid vulnerable to information disclosure via authentication credential leakage in error handling
75RISK
open ↗Nucleimedium
Piwigo - User Enumeration via Password Reset
Piwigo Vulnerable to User Enumeration via Password Reset Endpoint
28RISK
open ↗Nucleimedium
Vite - Information Disclosure
vite allows server.fs.deny bypass via backslash on Windows
28RISK
open ↗Nucleimedium
VDO.Ninja - DOM-Based Cross-Site Scripting
VDO.Ninja Reflected XSS Vulnerability in control.html
28RISK
open ↗Nucleimedium
ChangeDetection.io <= v0.50.33 - Stored XSS via Watch API
changedetection.io vulnerable to stored XSS in Watch update via API
23RISK
open ↗Nucleimedium
Dify v1.9.1 - Broken Access Control
Dify v1.9.1 is vulnerable to Insecure Permissions. An unauthenticated attacker can directly send HTTP GET requests to th
41RISK
open ↗Nucleicritical
Code-Projects School Fees Payment System 1.0 - SQL Injection
code-projects School Fees Payment System student.php sql injection
28RISK
open ↗Nucleicritical
DNN - Unrestricted Arbitrary File Upload
DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite
75RISK
open ↗Nucleicritical
FreePBX >= 17.0.2.36 && < 17.0.3 - Authenticated Command Injection
FreePBX Administration GUI is Vulnerable to Authenticated Command Injection
100RISK
open ↗Nucleicritical
FortiWeb - Authentication Bypass
A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb
100RISK
open ↗Nucleihigh
Symfony HttpFoundation - Access Control Bypass via PATH_INFO
Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass
36RISK
open ↗Nucleimedium
Astro - Broken Access Control
Astro: URL manipulation via unsanitized headers leads to path-based middleware protections bypass, potential SSRF/cache-poisoning, CVE-2025-61925 bypass
28RISK
open ↗Nucleihigh
Astro - Reflected XSS via server islands feature
Astro is vulnerable to Reflected XSS via the server islands feature
36RISK
open ↗Nucleimedium
XWiki DeleteApplication - Cross-Site Scripting
XWiki vulnerable to a reflected XSS via xredirect parameter in DeleteApplication
28RISK
open ↗Nucleihigh
Apache Tika - XML External Entity Injection
Apache Tika core, Apache Tika parsers, Apache Tika PDF parser module: Update to CVE-2025-54988 to expand scope of artifacts affected
58RISK
open ↗Nucleihigh
Yonyou YonBIP - Path Traversal
In Yonyou YonBIP v3 and before, the LoginWithV8 interface in the series data application service system is vulnerable to
36RISK
open ↗Nucleicritical
ComfyUI-Manager < 3.38 - Configuration Overwrite
An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration a
36RISK
open ↗Nucleihigh
LottieFiles WordPress Plugin <= 3.0.0 - Missing Authorization
WordPress LottieFiles plugin <= 3.0.0 - Broken Access Control vulnerability
36RISK
open ↗Nucleimedium
User Submitted Posts <= 20251121 - Unauthenticated Open Redirect
WordPress User Submitted Posts plugin <= 20251121 - Open Redirection vulnerability
28RISK
open ↗Nucleihigh
WordPress Broken Link Notifier < 1.3.1 - Unauthenticated SSRF
Broken Link Notifier <= 1.3.0 - Unauthenticated Server-Side Request Forgery
36RISK
open ↗Nucleimedium
Accept Donations with PayPal <= 1.5.2 - Open Redirect
WordPress Accept Donations with PayPal plugin <= 1.5.2 - Open Redirection vulnerability
28RISK
open ↗Nucleimedium
WordPress 3D FlipBook <= 1.16.17 - Information Disclosure
3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery <= 1.16.17 - Missing Authorization to Unauthenticated Private/Draft Flipbook Data Exposure
28RISK
open ↗Nucleicritical
WPvivid Backup & Migration <= 0.9.123 - Arbitrary File Upload
Migration, Backup, Staging <= 0.9.123 - Unauthenticated Arbitrary File Upload
75RISK
open ↗Nucleihigh
Video Conferencing with Zoom API < 4.6.6 - Unauthenticated SDK Signature Generation
Video Conferencing with Zoom API < 4.6.6 - Unauthenticated SDK Signature Generation
36RISK
open ↗Nucleihigh
WPBot <= 8.4.9 - Cross-Site Scripting
WPBot <= 8.4.9 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter
36RISK
open ↗Nucleicritical
WordPress Slider Future <= 1.0.5 - Unauthenticated Arbitrary File Upload
Slider Future <= 1.0.5 - Unauthenticated Arbitrary File Upload
63RISK
open ↗Nucleicritical
WordPress User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation
User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation via Membership Registration
68RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.