Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
89,426cataloged exploits
41,291CVEs with public exploitation
24,696lab-tested
AllReferência 26,792Exploit-DB 24,491GitHub PoC 18,666exploitation intelligence 11,309Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
11,309 exploits
infoleak
Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query
100RISK
infoleak
In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file up
100RISK
initial-access
Authorization Bypass in Next.js Middleware
85RISK
initial-access
Chamilo LMS Unauthenticated Big Upload File Remote Code Execution
78RISK
infoleak
SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and
100RISK
initial-access
Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
100RISK
infoleak
Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion
85RISK
infoleak
Vite bypasses server.fs.deny when using `?raw??`
70RISK
infoleak
Path Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows
61RISK
initial-access
ingress-nginx admission controller RCE escalation
85RISK
initial-access
WordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability
85RISK
initial-access
ingress-nginx admission controller RCE escalation
85RISK
infoleak
Path Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows
61RISK
initial-access
The callme_startcall function in recordings/misc/callme_page.php in FreePBX 2.9, 2.10, and earlier allows remote attacke
60RISK
initial-access
Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
100RISK
initial-access
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs cla
100RISK
initial-access
Vite bypasses server.fs.deny when using `?raw??`
70RISK
initial-access
TP-LINK Tapo C200 remote code execution vulnerability
70RISK
initial-access
GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because rubrics_visualise_saveAjax.phps does not
50RISK
initial-access
GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because rubrics_visualise_saveAjax.phps does not
50RISK
initial-access
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs cla
100RISK
client-side
Microsoft Windows File Explorer Spoofing Vulnerability
38RISK
initial-access
Authorization Bypass in Next.js Middleware
85RISK
initial-access
User Registration & Membership < 4.1.2- Unauthenticated Privilege Escalation
68RISK
initial-access
Weak Password Recovery Mechanism for Forgotten Password in GitLab
100RISK
initial-access
Authorization Bypass in Next.js Middleware
85RISK
initial-access
Authorization Bypass in Next.js Middleware
85RISK
initial-access
SysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity Injection
100RISK
initial-access
SysAid On-Prem <= 23.3.40 lshw Proceessing XML External Entity Injection
85RISK
initial-access
Authorization Bypass in Next.js Middleware
85RISK
We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and exploitation-intelligence sources. A public PoC existing does not mean the flaw is exploitable in your environment.