Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,186cataloged exploits
40,156CVEs with public exploitation
24,696lab-tested
AllReferência 26,041Exploit-DB 24,488GitHub PoC 17,609VulnCheck XDB 9,976Nuclei 4,542Metasploit 3,530✓ verified onlyrecentpopularrisk
4,542 exploits
Nucleicritical
Microsoft SharePoint Server - WS-Federation BinaryFormatter Deserialization RCE
CVE-2026-58644CRITICALunder attack
Microsoft SharePoint Remote Code Execution Vulnerability
98RISK
open ↗
Nucleihigh
ESPHome Device Builder <1.0.10 - Unauthenticated Dashboard Access
CVE-2026-59177HIGH
ESPHome Device Builder allows unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces
33RISK
open ↗
Nucleicritical
cve-search 4.0-6.0.0 - Unauthenticated NoSQL Injection
CVE-2026-59509CRITICAL
Unauthenticated arbitrary MongoDB collection read in cve-search
63RISK
open ↗
Nucleicritical
LocalAI < 4.6.0 - Server-Side Request Forgery
CVE-2026-59707CRITICAL
LocalAI - Server-Side Request Forgery via POST /models/apply
43RISK
open ↗
Nucleicritical
ruflo MCP Bridge - Unauthenticated RCE via terminal_execute
CVE-2026-59726CRITICAL
Ruflo: Unauthenticated RCE in MCP bridge default docker-compose deployment
63RISK
open ↗
Nucleicritical
Gitea 1.22.1-1.27.0 - Unauthenticated Arbitrary File Read
CVE-2026-59774CRITICAL
Gitea Org-mode file disclosure and code execution
68RISK
open ↗
Nucleicritical
9Router - Unauthenticated LLM Provider API Exposure
CVE-2026-59801CRITICAL
9Router 0.4.41 - Unauthenticated API Exposure via /api/providers
43RISK
open ↗
Nucleicritical
Gitea <= 1.27.0 - Pre-Auth Remote Code Execution
CVE-2026-60004CRITICALunder attack
Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.
98RISK
open ↗
Nucleihigh
Monsta FTP <= 2.14.4 - Unauthenticated SSRF via IPv6 Blocklist Bypass
CVE-2026-60105HIGH
Monsta FTP < 2.14.5 SSRF via IPv4-Mapped IPv6 Address Bypass
56RISK
open ↗
Nucleihigh
AstrBot <= 4.22.1 - Command Injection
CVE-2026-6118MEDIUM
AstrBotDevs AstrBot MCP Endpoint tools.py add_mcp_server command injection
48RISK
open ↗
Nucleicritical
vBulletin 6.x - Remote Code Execution
CVE-2026-61511CRITICAL
vBulletin < 6.2.2 Eval Injection RCE via vb5/template/runtime.php
63RISK
open ↗
Nucleicritical
GitLab MCP Server < 2.1.27 - Unauthenticated SSE Transport Access
CVE-2026-61560CRITICAL
@zereight/mcp-gitlab's unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover
43RISK
open ↗
Nucleihigh
LightRAG <= 1.5.3 - Credentialed CORS Wildcard
CVE-2026-61736CRITICAL
LightRAG: CORS Wildcard + Credentials Enables Any-Origin Credentialed Requests
43RISK
open ↗
Nucleihigh
LightRAG <= 1.5.4 - Missing Authentication
CVE-2026-61808CRITICAL
LightRAG: Missing Authentication for Critical API Functions in Default Configuration
43RISK
open ↗
Nucleimedium
User Registration & Membership WordPress plugin - Open Redirect
CVE-2026-6203MEDIUM
User Registration & Membership <= 5.1.4 - Unauthenticated Open Redirect via 'redirect_to_on_logout' Parameter
28RISK
open ↗
Nucleimedium
PasswordPusher v1.45.11-v2.9.5 - Unauthenticated Anonymous Push Deletion via Ownership Bypass
CVE-2026-62382MEDIUM
PasswordPusher before v2.9.6 Authentication Bypass via Null Comparison
48RISK
open ↗
Nucleicritical
Avada Builder (fusion-builder) <= 3.15.2 - Unauthenticated RCE via PHP Function Injection
CVE-2026-6279CRITICAL
Avada (Fusion) Builder <= 3.15.2 - Unauthenticated Remote Code Execution via PHP Function Injection via 'render_logics' Shortcode Attribute via Widget AJAX Handler
63RISK
open ↗
Nucleicritical
WordPress Core 6.9-7.0.1 - Pre-Auth Batch-Route Confusion
CVE-2026-63030CRITICALunder attack
WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
98RISK
open ↗
Nucleicritical
JetBrains TeamCity < 2026.1.3, 2025.11.7 - Remote Code Execution
CVE-2026-63077CRITICALunder attackransomware
In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent pollin
100RISK
open ↗
Nucleihigh
FileGator < 7.14.2 - Privilege Escalation
CVE-2026-63358HIGH
FileGator privilege escalation
36RISK
open ↗
Nucleihigh
Next4Biz CSM - Arbitrary File Read via DownloadFileHandler
CVE-2026-6377HIGH
Path Traversal in Next4Biz's CSM (Customer Service Management)
36RISK
open ↗
Nucleicritical
FlipperCode Custom CSS, JS & PHP <= 2.0.7 - Remote Code Execution
CVE-2026-6433HIGH
Custom CSS JS PHP <= 2.0.7 - Unauthenticated SQL Injection to RCE
56RISK
open ↗
Nucleihigh
WordPress Core < 7.0.3 - Preauth Reflected XSS (XSS2Shell)
CVE-2026-64638HIGH
WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially crafted malici
56RISK
open ↗
Nucleicritical
MLflow Webhook SSRF - Unauthenticated Full-Read via Redirect Bypass
CVE-2026-64849CRITICALunder attack
MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)
98RISK
open ↗
Nucleihigh
WordPress Ajax Load More < 7.8.4 - Reflected Cross-Site Scripting
CVE-2026-6495HIGH
Ajax Load More < 7.8.4 - Reflected XSS
56RISK
open ↗
Nucleihigh
FormCraft3 <= 3.9.15 - Server-Side Request Forgery
CVE-2026-65442HIGH
WordPress FormCraft plugin <= 3.9.15 - Server Side Request Forgery (SSRF) vulnerability
36RISK
open ↗
Nucleihigh
Microweber CMS <= 2.0.20 - Unauthenticated Arbitrary File Read
CVE-2026-65694HIGH
Microweber CMS 2.0.20 Path Traversal via ServeStaticFileController
56RISK
open ↗
Nucleicritical
Joomla Easy Store - SQL Injection
CVE-2026-65761CRITICAL
Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1
63RISK
open ↗
Nucleihigh
Meshery <1.0.57 - Arbitrary File Read
CVE-2026-65919HIGH
Meshery < 1.0.57 Unauthenticated Arbitrary File Read via fileView and fileDownload
36RISK
open ↗
Nucleihigh
AI Copilot Content Generator <=1.4.6 - Unauthenticated Task Data Exposure
CVE-2026-6639HIGH
AI Chatbot & Workflow Automation by AIWU <= 1.4.6 - Missing Authorization to Unauthenticated Sensitive Information Exposure
36RISK
open ↗
← previouspage 150 / 152next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.