Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
86,186cataloged exploits
40,156CVEs with public exploitation
24,696lab-tested
9,976 exploits
VulnCheck XDB
initial-access
ingress-nginx admission controller RCE escalation
VulnCheck XDB
infoleak
WordPress WP01 plugin <= 2.6.2 - Arbitrary File Download Vulnerability
VulnCheck XDB
initial-access
ingress-nginx admission controller RCE escalation
VulnCheck XDB
initial-access
ingress-nginx admission controller RCE escalation
VulnCheck XDB
infoleak
Vite bypasses server.fs.deny when using `?raw??`
VulnCheck XDB
infoleak
Vite bypasses server.fs.deny when using `?raw??`
VulnCheck XDB
infoleak
Vite bypasses server.fs.deny when using `?raw??`
VulnCheck XDB
infoleak
Vite bypasses server.fs.deny when using `?raw??`
VulnCheck XDB
infoleak
Vite bypasses server.fs.deny when using `?raw??`
VulnCheck XDB
initial-access
Authorization Bypass in Next.js Middleware
VulnCheck XDB
initial-access
Authorization Bypass in Next.js Middleware
VulnCheck XDB
initial-access
Authorization Bypass in Next.js Middleware
VulnCheck XDB
initial-access
Authorization Bypass in Next.js Middleware
VulnCheck XDB
infoleak
Authorization Bypass in Next.js Middleware
VulnCheck XDB
initial-access
Authorization Bypass in Next.js Middleware
VulnCheck XDB
initial-access
Authorization Bypass in Next.js Middleware
VulnCheck XDB
initial-access
Authorization Bypass in Next.js Middleware
VulnCheck XDB
infoleak
Authorization Bypass in Next.js Middleware
VulnCheck XDB
initial-access
Authorization Bypass in Next.js Middleware
VulnCheck XDB
initial-access
Authorization Bypass in Next.js Middleware
VulnCheck XDB
initial-access
Authorization Bypass in Next.js Middleware
VulnCheck XDB
initial-access
Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary com
VulnCheck XDB
infoleak
Microsoft Outlook Remote Code Execution Vulnerability
VulnCheck XDB
initial-access
ingress-nginx admission controller RCE escalation
VulnCheck XDB
infoleak
Authorization Bypass in Next.js Middleware
VulnCheck XDB
initial-access
An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.htm
VulnCheck XDB
local
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
VulnCheck XDB
initial-access
Authorization Bypass in Next.js Middleware
VulnCheck XDB
initial-access
Authorization Bypass in Next.js Middleware
VulnCheck XDB
initial-access
Authorization Bypass in Next.js Middleware
We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.