Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
89,220cataloged exploits
41,197CVEs with public exploitation
24,696lab-tested
AllReferência 26,738Exploit-DB 24,490GitHub PoC 18,525exploitation intelligence 11,299Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
11,299 exploits
initial-access
An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an
100RISK
initial-access
A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb
100RISK
initial-access
Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.
98RISK
initial-access
SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API
100RISK
initial-access
Remote Code Execution in fastjson 1.2.68–1.2.83
48RISK
initial-access
Remote Code Execution in fastjson 1.2.68–1.2.83
48RISK
initial-access
WordPress LiteSpeed Cache plugin <= 6.3.0.1 - Unauthenticated Privilege Escalation vulnerability
75RISK
info-leak
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
initial-access
Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing
75RISK
initial-access
Apache OFBiz: Path traversal leading to a RCE
85RISK
initial-access
Microsoft SharePoint Remote Code Execution Vulnerability
78RISK
initial-access
Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation
98RISK
initial-access
SPIP Bigup Multipart File Upload OS Command Injection
85RISK
initial-access
vBulletin < 6.2.2 Eval Injection RCE via vb5/template/runtime.php
85RISK
initial-access
SolarWinds Web Help Desk Hardcoded Credential Vulnerability
100RISK
initial-access
Kirki 6.0.0 - 6.0.6 - Unauthenticated Privilege Escalation via 'handle_forgot_password'
48RISK
local
Incorrect Authorization in Graphics
71RISK
info-leak
Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1
63RISK
initial-access
Authentication Bypass in the SmartConsole Login Process Using an Application Token
93RISK
initial-access
Microsoft SharePoint Server Security Feature Bypass Vulnerability
100RISK
initial-access
Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary c
100RISK
remote-with-credentials
Active Directory Certificate Services Elevation of Privilege Vulnerability
41RISK
initial-access
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
client-side
Remote Code Execution Vulnerability in Atril's EPUB ebook parsing
41RISK
initial-access
WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
98RISK
remote-with-credentials
Active Directory Certificate Services Elevation of Privilege Vulnerability
41RISK
initial-access
Crawl4AI < 0.8.0 Docker API Unauthenticated Remote Code Execution via Hooks Parameter
63RISK
info-leak
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
initial-access
WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query
78RISK
initial-access
WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query
78RISK
We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and exploitation-intelligence sources. A public PoC existing does not mean the flaw is exploitable in your environment.