Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

89,426cataloged exploits
41,291CVEs with public exploitation
24,696lab-tested
AllReferência 26,792Exploit-DB 24,491GitHub PoC 18,666exploitation intelligence 11,309Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
11,309 exploits
client-side
CVE-2025-6554HIGHunder attack04 Jul 2025
Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write v
76RISK
infoleak
CVE-2025-27817HIGH04 Jul 2025
Apache Kafka Client: Arbitrary file read and SSRF vulnerability
68RISK
initial-access
CVE-2025-20281CRITICALunder attack04 Jul 2025
Cisco ISE API Unauthenticated Remote Code Execution Vulnerability
100RISK
local
CVE-2025-32463CRITICALunder attack04 Jul 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISK
local
CVE-2025-32463CRITICALunder attack04 Jul 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISK
local
CVE-2025-32463CRITICALunder attack04 Jul 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISK
initial-access
CVE-2024-4040CRITICALunder attack04 Jul 2025
Unauthenticated arbitrary file read and remote code execution in CrushFTP
100RISK
initial-access
CVE-2023-46747CRITICALunder attackransomware04 Jul 2025
BIG-IP Configuration utility unauthenticated remote code execution vulnerability
100RISK
local
CVE-2025-32463CRITICALunder attack04 Jul 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISK
local
CVE-2025-32463CRITICALunder attack04 Jul 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISK
local
CVE-2025-32463CRITICALunder attack04 Jul 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISK
initial-access
CVE-2025-49132CRITICAL04 Jul 2025
Pterodactyl Panel Allows Unauthenticated Arbitrary Remote Code Execution
75RISK
local
CVE-2025-32463CRITICALunder attack03 Jul 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISK
local
CVE-2025-32463CRITICALunder attack03 Jul 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISK
initial-access
CVE-2012-1823CRITICALunder attack03 Jul 2025
sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not
100RISK
initial-access
CVE-2025-49596CRITICAL03 Jul 2025
MCP Inspector proxy server lacks authentication between the Inspector client and proxy
75RISK
local
CVE-2025-32463CRITICALunder attack03 Jul 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISK
local
CVE-2025-32463CRITICALunder attack03 Jul 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISK
local
CVE-2025-32463CRITICALunder attack03 Jul 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISK
client-side
CVE-2025-6218HIGHunder attack03 Jul 2025
RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability
93RISK
remote-with-credentials
CVE-2025-6019HIGH03 Jul 2025
Libblockdev: lpe from allow_active to root in libblockdev via udisks
41RISK
initial-access
CVE-2026-24061CRITICALunder attack03 Jul 2025
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment
100RISK
local
CVE-2025-32463CRITICALunder attack02 Jul 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISK
initial-access
CVE-2022-46169CRITICALunder attack02 Jul 2025
Unauthenticated Command Injection
100RISK
local
CVE-2025-32463CRITICALunder attack02 Jul 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISK
local
CVE-2025-32463CRITICALunder attack02 Jul 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISK
local
CVE-2025-32463CRITICALunder attack02 Jul 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISK
infoleak
CVE-2021-41773HIGHunder attackransomware02 Jul 2025
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
remote-with-credentials
CVE-2024-39930CRITICAL02 Jul 2025
The built-in SSH server of Gogs through 0.13.0 allows argument injection in internal/ssh/ssh.go, leading to remote code
48RISK
local
CVE-2025-32463CRITICALunder attack02 Jul 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISK
← previouspage 143 / 377next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and exploitation-intelligence sources. A public PoC existing does not mean the flaw is exploitable in your environment.