Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
89,220cataloged exploits
41,197CVEs with public exploitation
24,696lab-tested
AllReferência 26,738Exploit-DB 24,490GitHub PoC 18,525exploitation intelligence 11,299Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
11,299 exploits
initial-access
Out-of-Bounds Write in Google Brotli Decoder
70RISK
initial-access
RCE via stale global state
100RISK
initial-access
RCE via stale global state
100RISK
initial-access
RCE via stale global state
100RISK
initial-access
RCE via stale global state
100RISK
initial-access
RCE via OOM corruption
100RISK
initial-access
Information disclosure
100RISK
initial-access
RCE via stale global state
100RISK
initial-access
RCE via stale global state
100RISK
initial-access
RCE via OOM corruption
100RISK
initial-access
RCE via OOM corruption
100RISK
initial-access
RCE via OOM corruption
100RISK
local
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti
100RISK
initial-access
In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent pollin
100RISK
local
crypto: algif_aead - Revert to operating out-of-place
100RISK
initial-access
RCE via OOM corruption
100RISK
initial-access
RCE via OOM corruption
100RISK
initial-access
RCE via OOM corruption
100RISK
initial-access
RCE via stale global state
100RISK
initial-access
Argument Injection in PHP-CGI
100RISK
client-side
RCE via OOM corruption
100RISK
initial-access
RCE via OOM corruption
100RISK
initial-access
RCE via OOM corruption
100RISK
denial-of-service
RCE via OOM corruption
100RISK
initial-access
RCE via OOM corruption
100RISK
initial-access
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5
48RISK
initial-access
Plex Media Server SSRF
83RISK
initial-access
An issue was discovered in T24 in TEMENOS Channels R15.01. The login page presents JavaScript functions to access a docu
38RISK
initial-access
RCE via OOM corruption
100RISK
initial-access
RCE via OOM corruption
100RISK
We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and exploitation-intelligence sources. A public PoC existing does not mean the flaw is exploitable in your environment.