Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
75,445cataloged exploits
34,432CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,497GitHub PoC 13,627VulnCheck XDB 8,198Nuclei 4,217Metasploit 3,463✓ verified onlyrecentpopularrisk
4,217 exploits
Nucleicritical
WordPress WP Child Theme Generator < 1.1.3 - Arbitrary File Upload
WordPress WP Child Theme Generator plugin <= 1.0.9 - Arbitrary File Upload vulnerability
43RISK
open ↗Nucleicritical
Anyscale Ray - Remote Code Execution
Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the ve
85RISK
open ↗Nucleicritical
Anyscale Ray 2.6.3 and 2.8.0 - Server-Side Request Forgery
Anyscale Ray 2.6.3 and 2.8.0 allows /log_proxy SSRF. NOTE: the vendor's position is that this report is irrelevant becau
55RISK
open ↗Nucleicritical
Nagios XI < 5.11.3 - SQL Injection
Nagios XI before version 5.11.3 was discovered to contain a SQL injection vulnerability via the bulk modification tool.
50RISK
open ↗Nucleihigh
XWiki < 4.10.15 - Information Disclosure
XWiki exposed whole content of all documents of all wikis to anybody with view right on Solr suggest service
58RISK
open ↗Nucleimedium
WWBN AVideo 11.6 - Cross-Site Scripting
A cross-site scripting (xss) vulnerability exists in the functiongetOpenGraph videoName functionality of WWBN AVideo 11.
43RISK
open ↗Nucleicritical
WordPress Elementor 3.18.1 - File Upload/Remote Code Execution
WordPress Elementor plugin 3.3.0-3.18.1 - Arbitrary File Upload vulnerability
63RISK
open ↗Nucleicritical
Apache OFBiz < 18.12.10 - Arbitrary Code Execution
Pre-auth RCE in Apache Ofbiz 18.12.09 due to XML-RPC still present
60RISK
open ↗Nucleihigh
OwnCloud - Phpinfo Configuration
An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies
100RISK
open ↗Nucleihigh
Peplink Balance Two before 8.4.0 - Unauthenticated Config Upload
An issue was discovered in Peplink Balance Two before 8.4.0. A missing authorization check in captive portals allows att
18RISK
open ↗Nucleimedium
Vite dev server - Cross-Site Scripting
Cross-site Scripting in `server.transformIndexHtml` via URL payload in vite
28RISK
open ↗Nucleimedium
Python Flask-Security-Too <=5.3.2 - Open Redirect
An open redirect vulnerability in the python package Flask-Security-Too <=5.3.2 allows attackers to redirect unsuspectin
18RISK
open ↗Nucleimedium
KodeExplorer 4.51 - Reflective Cross Site Scripting (XSS)
Reflective Cross Site Scripting (XSS) vulnerability in KodExplorer version 4.51, allows attackers to obtain sensitive in
28RISK
open ↗Nucleimedium
DedeCMS v5.7.111 - Cross-Site Scripting
DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component selec
18RISK
open ↗Nucleihigh
Citrix Bleed - Leaking Session Tokens
Unauthenticated sensitive information disclosure
100RISK
open ↗Nucleimedium
Academy LMS 6.2 - Cross-Site Scripting
Academy LMS GET Parameter filter cross site scripting
23RISK
open ↗Nucleicritical
Academy LMS 6.2 - SQL Injection
Academy LMS GET Parameter filter sql injection
28RISK
open ↗Nucleicritical
ChatGPT-Next-Web - SSRF/XSS
NextChat vulnerable to Server-Side Request Forgery and Cross-site Scripting
85RISK
open ↗Nucleihigh
Active Directory Integration WP Plugin < 4.1.10 - Log Disclosure
Active Directory Integration < 4.1.10 - Unauthenticated Log Disclosure
41RISK
open ↗Nucleihigh
reNgine 2.2.0 - Command Injection
reNgine before 2.1.2 allows OS Command Injection if an adversary has a valid session ID. The attack places shell metacha
41RISK
open ↗Nucleimedium
Apache Solr - Host Environment Variables Leak via Metrics API
Apache Solr: Host environment variables are published via the Metrics API
40RISK
open ↗Nucleicritical
Mingsoft MCMS 5.2.9 - SQL Injection
Mingsoft MCMS v5.2.9 was discovered to contain a SQL injection vulnerability via the categoryType parameter at /content/
43RISK
open ↗Nucleihigh
XWiki < 4.10.15 - Sensitive Information Disclosure
XWiki Platform Solr search discloses password hashes of all users
58RISK
open ↗Nucleimedium
XWiki < 4.10.15 - Email Disclosure
XWiki Platform Solr search discloses email addresses of users
40RISK
open ↗Nucleicritical
D-Link D-View 8 v2.0.1.28 - Authentication Bypass
Authentication Bypass in D-Link D-View 8
55RISK
open ↗Nucleicritical
JS Help Desk <= 2.8.1 - SQL Injection
WordPress JS Help Desk – Best Help Desk & Support Plugin <= 2.8.1 is vulnerable to SQL Injection
63RISK
open ↗Nucleimedium
Defender Security < 4.1.0 - Protection Bypass (Hidden Login Page)
Defender Security < 4.1.0 - Protection Bypass (Hidden Login Page)
28RISK
open ↗Nucleicritical
MajorDoMo thumb.php - OS Command Injection
MajorDoMo (aka Major Domestic Module) before 0662e5e allows command execution via thumb.php shell metacharacters. NOTE:
50RISK
open ↗Nucleimedium
WordPress Toolbar <= 2.2.6 - Open Redirect
WordPress Toolbar <= 2.2.6 - Open Redirect
33RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.