Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
89,220cataloged exploits
41,197CVEs with public exploitation
24,696lab-tested
AllReferência 26,738Exploit-DB 24,490GitHub PoC 18,525exploitation intelligence 11,299Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
11,299 exploits
info-leak
WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query
78RISK
initial-access
marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass
100RISK
remote-with-credentials
Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.
98RISK
initial-access
Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing
75RISK
initial-access
Authorization Bypass in Next.js Middleware
85RISK
info-leak
WooCommerce Designer Pro <= 1.9.28 - Unauthenticated Arbitrary File Read
56RISK
initial-access
Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.
98RISK
initial-access
Kestra: Unauthenticated RCE via /configs path-suffix auth-filter bypass
63RISK
info-leak
Joomla Extension - joomshaper.com - Unauthenticated access to Helix3 template ajax handler
56RISK
initial-access
marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass
100RISK
local
crypto: algif_aead - Revert to operating out-of-place
100RISK
initial-access
marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass
100RISK
initial-access
marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass
100RISK
initial-access
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
denial-of-service
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISK
info-leak
WooCommerce Designer Pro <= 1.9.28 - Unauthenticated Arbitrary File Read
56RISK
initial-access
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
initial-access
vBulletin < 6.2.2 Eval Injection RCE via vb5/template/runtime.php
85RISK
initial-access
An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an
100RISK
info-leak
n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling
85RISK
remote-with-credentials
Active Directory Certificate Services Elevation of Privilege Vulnerability
41RISK
initial-access
DbGate: Unauthenticated Remote Code Execution via JSON Script Runner
63RISK
remote-with-credentials
Active Directory Certificate Services Elevation of Privilege Vulnerability
41RISK
local
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RISK
info-leak
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RISK
initial-access
Gitea Docker image trusts spoofable reverse-proxy headers by default
63RISK
initial-access
Remote Code Execution in fastjson 1.2.68–1.2.83
48RISK
initial-access
Remote Code Execution in fastjson 1.2.68–1.2.83
48RISK
initial-access
Craft CMS Allows Remote Code Execution
100RISK
initial-access
Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing
75RISK
We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and exploitation-intelligence sources. A public PoC existing does not mean the flaw is exploitable in your environment.