Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
89,426cataloged exploits
41,291CVEs with public exploitation
24,696lab-tested
AllReferência 26,792Exploit-DB 24,491GitHub PoC 18,666exploitation intelligence 11,309Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
11,309 exploits
info-leak
Spring Expression Language property modification using Spring Cloud Gateway Server WebFlux
63RISK
initial-access
StoryChief <= 1.0.42 - Unauthenticated Arbitrary File Upload
75RISK
client-side
Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write v
76RISK
client-side
A cross-site scripting (XSS) vulnerability exists in Grafana caused by combining a client path traversal and open redire
78RISK
local
7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability
46RISK
initial-access
tls: fix handling of zero-length records on the rx_list
78RISK
initial-access
Remote code execution as guest via SolrSearchMacros request in xwiki
100RISK
initial-access
A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53
60RISK
infoleak
Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI). Supported versions
100RISK
local
Microsoft Streaming Service Elevation of Privilege Vulnerability
76RISK
infoleak
Cache Poisoning in next.js
53RISK
initial-access
An issue was discovered in ThoughtWorks GoCD before 21.3.0. The business continuity add-on, which is enabled by default,
43RISK
initial-access
Gladinet CentreStack and TrioFox Local File Inclusion Flaw
100RISK
initial-access
Apache OFBiz: Unauthenticated endpoint could allow execution of screen rendering code
100RISK
initial-access
Service Finder Bookings <= 6.0 - Authentication Bypass via User Switch Cookie
63RISK
infoleak
File Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated Arbitrary File Read
56RISK
initial-access
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integratio
100RISK
client-side
Path traversal vulnerability in WinRAR
93RISK
initial-access
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
100RISK
initial-access
Apache OFBiz: Path traversal leading to RCE
100RISK
denial-of-service
Redis Lua Use-After-Free may lead to remote code execution
85RISK
denial-of-service
Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE
100RISK
initial-access
Missing Authorization vulnerability in Melis Platform
63RISK
infoleak
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
denial-of-service
Redis Lua Use-After-Free may lead to remote code execution
85RISK
initial-access
StoryChief <= 1.0.42 - Unauthenticated Arbitrary File Upload
75RISK
infoleak
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RISK
initial-access
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integratio
100RISK
initial-access
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integratio
100RISK
local
VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)
76RISK
We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and exploitation-intelligence sources. A public PoC existing does not mean the flaw is exploitable in your environment.