Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
85,883cataloged exploits
40,037CVEs with public exploitation
24,696lab-tested
AllReferência 25,956Exploit-DB 24,488GitHub PoC 17,453VulnCheck XDB 9,931Nuclei 4,527Metasploit 3,528✓ verified onlyrecentpopularrisk
4,527 exploits
Nucleicritical
TP-Link TL-WR840N - Command Injection
TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_set
30RISK
open ↗Nucleicritical
TOTOLink - Unauthenticated Command Injection
TOTOLink A950RG V5.9c.4050_B20190424 and V4.1.2cu.5204_B20210112 were discovered to contain a command injection vulnerab
23RISK
open ↗Nucleicritical
MCMS 5.2.4 - SQL Injection
MCMS v5.2.4 was discovered to contain a SQL injection vulnerability via search.do in the file /mdiy/dict/listExcludeApp.
18RISK
open ↗Nucleicritical
WordPress Plugin WP Statistics <= 13.1.5 - SQL Injection
WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_id
85RISK
open ↗Nucleihigh
WordPress Plugin WP Statistics <= 13.1.5 - SQL Injection
WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via IP
65RISK
open ↗Nucleihigh
DVDFab 12 Player/PlayerFab - Local File Inclusion
An absolute path traversal vulnerability allows a remote attacker to download any file on the Windows file system for wh
23RISK
open ↗Nucleicritical
ThinVNC - Authentication Bypass
ThinVNC version 1.0b1 allows an unauthenticated user to bypass the authentication process via 'http://thin-vnc:8080/cmd?
23RISK
open ↗Nucleicritical
Bonita Web 2021.2 - Authentication/Authorization Bypass
Bonita Web 2021.2 is affected by a authentication/authorization bypass vulnerability due to an overly broad exclude patt
30RISK
open ↗Nucleicritical
ZEROF Web Server 2.0 - SQL Injection
ZEROF Web Server 2.0 allows /HandleEvent SQL Injection.
18RISK
open ↗Nucleimedium
ZEROF Web Server 2.0 - Cross-Site Scripting
ZEROF Web Server 2.0 allows /admin.back XSS.
18RISK
open ↗Nucleimedium
SearchWP Live Ajax Search < 1.6.2 - Unauthenticated Arbitrary Post Title Disclosure
SearchWP Live Ajax Search < 1.6.2 - Unauthenticated Arbitrary Post Title Disclosure
18RISK
open ↗Nucleimedium
Alt-n/MDaemon Security Gateway <=8.5.0 - XML Injection
Alt-N MDaemon Security Gateway through 8.5.0 allows SecurityGateway.dll?view=login XML Injection.
28RISK
open ↗Nucleicritical
Dynamicweb 9.5.0 - 9.12.7 Unauthenticated Admin User Creation
An issue was discovered in Dynamicweb before 9.12.8. An attacker can add a new administrator user without authentication
55RISK
open ↗Nucleihigh
WordPress Ninja Job Board < 1.3.3 - Direct Request
Ninja Job Board < 1.3.3 - Resume Disclosure via Directory Listing
18RISK
open ↗Nucleimedium
WordPress All-in-One WP Migration <=7.62 - Cross-Site Scripting
All-in-One WP Migration < 7.63 - Unauthenticated Reflected XSS
28RISK
open ↗Nucleihigh
ThinkPHP 5.0.24 - Information Disclosure
ThinkPHP Framework v5.0.24 was discovered to be configured without the PATHINFO parameter. This allows attackers to acce
28RISK
open ↗Nucleihigh
Cuppa CMS v1.0 - Local File Inclusion
CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertLightbox.php.
18RISK
open ↗Nucleihigh
Complete Online Job Search System 1.0 - SQL Injection
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=hiring&search=.
18RISK
open ↗Nucleihigh
Car Rental Management System 1.0 - SQL Injection
Car Rental Management System v1.0 is vulnerable to SQL Injection via /ip/car-rental-management-system/admin/ajax.php?act
18RISK
open ↗Nucleihigh
Car Rental Management System 1.0 - SQL Injection
Car Rental Management System v1.0 is vulnerable to SQL Injection via car-rental-management-system/booking.php?car_id=.
18RISK
open ↗Nucleihigh
Car Rental Management System 1.0 - SQL Injection
Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/view_car.php?id
18RISK
open ↗Nucleihigh
Car Rental Management System 1.0 - SQL Injection
Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/manage_booking.
18RISK
open ↗Nucleihigh
Car Rental Management System 1.0 - SQL Injection
Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/manage_user.php
18RISK
open ↗Nucleicritical
Hospital Management System 1.0 - SQL Injection
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at doc
18RISK
open ↗Nucleimedium
Open edX <2022-06-06 - Cross-Site Scripting
Open edX platform before 2022-06-06 allows XSS via the "next" parameter in the logout URL.
18RISK
open ↗Nucleicritical
Sophos Firewall <= 19.0 MR1 - Remote Code Execution
A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewa
95RISK
open ↗Nucleicritical
Portal do Software Publico Brasileiro i3geo 7.0.5 - Local File Inclusion
A local file inclusion (LFI) vulnerability in the component codemirror.php of Portal do Software Publico Brasileiro i3ge
23RISK
open ↗Nucleimedium
Microweber <1.3.2 - Cross-Site Scripting
HTML code Injection in template search keyword in microweber/microweber
28RISK
open ↗Nucleicritical
MSNSwitch Firmware MNT.2408 - Authentication Bypass
An authentication-bypass issue in the component http://MYDEVICEIP/cgi-bin-sdb/ExportSettings.sh of Mega System Technolog
60RISK
open ↗Nucleihigh
Lin CMS Spring Boot - Default JWT Token
An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions w
18RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.