Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
86,186cataloged exploits
40,156CVEs with public exploitation
24,696lab-tested
AllReferência 26,041Exploit-DB 24,488GitHub PoC 17,609VulnCheck XDB 9,976Nuclei 4,542Metasploit 3,530✓ verified onlyrecentpopularrisk
4,542 exploits
Nucleicritical
Check Point Security Management Server - SmartConsole Authentication Bypass
Authentication Bypass in the SmartConsole Login Process Using an Application Token
93RISK
open ↗Nucleicritical
BeyondTrust Remote Support - Unauthenticated WebSocket RCE
Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)
100RISK
open ↗Nucleicritical
Strapi <=5.36.x - Admin Credential Enumeration
Strapi may leak sensitive data via relational filtering due to lack of query sanitization
63RISK
open ↗Nucleicritical
Apache Camel camel-coap - Remote Code Execution
Apache Camel: CoAP URI Query Parameter to Exchange Header Injection in camel-coap Allows Single-Packet Pre-Auth Remote Code Execution
63RISK
open ↗Nucleihigh
Vite Dev Server - Arbitrary File Read
Vite Affected by Arbitrary File Read via Vite Dev Server WebSocket
36RISK
open ↗Nucleicritical
Marimo <= 0.20.4 - Pre-Auth Terminal WebSocket RCE
marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass
100RISK
open ↗Nucleihigh
Next.js WebSocket Upgrade Handler - SSRF
Next.js: Server-side request forgery in applications using WebSocket upgrades
68RISK
open ↗Nucleicritical
Samba Printing Subsystem - Remote Code Execution
Samba: samba: remote code execution in printing subsystem via unescaped job description
68RISK
open ↗Nucleicritical
Joomla SP Page Builder <= 6.6.1 - Unauthenticated Arbitrary File Upload RCE
Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2
100RISK
open ↗Nucleicritical
Joomla SP LMS <= 4.1.3 - Remote Code Execution
Joomla Extension - joomshaper.com - PHP Object injection in SP LMS extension for Joomla < 4.1.4
63RISK
open ↗Nucleicritical
Microsoft SharePoint Server - JWT Authentication Bypass
Microsoft SharePoint Server Security Feature Bypass Vulnerability
100RISK
open ↗Nucleicritical
SonicWall SMA1000 WorkPlace - Unauthenticated SSRF to CouchDB
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended altern
93RISK
open ↗← previouspage 152 / 152
We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.