Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
86,186cataloged exploits
40,156CVEs with public exploitation
24,696lab-tested
AllReferência 26,041Exploit-DB 24,488GitHub PoC 17,609VulnCheck XDB 9,976Nuclei 4,542Metasploit 3,530✓ verified onlyrecentpopularrisk
4,542 exploits
Nucleicritical
Ivanti Sentry - OS Command Injection
An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote
100RISK
open ↗Nucleihigh
NEX-Forms Express WP Form Builder < 9.2.3 - Unauthenticated Stored XSS
NEX-Forms < 9.2.3 - Unauthenticated Stored XSS via Form Submission
48RISK
open ↗Nucleicritical
Hippoo Mobile App for WooCommerce <= 1.9.4 - Authentication Bypass to Admin Account Takeover
Hippoo Mobile App for WooCommerce <= 1.9.4 - Unauthenticated Authentication Bypass to Administrator Account Takeover via REST API
63RISK
open ↗Nucleihigh
Drupal LocalGov Workflows < 1.6.0 - Information Disclosure
LocalGov Workflows - Moderately critical - Information disclosure - SA-CONTRIB-2026-039
43RISK
open ↗Nucleihigh
WP Booking System <= 2.1.0.3 - Unauthenticated Email Log Disclosure
WP Booking System <= 2.1.0.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'wpbs_action=email_logs' Action
36RISK
open ↗Nucleihigh
WPForms Pro <= 1.10.1.1 - Unauthenticated Arbitrary File Upload
WPForms Pro <= 1.10.1.1 - Unauthenticated Arbitrary File Write via Chunked Upload Init/Finalize Ordering
56RISK
open ↗Nucleihigh
YMC Filter WordPress - Unauthenticated Post Disclosure
YMC Smart Filter < 3.11.3 - Unauthenticated Private/Draft Post Disclosure
56RISK
open ↗Nucleimedium
Neterbit NW-431F - Unauthenticated SMS Disclosure
Neterbit NW-431F Embedded Web Server sms.json information disclosure
48RISK
open ↗Nucleicritical
PHP2Shell (CVE-2026-109618/CVE-2026-109619) - Active Crash Detection
RCE via OOM corruption
100RISK
open ↗Nucleicritical
WordPress OttoKit Plugin <= 1.1.40 - Unauthenticated Privilege Escalation via connection-denied Token
WordPress OttoKit plugin <= 1.1.40 - Privilege Escalation vulnerability
43RISK
open ↗Nucleicritical
Collabora Built-in CODE Server < 26.4.303 - OS Command Injection
Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution
98RISK
open ↗Nucleihigh
parisneo/lollms < 2.2.0 - Authenticated Stored XSS
Stored XSS in parisneo/lollms
43RISK
open ↗Nucleicritical
SMS Alert – SMS & OTP for WooCommerce - Privilege Escalation
SMS Alert <= 3.9.5 - Unauthenticated Privilege Escalation via Arbitrary Password Reset
63RISK
open ↗Nucleihigh
WordPress Advanced File Manager < 5.4.13 - Arbitrary File Read
Advanced File Manager < 5.4.13 - Authenticated Arbitrary File Read and Write via fma_load_fma_ui
56RISK
open ↗Nucleimedium
MLflow <3.17.0 - Unauthenticated SSRF via Third-Party (TruLens) Scorer
MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints
28RISK
open ↗Nucleicritical
Ruoyi-Vue-Pro - Unauthenticated Admin Takeover via Predictable SMS Code
YunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification AuthController.java improper authentication
48RISK
open ↗Nucleihigh
Paisa < 0.7.8 - Unauthenticated Path Traversal
Paisa before 0.7.8 Path Traversal via Editor and Sheet API
36RISK
open ↗Nucleimedium
Docker-Proxy hubcmdui - Missing Authentication on /api/config
Docker-Proxy through 5.1.9 Missing Authentication via hubcmdui /api/config
28RISK
open ↗Nucleihigh
MLflow < 3.10.0 - Authentication Bypass on FastAPI Routes
Authentication Bypass in mlflow/mlflow
41RISK
open ↗Nucleicritical
Ghost CMS Content API - SQL Injection
Ghost has a SQL Injection in its Content API
85RISK
open ↗Nucleicritical
Progress ShareFile Storage Zones Controller - Authentication Bypass
EAR vulnerability in Progress ShareFile Storage Zones Controller (SZC)
75RISK
open ↗Nucleicritical
MajorDoMo - Unauthenticated RCE
MajorDoMo Unauthenticated Remote Code Execution via Admin Console Eval
63RISK
open ↗Nucleimedium
MajorDoMo - Cross-Site Scripting
MajorDoMo Reflected Cross-Site Scripting in command.php
28RISK
open ↗Nucleimedium
Discourse <=2026.2.0 - Hidden Post Revision Disclosure via revert_to Authorization Bypass
Discourse has check revision visibility on posts endpoint
28RISK
open ↗Nucleihigh
MindsDB - Remote Code Execution
MindsDB has Path Traversal in /api/files Leading to Remote Code Execution
61RISK
open ↗Nucleicritical
WooCommerce Wholesale Lead Capture <= 2.0.3.1 - Unauthenticated Privilege Escalation
WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Privilege Escalation vulnerability
63RISK
open ↗Nucleicritical
FOSSBilling 0.5.4-0.7.x - Unauthenticated System API Role Authorization Bypass
FOSSBilling: Improper API Role Validation (system) Enables Unauthenticated Access to Privileged Admin Functions
43RISK
open ↗Nucleimedium
Changedetection.io RSS Single Watch - Cross-Site Scripting
changedetection.io Vulnerable to Reflected XSS in RSS Single Watch Error Response
28RISK
open ↗Nucleihigh
OpenCATS - Command Injection
OpenCATS PHP Code Injection via installer AJAX endpoint
75RISK
open ↗Nucleihigh
Gitea Container Registry - Unauthorized Private Image Access
Gitea Composer package source links use insufficient permission checks
56RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.