Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
89,426cataloged exploits
41,291CVEs with public exploitation
24,696lab-tested
AllReferência 26,792Exploit-DB 24,491GitHub PoC 18,666exploitation intelligence 11,309Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
11,309 exploits
initial-access
SysAid On-Prem <= 23.3.40 lshw Proceessing XML External Entity Injection
85RISK
initial-access
Authorization Bypass in Next.js Middleware
85RISK
initial-access
SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity Injection
100RISK
infoleak
Vite bypasses server.fs.deny when using `?raw??`
70RISK
infoleak
Vite bypasses server.fs.deny when using `?raw??`
70RISK
initial-access
SysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity Injection
100RISK
client-side
Microsoft Windows File Explorer Spoofing Vulnerability
38RISK
client-side
Microsoft Windows File Explorer Spoofing Vulnerability
38RISK
infoleak
Microsoft Windows File Explorer Spoofing Vulnerability
38RISK
initial-access
ingress-nginx admission controller RCE escalation
85RISK
infoleak
Vite bypasses server.fs.deny when using `?raw??`
70RISK
infoleak
Vite bypasses server.fs.deny when using `?raw??`
70RISK
client-side
Horde IMP through 6.2.27, as used with Horde Application Framework through 5.2.23, allows XSS that leads to account take
53RISK
infoleak
Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion
85RISK
initial-access
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha
100RISK
infoleak
Vite bypasses server.fs.deny when using `?raw??`
70RISK
initial-access
The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_optio
100RISK
infoleak
Nexus Repository 3 - Path Traversal
61RISK
client-side
NTLM Hash Disclosure Spoofing Vulnerability
75RISK
initial-access
Authorization Bypass in Next.js Middleware
85RISK
initial-access
Authorization Bypass in Next.js Middleware
85RISK
infoleak
Authorization Bypass in Next.js Middleware
85RISK
initial-access
Authorization Bypass in Next.js Middleware
85RISK
initial-access
Authorization Bypass in Next.js Middleware
85RISK
info-leak
Vite bypasses server.fs.deny when using `?raw??`
70RISK
initial-access
Authorization Bypass in Next.js Middleware
85RISK
initial-access
ingress-nginx admission controller RCE escalation
85RISK
initial-access
ingress-nginx admission controller RCE escalation
85RISK
initial-access
ingress-nginx admission controller RCE escalation
85RISK
initial-access
Authorization Bypass in Next.js Middleware
85RISK
We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and exploitation-intelligence sources. A public PoC existing does not mean the flaw is exploitable in your environment.