Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
89,426cataloged exploits
41,291CVEs with public exploitation
24,696lab-tested
AllReferência 26,792Exploit-DB 24,491GitHub PoC 18,666exploitation intelligence 11,309Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
11,309 exploits
initial-access
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISK
infoleak
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISK
initial-access
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISK
infoleak
An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00
35RISK
initial-access
Argument Injection in PHP-CGI
100RISK
initial-access
Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults
60RISK
initial-access
20RISK
initial-access
20RISK
infoleak
An unauthenticated user can execute SQL statements that allow arbitrary read access to the underlying database, which ca
43RISK
info-leak
An unauthenticated user can execute SQL statements that allow arbitrary read access to the underlying database, which ca
43RISK
initial-access
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISK
local
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISK
initial-access
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISK
infoleak
Fusion Builder < 3.6.2 - Unauthenticated SSRF
60RISK
initial-access
35RISK
initial-access
Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute
60RISK
remote-with-credentials
The built-in SSH server of Gogs through 0.13.0 allows argument injection in internal/ssh/ssh.go, leading to remote code
48RISK
initial-access
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISK
initial-access
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISK
initial-access
Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute
60RISK
initial-access
Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation
60RISK
local
Openssh: regresshion - race condition in ssh allows rce/dos
63RISK
remote-with-credentials
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
60RISK
initial-access
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISK
initial-access
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISK
initial-access
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISK
initial-access
Weak Password Recovery Mechanism for Forgotten Password in GitLab
100RISK
client-side
Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside
83RISK
remote-with-credentials
Microsoft SharePoint Server Spoofing Vulnerability
100RISK
client-side
Git allows arbitrary code execution through broken config quoting
71RISK
We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and exploitation-intelligence sources. A public PoC existing does not mean the flaw is exploitable in your environment.