Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
86,175cataloged exploits
40,155CVEs with public exploitation
24,696lab-tested
AllReferência 26,041Exploit-DB 24,488GitHub PoC 17,598VulnCheck XDB 9,976Nuclei 4,542Metasploit 3,530✓ verified onlyrecentpopularrisk
4,542 exploits
Nucleicritical
Advantech WISE-IoTSuite/SaaS - SQL Injection
Execution of arbitrary SQL commands
75RISK
open ↗Nucleihigh
Likes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL Injection
Likes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL Injection
56RISK
open ↗Nucleihigh
Fortinet FortiWeb - Authentication Bypass to Admin Privilege
A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7 and below, versions 7.2.
61RISK
open ↗Nucleimedium
ONLYOFFICE Docs (DocumentServer) - Reflected Cross-Site Scripting
Reflected Cross-Site Scripting in ONLYOFFICE Docs (DocumentServer)
40RISK
open ↗Nucleicritical
Securden Unified PAM - Authentication Bypass
Securden Unified PAM Authentication Bypass
55RISK
open ↗Nucleimedium
Parse Server - GraphQL Schema Information Disclosure
Parse Server exposes the data schema via GraphQL API
28RISK
open ↗Nucleimedium
WSO2 - Server Side Request Forgery
SSRF and Reflected XSS Vulnerability in Deprecated Try-It Feature of Multiple WSO2 Products
28RISK
open ↗Nucleimedium
Pi-hole Reflected XSS in 404-Error Page
Pi-hole Admin Interface vulnerable to cross-site scripting via malformed URL path on 404 error page
28RISK
open ↗Nucleihigh
ZTE ZXHN-F660T/F660A - Default Credentials
ZXHN-F660T and ZXHN-F660A provided by ZTE Japan K.K. use a common credential for all installations. With the knowledge o
56RISK
open ↗Nucleihigh
Docusaurus Gists Plugin < 4.0.0 - GitHub Personal Access Token Exposure
docusaurus-plugin-content-gists Exposes GitHub Personal Access Token
43RISK
open ↗Nucleicritical
Microsoft SharePoint Server - Remote Code Execution (ToolShell)
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISK
open ↗Nucleimedium
Microsoft SharePoint Server - Authentication Bypass (ToolShell)
Microsoft SharePoint Server Spoofing Vulnerability
50RISK
open ↗Nucleicritical
LaRecipe < 2.8.1 Remote Code Execution via SSTI
LaRecipe is vulnerable to Server-Side Template Injection attacks
63RISK
open ↗Nucleimedium
Directus < 11.9.0 - Version Disclosure
Directus's exact version number is exposed by the OpenAPI Spec
28RISK
open ↗Nucleicritical
Unauthenticated Arbitrary Plugin Upload in Alone Theme
Alone – Charity Multipurpose Non-profit WordPress Theme <= 7.8.3 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation
75RISK
open ↗Nucleicritical
Laravel Livewire v3 - Remote Command Execution
Livewire vulnerable to remote command execution during property update hydration
100RISK
open ↗Nucleicritical
Hoverfly <= 1.11.3 - Remote Code Execution
Hoverfly vulnerable to remote code execution at `/api/v2/hoverfly/middleware` endpoint due to insecure middleware implementation
68RISK
open ↗Nucleihigh
XWiki XML View - Sensitive Information Exposure
XWiki Platform: Password and email exposure in xml.vm fields
36RISK
open ↗Nucleicritical
Adobe Commerce - Authentication Bypass
Adobe Commerce | Improper Input Validation (CWE-20)
100RISK
open ↗Nucleimedium
Adobe Experience Manager ≤ 6.5.23.0 – SSRF
Adobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918)
28RISK
open ↗Nucleimedium
Adobe Experience Manager ≤ 6.5.23.0 - XML Injection
Adobe Experience Manager | XML Injection (aka Blind XPath Injection) (CWE-91)
28RISK
open ↗Nucleimedium
Copyparty <=1.18.6 - Cross-Site Scripting
copyparty Reflected XSS via Filter Parameter
48RISK
open ↗Nucleihigh
Apache Tika - XML External Entity Injection
Apache Tika core, Apache Tika parsers, Apache Tika PDF parser module: Update to CVE-2025-54988 to expand scope of artifacts affected
58RISK
open ↗Nucleihigh
Yonyou YonBIP - Path Traversal
In Yonyou YonBIP v3 and before, the LoginWithV8 interface in the series data application service system is vulnerable to
36RISK
open ↗Nucleicritical
ComfyUI-Manager < 3.38 - Configuration Overwrite
An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration a
56RISK
open ↗Nucleihigh
LottieFiles WordPress Plugin <= 3.0.0 - Missing Authorization
WordPress LottieFiles plugin <= 3.0.0 - Broken Access Control vulnerability
36RISK
open ↗Nucleimedium
Signal K Server <= 2.18.0 - Information Disclosure
Signal K Server Vulnerable to Unauthenticated Information Disclosure via Exposed Endpoints
28RISK
open ↗Nucleihigh
Apache Struts XWork - XML External Entity Injection
Apache Struts, Apache Struts: XXE vulnerability in outdated XWork component
48RISK
open ↗Nucleimedium
User Submitted Posts <= 20251121 - Unauthenticated Open Redirect
WordPress User Submitted Posts plugin <= 20251121 - Open Redirection vulnerability
28RISK
open ↗Nucleihigh
WordPress Broken Link Notifier < 1.3.1 - Unauthenticated SSRF
Broken Link Notifier <= 1.3.0 - Unauthenticated Server-Side Request Forgery
36RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.