Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
89,220cataloged exploits
41,197CVEs with public exploitation
24,696lab-tested
AllReferência 26,738Exploit-DB 24,490GitHub PoC 18,525exploitation intelligence 11,299Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
11,299 exploits
initial-access
Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint
100RISK
local
xfrm: esp: avoid in-place decrypt on shared skb frags
78RISK
info-leak
Fusion Builder < 3.6.2 - Unauthenticated SSRF
60RISK
local
runc container breakout through process.cwd trickery and leaked fds
61RISK
local
Code Execution / Escalation of Privileges in ThrottleStop
41RISK
initial-access
FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca
60RISK
remote-with-credentials
Flowise has Remote Code Execution vulnerability
85RISK
initial-access
Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing
75RISK
initial-access
Pterodactyl Panel Allows Unauthenticated Arbitrary Remote Code Execution
75RISK
local
A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities wa
86RISK
initial-access
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISK
remote-with-credentials
OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and exe
83RISK
initial-access
Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution
100RISK
initial-access
Unauthenticated Command Injection
100RISK
local
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RISK
initial-access
Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation
98RISK
initial-access
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
remote-with-credentials
WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an _wp_attached_file Post Meta entry ca
60RISK
local
In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused
46RISK
initial-access
Proxmox VE 7.0-8.0 Authentication Bypass via tfa-challenge Parameter
63RISK
local
Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon A
71RISK
initial-access
REC in MCPJam inspector due to HTTP Endpoint exposes
75RISK
initial-access
Bricksforge <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter
63RISK
initial-access
Missing Authorization vulnerability in Melis Platform
63RISK
denial-of-service
Windows Netlogon Remote Code Execution Vulnerability
70RISK
local
An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To e
76RISK
initial-access
CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unle
100RISK
info-leak
Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query
100RISK
client-side
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and
76RISK
initial-access
Metabase SQL injection via password reset endpoint
100RISK
We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and exploitation-intelligence sources. A public PoC existing does not mean the flaw is exploitable in your environment.