Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
86,001cataloged exploits
40,084CVEs with public exploitation
24,696lab-tested
AllReferência 25,989Exploit-DB 24,488GitHub PoC 17,519VulnCheck XDB 9,945Nuclei 4,531Metasploit 3,529✓ verified onlyrecentpopularrisk
4,531 exploits
Nucleicritical
WordPress File Upload <= 4.24.11 - Arbitrary File Read
WordPress File Upload <= 4.24.11 - Unauthenticated Path Traversal to Arbitrary File Read and Deletion in wfu_file_downloader.php
85RISK
open ↗Nucleihigh
WP Popup Builder Popup Forms and Marketing Lead Generation <= 1.3.5 - Arbitrary Shortcode Execution
WP Popup Builder – Popup Forms and Marketing Lead Generation <= 1.3.5 - Unauthenticated Arbitrary Shortcode Execution via wp_ajax_nopriv_shortcode_Api_Add
48RISK
open ↗Nucleimedium
Rank Math SEO < 1.0.229 - Unauthenticated User and Term Metadata Insert/Update/Deletion
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.228 - Missing Authorization to Unauthenticated User and Term Metadata Insert, Update, and Delete
28RISK
open ↗Nucleicritical
TitanNit Web Control 2.01/Atemio 7600 - Remote Code Execution
OS Command Injection in Atelmo Atemio AM 520 HD Full HD Satellite Receiver
63RISK
open ↗Nucleihigh
Automation By Autonami < 3.3.0 - SQL Injection
Automation By Autonami < 3.3.0 - Unauthenticated SQLi
36RISK
open ↗Nucleicritical
WHMpress <= 6.3-revision-0 - Unauthenticated Local File Inclusion to Arbitrary Options Update
WHMpress <= 6.3-revision-0 - Unauthenticated Local File Inclusion to Arbitrary Options Update
43RISK
open ↗Nucleicritical
GutenKit <= 2.1.0 - Arbitrary File Upload
GutenKit <= 2.1.0 - Unauthenticated Arbitrary File Upload
68RISK
open ↗Nucleicritical
Grafana Post-Auth DuckDB - SQL Injection To File Read
Grafana SQL Expressions allow for remote code execution
85RISK
open ↗Nucleihigh
Polyaxon - Unauthenticated Directory Traversal
Directory Traversal in polyaxon/polyaxon
36RISK
open ↗Nucleicritical
PaloAlto Networks Expedition - Remote Code Execution
Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure
100RISK
open ↗Nucleihigh
Palo Alto Expedition - SQL Injection
Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure
100RISK
open ↗Nucleihigh
PAN-OS Management Web Interface - Command Injection
PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface
100RISK
open ↗Nucleihigh
Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Remote Code Execution
Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution
61RISK
open ↗Nucleicritical
Four-Faith F3x36 - Authentication Bypass
Four-Faith F3x36 Hidden Debug Credentials
43RISK
open ↗Nucleicritical
Hunk Companion <= 1.8.4 - Arbitrary Plugin Installation
Hunk Companion <= 1.8.4 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation
63RISK
open ↗Nucleimedium
EKC Tournament Manager WordPress plugin - Path Traversal
EKC Tournament Manager < 2.2.2 - Local File Download Vulnerability
28RISK
open ↗Nucleicritical
Ingress-Nginx Controller - Remote Code Execution
ingress-nginx admission controller RCE escalation
85RISK
open ↗Nucleicritical
WordPress JobWP Plugin <= 2.3.9 - SQL Injection
JobWP – Job Board, Job Listing, Career Page and Recruitment Plugin <= 2.3.9 - Unauthenticated SQL Injection
36RISK
open ↗Nucleihigh
Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection
Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection via 's' Parameter
68RISK
open ↗Nucleicritical
Cisco IOS XE WLC - Arbitrary File Upload
A vulnerability in the Out-of-Band Access Point (AP) Image Download, the Clean Air Spectral Recording, and the client de
68RISK
open ↗Nucleicritical
Cisco ISE - Remote Code Execution
Cisco ISE API Unauthenticated Remote Code Execution Vulnerability
100RISK
open ↗Nucleicritical
Cisco ISE < 3.4P2 - Unauthenticated Arbitrary File Upload
Cisco ISE API Unauthenticated Remote Code Execution Vulnerability
75RISK
open ↗Nucleimedium
Cisco Secure Firewall ASA & FTD - Authentication Bypass
Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Softwar
100RISK
open ↗Nucleihigh
Uncanny Automator <= 6.3.0.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Uncanny Automator <= 6.3.0.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
36RISK
open ↗Nucleimedium
JoomlaUX JUX Real Estate 3.4.0 - Reflected XSS
JoomlaUX JUX Real Estate realties cross site scripting
28RISK
open ↗Nucleimedium
Mage AI - Insecure Default Authentication Setup
Mage AI insecure default initialization of resource
28RISK
open ↗Nucleihigh
WordPress WPCOM Member <= 1.7.6 - SQL Injection
WPCOM Member <= 1.7.6 - Unauthenticated Time-Based SQL Injection
36RISK
open ↗Nucleicritical
Landray EIS SQL注入漏洞
Landray EIS 2001 through 2006 allows Message/fi_message_receiver.aspx?replyid= SQL injection.
28RISK
open ↗Nucleihigh
Sante PACS Server.exe - Path Traversal Information Disclosure
Santesoft Sante PACS Server Path Traversal Information Disclosure
48RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.