Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

85,883cataloged exploits
40,037CVEs with public exploitation
24,696lab-tested
AllReferência 25,956Exploit-DB 24,488GitHub PoC 17,453VulnCheck XDB 9,931Nuclei 4,527Metasploit 3,528✓ verified onlyrecentpopularrisk
4,527 exploits
Nucleicritical
SolarView 6.00 - Remote Command Execution
CVE-2022-40881CRITICAL
SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php
75RISK
open ↗
Nucleicritical
Cacti <=1.2.22 - Remote Command Injection
CVE-2022-46169CRITICALunder attack
Unauthenticated Command Injection
100RISK
open ↗
Nucleimedium
Linear eMerge E3-Series - Cross-Site Scripting
CVE-2022-46381MEDIUM
Certain Linear eMerge E3-Series devices are vulnerable to XSS via the type parameter (e.g., to the badging/badge_templat
28RISK
open ↗
Nucleihigh
Bangresto - SQL Injection
CVE-2022-46443HIGH
mesinkasir Bangresto 1.0 is vulnberable to SQL Injection via the itemqty%5B%5D parameter.
48RISK
open ↗
Nucleimedium
NexusPHP <1.7.33 - Cross-Site Scripting
CVE-2022-46888MEDIUM
Multiple reflective cross-site scripting (XSS) vulnerabilities in NexusPHP before 1.7.33 allow remote attackers to injec
28RISK
open ↗
Nucleimedium
kkFileView 4.1.0 - Cross-Site Scripting
CVE-2022-46934MEDIUM
kkFileView v4.1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the url parameter at /control
28RISK
open ↗
Nucleicritical
Masa CMS - Authentication Bypass
CVE-2022-47002—
A vulnerability in the Remember Me function of Masa CMS v7.2, 7.3, and 7.4-beta allows attackers to bypass authenticatio
18RISK
open ↗
Nucleicritical
Mura CMS <10.0.580 - Authentication Bypass
CVE-2022-47003CRITICAL
A vulnerability in the Remember Me function of Mura CMS before v10.0.580 allows attackers to bypass authentication via a
43RISK
open ↗
Nucleihigh
Smart Office Web 20.28 - Information Disclosure
CVE-2022-47075HIGH
An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to download sensitive information via the
68RISK
open ↗
Nucleihigh
Apache OFBiz < 18.12.07 - Local File Inclusion
CVE-2022-47501HIGH
Apache OFBiz: Arbitrary file reading vulnerability
41RISK
open ↗
Nucleicritical
LearnPress Plugin < 4.2.0 - Local File Inclusion
CVE-2022-47615CRITICAL
WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to Local File Inclusion
63RISK
open ↗
Nucleicritical
Thinkphp Lang - Local File Inclusion
CVE-2022-47945CRITICAL
ThinkPHP Framework before 6.0.14 allows local file inclusion via the lang parameter when the language pack feature is en
55RISK
open ↗
Nucleicritical
ManageEngine - Remote Command Execution
CVE-2022-47966CRITICALunder attackransomware
Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due
100RISK
open ↗
Nucleicritical
IBM Aspera Faspex <=4.4.2 PL1 - Remote Code Execution
CVE-2022-47986CRITICALunder attackransomware
IBM Aspera Faspex code execution
100RISK
open ↗
Nucleimedium
OpenCATS 0.9.7 - Cross-Site Scripting
CVE-2022-48012MEDIUM
Opencats v0.9.7 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /openca
28RISK
open ↗
Nucleihigh
Wavlink WL-WN533A8 M33A8.V5030.190716 - Information Disclosure
CVE-2022-48164HIGH
An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN533A8 M33A8.V5030.190716 allows unauthen
36RISK
open ↗
Nucleihigh
Wavlink - Improper Access Control
CVE-2022-48165—
An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN530H4 M30H4.V5030.210121 allows unauthen
18RISK
open ↗
Nucleihigh
Wavlink WL-WN530HG4 M30HG4.V5030.201217 - Information Disclosure
CVE-2022-48166HIGH
An access control issue in Wavlink WL-WN530HG4 M30HG4.V5030.201217 allows unauthenticated attackers to download configur
36RISK
open ↗
Nucleimedium
Yahoo User Interface library (YUI2) TreeView v2.8.2 - Cross-Site Scripting
CVE-2022-48197—
Reflected cross-site scripting (XSS) exists in Sandbox examples in the YUI2 repository. The download distributions, Tree
38RISK
open ↗
Nucleicritical
Sunflower Simple and Personal 1.0.1.43315 - Remote Code Execution
CVE-2022-48323CRITICAL
Sunlogin Sunflower Simplified (aka Sunflower Simple and Personal) 1.0.1.43315 is vulnerable to a path traversal issue. A
75RISK
open ↗
Nucleimedium
WordPress BackupBuddy <8.8.3 - Cross Site Scripting
CVE-2022-4897MEDIUM
BackupBuddy < 8.8.3 - Multiple Reflected Cross-Site Scripting
28RISK
open ↗
Nucleihigh
WCFM Membership <= 2.10.0 - Broken Access Control
CVE-2022-4940HIGH
WCFM Membership <= 2.10.0 - Missing Authorization
36RISK
open ↗
Nucleimedium
Sassy Social Share <= 3.3.3 - Cross-Site Scripting
CVE-2022-4971MEDIUM
Sassy Social Share <= 3.3.3 - Reflected Cross-Site Scripting
33RISK
open ↗
Nucleicritical
WordPress 10Web Map Builder < 1.0.73 - Unauthenticated SQL Injection
CVE-2023-0037CRITICAL
10WebMapBuilder < 1.0.73 - Unauthenticated SQLi
63RISK
open ↗
Nucleimedium
Simple URLs < 115 - Cross Site Scripting
CVE-2023-0099—
Simple URLs < 115 - Multiple Reflected XSS
18RISK
open ↗
Nucleihigh
SonicWall SMA1000 LFI
CVE-2023-0126HIGH
Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated atta
58RISK
open ↗
Nucleihigh
Extensive VC Addons for WPBakery page builder < 1.9.1 - Unauthenticated RCE
CVE-2023-0159—
Extensive VC Addons for WPBakery page builder < 1.9.1 - Unauthenticated RCE
50RISK
open ↗
Nucleimedium
WordPress Tutor LMS <2.0.10 - Cross Site Scripting
CVE-2023-0236MEDIUM
Tutor LMS < 2.0.10 - Reflected Cross-Site Scripting
28RISK
open ↗
Nucleihigh
WordPress WP TripAdvisor Review Slider <10.8 - Authenticated SQL Injection
CVE-2023-0261HIGH
WP TripAdvisor Review Slider < 10.8 - Subscriber+ SQLi
36RISK
open ↗
Nucleicritical
PyLoad 0.5.0 - Pre-auth Remote Code Execution (RCE)
CVE-2023-0297CRITICAL
Code Injection in pyload/pyload
85RISK
open ↗
← previouspage 130 / 151next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.