Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,114cataloged exploits
31,649CVEs with public exploitation
0lab-tested
8,069 exploits
VulnCheck XDB
initial-access
CVE-2023-43208CRITICALunder attackransomware24 Feb 2026
NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that
100RISK
open
VulnCheck XDB
initial-access
CVE-2023-43208CRITICALunder attackransomware24 Feb 2026
NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that
100RISK
open
VulnCheck XDB
initial-access
CVE-2026-0770CRITICAL24 Feb 2026
Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability
68RISK
open
VulnCheck XDB
denial-of-service
CVE-2025-47812CRITICALunder attack24 Feb 2026
In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection o
100RISK
open
VulnCheck XDB
client-side
CVE-2023-27372CRITICAL24 Feb 2026
SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. T
85RISK
open
VulnCheck XDB
remote-with-credentials
CVE-2025-47539CRITICAL23 Feb 2026
WordPress Eventin plugin <= 4.0.26 - Privilege Escalation Vulnerability
75RISK
open
VulnCheck XDB
initial-access
CVE-2024-53704HIGHunder attackransomware23 Feb 2026
An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authe
100RISK
open
VulnCheck XDB
denial-of-service
CVE-2026-2441HIGHunder attack23 Feb 2026
Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside
76RISK
open
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALunder attackransomware23 Feb 2026
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open
VulnCheck XDB
remote-with-credentials
CVE-2025-31161CRITICALunder attackransomware23 Feb 2026
CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unle
100RISK
open
VulnCheck XDB
initial-access
CVE-2023-43208CRITICALunder attackransomware22 Feb 2026
NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that
100RISK
open
VulnCheck XDB
local
CVE-2025-6019HIGH22 Feb 2026
Libblockdev: lpe from allow_active to root in libblockdev via udisks
41RISK
open
VulnCheck XDB
initial-access
CVE-2023-43208CRITICALunder attackransomware22 Feb 2026
NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that
100RISK
open
VulnCheck XDB
initial-access
CVE-2025-32463CRITICALunder attack22 Feb 2026
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISK
open
VulnCheck XDB
initial-access
CVE-2025-47812CRITICALunder attack22 Feb 2026
In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection o
100RISK
open
VulnCheck XDB
initial-access
CVE-2025-68645HIGHunder attack21 Feb 2026
A Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra Collaboration (ZCS) 10.0 and 10.1
98RISK
open
VulnCheck XDB
initial-access
CVE-2025-49132CRITICAL21 Feb 2026
Pterodactyl Panel Allows Unauthenticated Arbitrary Remote Code Execution
68RISK
open
VulnCheck XDB
remote-with-credentials
CVE-2022-26923HIGHunder attack21 Feb 2026
Active Directory Domain Services Elevation of Privilege Vulnerability
100RISK
open
VulnCheck XDB
local
CVE-2022-37969HIGHunder attack20 Feb 2026
Windows Common Log File System Driver Elevation of Privilege Vulnerability
76RISK
open
VulnCheck XDB
remote-with-credentials
CVE-2026-1405CRITICAL20 Feb 2026
Slider Future <= 1.0.5 - Unauthenticated Arbitrary File Upload
63RISK
open
VulnCheck XDB
initial-access
CVE-2021-3129CRITICALunder attackransomware20 Feb 2026
Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra
100RISK
open
VulnCheck XDB
initial-access
CVE-2026-1281CRITICALunder attack19 Feb 2026
A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.
100RISK
open
VulnCheck XDB
client-side
CVE-2026-2441HIGHunder attack19 Feb 2026
Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside
76RISK
open
VulnCheck XDB
remote-with-credentials
CVE-2025-71243CRITICAL19 Feb 2026
SPIP Saisies Plugin < 5.11.1 Remote Code Execution
63RISK
open
VulnCheck XDB
initial-access
CVE-2026-1340CRITICALunder attack19 Feb 2026
A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.
100RISK
open
VulnCheck XDB
local
CVE-2022-24521HIGHunder attackransomware19 Feb 2026
Windows Common Log File System Driver Elevation of Privilege Vulnerability
71RISK
open
VulnCheck XDB
initial-access
CVE-2014-6271CRITICALunder attack19 Feb 2026
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISK
open
VulnCheck XDB
remote-with-credentials
CVE-2025-47812CRITICALunder attack19 Feb 2026
In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection o
100RISK
open
VulnCheck XDB
initial-access
CVE-2019-919418 Feb 2026
elFinder before 2.1.48 has a command injection vulnerability in the PHP connector.
60RISK
open
VulnCheck XDB
client-side
CVE-2025-47812CRITICALunder attack18 Feb 2026
In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection o
100RISK
open

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.