Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
86,179cataloged exploits
40,156CVEs with public exploitation
24,696lab-tested
AllReferência 26,041Exploit-DB 24,488GitHub PoC 17,602VulnCheck XDB 9,976Nuclei 4,542Metasploit 3,530✓ verified onlyrecentpopularrisk
4,542 exploits
Nucleicritical
MLflow Job API - Authentication Bypass
Missing Authentication for Critical Function in mlflow/mlflow
36RISK
open ↗Nucleicritical
LolLMS <= 2.2.0 - Unauthenticated File Upload
Unauthenticated File Upload in parisneo/lollms
36RISK
open ↗Nucleihigh
LolLMS < 2.2.0 - Server-Side Request Forgery
Server-Side Request Forgery (SSRF) in parisneo/lollms
36RISK
open ↗Nucleimedium
Shield Security <= 21.0.8 - Unauthenticated Reflected XSS
Shield Security <= 21.0.8 - Unauthenticated Reflected Cross-Site Scripting via 'message' Parameter
28RISK
open ↗Nucleihigh
SiYuan 2.9.0-3.8.6 - Unauthenticated XSS via check-auth "to" Parameter
SiYuan 2.9.0 before 3.8.7 XSS via check-auth to Parameter
36RISK
open ↗Nucleihigh
YesWiki < 4.7.0 - Unauthenticated Server-Side Request Forgery
YesWiki before 4.7.0 Unauthenticated SSRF via [[|URL]] Raw-Inclusion Syntax
28RISK
open ↗Nucleihigh
danmu_api - Unauthenticated Access to Admin API via Default Token
danmu_api before 1.21.7 Authentication Bypass via Default Token in Env Endpoints
43RISK
open ↗Nucleihigh
WPAdverts <= 2.3.2 - Information Disclosure
WPAdverts <= 2.3.2 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via classifieds-types REST Endpoint
36RISK
open ↗Nucleihigh
Django RasterField - SQL Injection
Potential SQL injection via raster lookups on PostGIS
33RISK
open ↗Nucleicritical
Visual Composer <= 45.16.0 - Unauthenticated LFI
Visual Composer Website Builder <= 45.16.0 - Unauthenticated Local File Inclusion via 'vcv-template' Parameter
63RISK
open ↗Nucleicritical
WordPress MemberGlut < 1.1.5 - Unauthenticated Privilege Escalation
MemberGlut < 1.1.5 - Unauthenticated Privilege Escalation to Administrator
63RISK
open ↗Nucleihigh
Eclipse Theia - Unauthenticated Path Traversal
In Eclipse Theia versions 1.66.0 and up until including 1.73.1, the `@theia/plugin-ext` backend exposes the `/hostedPlug
36RISK
open ↗Nucleihigh
WP Fast Total Search <= 1.80.280 - Unauthenticated Time-Based Blind SQL Injection
WP Fast Total Search <= 1.80.280 - Unauthenticated SQL Injection
36RISK
open ↗Nucleimedium
URL Shortify <= 1.12.1 - Open Redirect
URL Shortify <= 1.12.1 - Unauthenticated Open Redirect via 'redirect_to' Parameter
48RISK
open ↗Nucleihigh
Premium Packages – Sell Digital Products Securely - SQL Injection
Premium Packages <= 6.2.0 - Unauthenticated SQL Injection
36RISK
open ↗Nucleicritical
Ivanti EPMM <=12.7.0.0 - Unauthenticated Code Injection
A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.
100RISK
open ↗Nucleimedium
All-in-One WP Migration and Backup < 7.106 - Arbitrary Log File Write
All-in-One WP Migration and Backup < 7.106 - Unauthenticated Arbitrary-Location Log File Write via Path Traversal
48RISK
open ↗Nucleimedium
Frontend Post Submission Manager Lite <= 1.2.7 - Open Redirect
Frontend Post Submission Manager Lite <= 1.2.7 - Unauthenticated Open Redirect via 'requested_page' Parameter
28RISK
open ↗Nucleicritical
Podlove Podcast Publisher <= 4.5.1 - Arbitrary File Upload
Podlove Podcast Publisher <= 4.5.1 - Unauthenticated Arbitrary File Upload via podlove_image_cache_url Parameter
63RISK
open ↗Nucleicritical
WordPress midi-Synth <= 1.1.0 - Unauthenticated Arbitrary File Upload
midi-Synth <= 1.1.0 - Unauthenticated Arbitrary File Upload via 'export' AJAX Action
43RISK
open ↗Nucleimedium
WordPress 3D FlipBook <= 1.16.17 - Information Disclosure
3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery <= 1.16.17 - Missing Authorization to Unauthenticated Private/Draft Flipbook Data Exposure
28RISK
open ↗Nucleihigh
WordPress Kirki < 6.0.12 - Server-Side Request Forgery
Kirki < 6.0.12 - Unauthenticated Server-Side Request Forgery via kirki_get_apis
63RISK
open ↗Nucleimedium
Essential Blocks < 6.4.0 - Information Disclosure
Essential Blocks < 6.4.0 - Unauthenticated WooCommerce Sales Data Disclosure via REST products Endpoint
56RISK
open ↗Nucleicritical
Ivanti EPMM < 12.8.0.0 - Remote Code Execution
A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.
100RISK
open ↗Nucleicritical
WPvivid Backup & Migration <= 0.9.123 - Arbitrary File Upload
Migration, Backup, Staging <= 0.9.123 - Unauthenticated Arbitrary File Upload
75RISK
open ↗Nucleihigh
Video Conferencing with Zoom API < 4.6.6 - Unauthenticated SDK Signature Generation
Video Conferencing with Zoom API < 4.6.6 - Unauthenticated SDK Signature Generation
36RISK
open ↗Nucleihigh
WPBot <= 8.4.9 - Cross-Site Scripting
WPBot <= 8.4.9 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter
36RISK
open ↗Nucleicritical
WordPress Slider Future <= 1.0.5 - Unauthenticated Arbitrary File Upload
Slider Future <= 1.0.5 - Unauthenticated Arbitrary File Upload
63RISK
open ↗Nucleicritical
Realtyna Organic IDX/WPL <= 5.2.0 - Unauthenticated Arbitrary File Upload
Realtyna Organic IDX plugin + WPL Real Estate <= 5.2.0 - Unauthenticated Arbitrary File Upload via 'files[file]' Parameter via Public I/O 'set_property' Command
63RISK
open ↗Nucleihigh
WordPress Database for Contact Form 7, WPforms, Elementor forms < 1.5.3 - Cross-Site Scripting
Database for Contact Form 7, WPforms, Elementor forms < 1.5.3 - Reflected XSS via form_id
56RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.