Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
89,220cataloged exploits
41,197CVEs with public exploitation
24,696lab-tested
AllReferência 26,738Exploit-DB 24,490GitHub PoC 18,525exploitation intelligence 11,299Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
11,299 exploits
remote-with-credentials
File overwrite in file update API in Gogs
100RISK
remote-with-credentials
s2Member <= 260927 - Unauthenticated Remote Code Execution via 'item_name' IPN Parameter
48RISK
local
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7
63RISK
initial-access
RCE via OOM corruption
100RISK
initial-access
RCE via OOM corruption
100RISK
initial-access
Out-of-Bounds Write in Google Brotli Decoder
70RISK
client-side
Out-of-Bounds Write in Google Brotli Decoder
70RISK
initial-access
Out-of-Bounds Write in Google Brotli Decoder
70RISK
initial-access
Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5
100RISK
initial-access
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
initial-access
WordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability
85RISK
initial-access
Authentication Bypass Allows Global Configuration Restore in Barracuda Email Security Gateway
93RISK
denial-of-service
Remote Procedure Call Runtime Remote Code Execution Vulnerability
70RISK
info-leak
Ghost has a SQL Injection in its Content API
85RISK
initial-access
D-Link DIR-816 A2_v1.10CNB04.img is vulnerable to Command Injection via /goform/SystemCommand. After the user passes in
23RISK
initial-access
RCE via OOM corruption
100RISK
initial-access
A remote command execution (RCE) vulnerability in NextGen Mirth Connect v4.3.0 allows attackers to execute arbitrary com
60RISK
info-leak
The locale feature in cgi-bin/luci on TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allows remote authenticated users
23RISK
initial-access
RCE via OOM corruption
100RISK
info-leak
Path traversal in copyparty
68RISK
initial-access
Remote Code execution in SnakeYAML
78RISK
initial-access
Linksys Routers E/WAG/WAP/WES/WET/WRT-Series
85RISK
initial-access
Shenzhen Aitemi M300 MT02 Unauthenticated OS Command Injection via protocol.csp
48RISK
initial-access
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
initial-access
Authorization Bypass in Next.js Middleware
85RISK
initial-access
Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary com
85RISK
initial-access
Remote Code Execution in fastjson 1.2.68–1.2.83
48RISK
initial-access
The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClien
100RISK
initial-access
Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.
98RISK
initial-access
Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. T
100RISK
We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and exploitation-intelligence sources. A public PoC existing does not mean the flaw is exploitable in your environment.