Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
89,094cataloged exploits
41,119CVEs with public exploitation
24,696lab-tested
AllReferência 26,689Exploit-DB 24,490GitHub PoC 18,485VulnCheck XDB 11,277Nuclei 4,613Metasploit 3,540✓ verified onlyrecentpopularrisk
89,094 exploits
Exploit-DB
IBMi Navigator 7.5 - Server Side Request Forgery (SSRF)
IBM i server-side request forgery
33RISK
open ↗Exploit-DB
ABB Cylon Aspect 3.08.02 (bbmdUpdate.php) - Remote Code Execution
Cross Site Scripting XSS
48RISK
open ↗Exploit-DB
ABB Cylon Aspect 3.08.02 (licenseServerUpdate.php) - Stored Cross-Site Scripting
Cross Site Scripting XSS
48RISK
open ↗Exploit-DB
Spring Boot common-user-management 0.1 - Remote Code Execution (RCE)
common-user-management Unrestricted File Upload Leading to Remote Code Execution (RCE)
41RISK
open ↗Exploit-DB
ABB Cylon Aspect 3.08.02 (licenseUpload.php) - Stored Cross-Site Scripting
Cross Site Scripting XSS
48RISK
open ↗VulnCheck XDB
initial-access
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
open ↗Exploit-DB
Pimcore 11.4.2 - Stored cross site scripting
Pimcore Search Document cross site scripting
33RISK
open ↗Exploit-DB
OpenPanel 0.3.4 - Incorrect Access Control
An issue found in the Copy and View functions in the File Manager component of OpenPanel v0.3.4 allows attackers to exec
41RISK
open ↗GitHub PoC
AsierEgana/cve-2021-4034
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗Exploit-DB
GestioIP 3.5.7 - Reflected Cross-Site Scripting (Reflected XSS)
The ip_import_acl_csv request in GestioIP v3.5.7 is vulnerable to Reflected XSS. When a user uploads an improperly forma
33RISK
open ↗Exploit-DB
Xinet Elegant 6 Asset Lib Web UI 6.1.655 - SQL Injection
NAPC Xinet Elegant 6 Asset Library 6.1.655 allows Pre-Authentication SQL Injection via the /elegant6/login LoginForm[use
23RISK
open ↗Exploit-DB
GestioIP 3.5.7 - Cross-Site Scripting (XSS)
The ip_do_job request in GestioIP v3.5.7 is vulnerable to Cross-Site Scripting (XSS). It allows data exfiltration and en
48RISK
open ↗Exploit-DB
GestioIP 3.5.7 - Cross-Site Request Forgery (CSRF)
Multiple endpoints in GestioIP v3.5.7 are vulnerable to Cross-Site Request Forgery (CSRF). An attacker can execute actio
41RISK
open ↗VulnCheck XDB
denial-of-service
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISK
open ↗GitHub PoC
PoC for CVE-2023-27350
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Bui
100RISK
open ↗GitHub PoC
The WordPress Popular Posts WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the ~/src/Image.php file which makes it possible for attackers with contributor level access and above to upload malicious files that can be used to obtain remote code execution,
WordPress Popular Posts <= 5.3.2 Authenticated Arbitrary File Upload
78RISK
open ↗Exploit-DB
OpenPanel 0.3.4 - Directory Traversal
An issue in OpenPanel v0.3.4 to v0.2.1 allows attackers to execute a directory traversal in File Actions of File Manager
48RISK
open ↗Exploit-DB
OpenPanel Copy and View functions in the File Manager 0.3.4 - Directory Traversal
An issue found in the Copy and View functions in the File Manager component of OpenPanel v0.3.4 allows attackers to exec
41RISK
open ↗Exploit-DB
GestioIP 3.5.7 - Remote Command Execution (RCE)
An issue in GestioIP v3.5.7 allows a remote attacker to execute arbitrary code via the file upload function. The attacke
75RISK
open ↗VulnCheck XDB
initial-access
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
100RISK
open ↗VulnCheck XDB
local
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗GitHub PoC★ 2
HTTP/2 Rapid Reset Exploit PoC
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISK
open ↗GitHub PoC
POC for CVE-2023-40028: Ghost CMS Arbitrary File Read
Arbitrary file read via symlinks in Ghost
45RISK
open ↗Exploit-DB
OpenPanel 0.3.4 - OS Command Injection
OpenPanel v0.3.4 was discovered to contain an OS command injection vulnerability via the timezone parameter.
48RISK
open ↗GitHub PoC★ 14
Exploit for CVE-2025-29927 (Next.js) - Authorization Bypass
Authorization Bypass in Next.js Middleware
85RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.