Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
89,220cataloged exploits
41,197CVEs with public exploitation
24,696lab-tested
AllReferência 26,738Exploit-DB 24,490GitHub PoC 18,525exploitation intelligence 11,299Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
11,299 exploits
initial-access
RCE via stale global state
100RISK
denial-of-service
Out-of-Bounds Write in Google Brotli Decoder
70RISK
remote-with-credentials
A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthenti
60RISK
info-leak
LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion
63RISK
local
Microsoft Streaming Service Elevation of Privilege Vulnerability
41RISK
local
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISK
initial-access
RCE via stale global state
100RISK
initial-access
RCE via stale global state
100RISK
initial-access
Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
100RISK
initial-access
Totolink A7000R cstecgi.cgi setUpgradeFW command injection
33RISK
initial-access
Gitea Org-mode file disclosure and code execution
68RISK
initial-access
A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4-1 running In
48RISK
initial-access
Totolink A7000R cstecgi.cgi setUnloadUserData command injection
33RISK
initial-access
Samba: samba: remote code execution in printing subsystem via unescaped job description
68RISK
initial-access
n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling
85RISK
initial-access
RCE via OOM corruption
100RISK
initial-access
RCE via OOM corruption
100RISK
initial-access
RCE via OOM corruption
100RISK
initial-access
RCE via OOM corruption
100RISK
local
xfrm: esp: avoid in-place decrypt on shared skb frags
78RISK
initial-access
RCE via OOM corruption
100RISK
initial-access
RCE via OOM corruption
100RISK
initial-access
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISK
local
xfrm: esp: avoid in-place decrypt on shared skb frags
78RISK
initial-access
RCE via OOM corruption
100RISK
initial-access
RCE via OOM corruption
100RISK
initial-access
Authorization Bypass in Next.js Middleware
85RISK
initial-access
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
remote-with-credentials
File overwrite in file update API in Gogs
100RISK
initial-access
WordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability
85RISK
We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and exploitation-intelligence sources. A public PoC existing does not mean the flaw is exploitable in your environment.