Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
89,220cataloged exploits
41,197CVEs with public exploitation
24,696lab-tested
AllReferência 26,738Exploit-DB 24,490GitHub PoC 18,525exploitation intelligence 11,299Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
11,299 exploits
client-side
URL Shortify <= 1.12.1 - Unauthenticated Open Redirect via 'redirect_to' Parameter
48RISK
initial-access
Remote Code Execution in fastjson 1.2.68–1.2.83
48RISK
initial-access
Laravel TokenGuard authentication bypass through non-string API credentials
63RISK
info-leak
Arbitrary Local File Read via Component Method Invocation in gradio-app/gradio
56RISK
initial-access
Windows Netlogon Remote Code Execution Vulnerability
70RISK
initial-access
Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
100RISK
initial-access
Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52
48RISK
initial-access
RCE via OOM corruption
100RISK
denial-of-service
RCE via OOM corruption
100RISK
local
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RISK
denial-of-service
HTTP Protocol Stack Remote Code Execution Vulnerability
100RISK
initial-access
RCE via OOM corruption
100RISK
initial-access
RCE via OOM corruption
100RISK
initial-access
RCE via OOM corruption
100RISK
initial-access
RCE via stale global state
100RISK
remote-with-credentials
TOTOLINK X2000R formWsc command injection
38RISK
remote-with-credentials
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable param
56RISK
local
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RISK
initial-access
Laravel TokenGuard authentication bypass through non-string API credentials
63RISK
initial-access
RCE via stale global state
100RISK
initial-access
anji-plus AJ-Report Authentication Bypass
75RISK
denial-of-service
Out-of-Bounds Write in Google Brotli Decoder
70RISK
denial-of-service
Out-of-Bounds Write in Google Brotli Decoder
70RISK
initial-access
Improper encoding or escaping of output vulnerability in the system plugin daemon in Synology BeeStation OS (BSM) before
48RISK
denial-of-service
Out-of-Bounds Write in Google Brotli Decoder
70RISK
denial-of-service
Out-of-Bounds Write in Google Brotli Decoder
70RISK
remote-with-credentials
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable param
63RISK
initial-access
Xinuos (formerly SCO) Openserver v5 and v6 allows attackers to execute arbitrary commands via shell metacharacters in ou
35RISK
info-leak
An issue was discovered in Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5. An unauthenticated user can access /osm/REG
50RISK
initial-access
RCE via OOM corruption
100RISK
We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and exploitation-intelligence sources. A public PoC existing does not mean the flaw is exploitable in your environment.