Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

85,566cataloged exploits
39,907CVEs with public exploitation
24,696lab-tested
AllReferência 25,846Exploit-DB 24,488GitHub PoC 17,314VulnCheck XDB 9,877Nuclei 4,513Metasploit 3,528✓ verified onlyrecentpopularrisk
4,513 exploits
Nucleimedium
AnythingLLM - Username Enumeration via Password Recovery
CVE-2026-21484MEDIUM
AnythingLLM Vulnerable to Username Enumeration w/ Password Recovery
28RISK
open ↗
Nucleicritical
Atlassian Jira/Confluence/Bitbucket - Pre-Auth Arbitrary File Read
CVE-2026-21589CRITICALunder attack
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft
98RISK
open ↗
Nucleicritical
Fortinet FortiClientEMS 7.4.4 - SQL Injection
CVE-2026-21643CRITICALunder attack
An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiC
100RISK
open ↗
Nucleicritical
n8n Webhooks - Remote Code Execution
CVE-2026-21858CRITICAL
n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling
85RISK
open ↗
Nucleihigh
Mailpit < 1.28.3 - Server-Side Request Forgery
CVE-2026-21859MEDIUM
Mailpit Proxy Endpoint is Vulnerable to Server-Side Request Forgery (SSRF)
28RISK
open ↗
Nucleicritical
ClipBucket v5 <= 5.5.2 - Unauthenticated Blind SQL Injection
CVE-2026-21875CRITICAL
ClipBucket v5 Vulnerable to Blind SQL Injection through Channel Comments
43RISK
open ↗
Nucleicritical
n8n >= 0.123.0 and < 1.121.3 - Remote Code Execution
CVE-2026-21877CRITICAL
n8n is vulnerable to Remote Code Execution via Arbitrary File Write
43RISK
open ↗
Nucleicritical
ZimaOS - Authentication Bypass
CVE-2026-21891CRITICAL
ZimaOS has Authentication Bypass via System-Level Username
43RISK
open ↗
Nucleihigh
osTicket - Arbitrary File Read
CVE-2026-22200HIGH
osTicket (1.18.x < 1.18.3, 1.17.x < 1.17.7) PDF Export Arbitrary File Read
58RISK
open ↗
Nucleicritical
UniFi Network Application - Path Traversal
CVE-2026-22557CRITICAL
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network App
68RISK
open ↗
Nucleihigh
Easy Appointments <= 3.12.21 - Information Disclosure
CVE-2026-2262HIGH
Easy Appointments <= 3.12.21 - Unauthenticated Sensitive Information Exposure via REST API
36RISK
open ↗
Nucleihigh
Windmill < 1.603.3 - Operator Authorization Bypass
CVE-2026-22683HIGH
Windmill < 1.615.0 Operator Role Missing Authorization Checks RCE
56RISK
open ↗
Nucleihigh
Spring Cloud Config Server - Path Traversal
CVE-2026-22739HIGH
Spring Cloud Config Profile Substitution Can Allow Unintended Access To Files And Enable SSRF Attacks
36RISK
open ↗
Nucleicritical
vLLM 0.8.3 - 0.14.0 - Information Disclosure
CVE-2026-22778CRITICAL
vLLM leaks a heap address when PIL throws an error
48RISK
open ↗
Nucleihigh
OpenCode < 1.0.216 - Unauthenticated Remote Code Execution
CVE-2026-22812HIGH
OpenCode's Unauthenticated HTTP Server Allows Arbitrary Command Execution
41RISK
open ↗
Nucleihigh
Blinko < 1.8.4 - Path Traversal
CVE-2026-23482HIGH
Blinko: Unauthorized Arbitrary File Read - /api/file/temp
36RISK
open ↗
Nucleimedium
Blinko <= 1.8.3 - Path Traversal via /plugins
CVE-2026-23483MEDIUM
Blinko: Unauthorized Arbitrary File Read - /plugins
28RISK
open ↗
Nucleilow
Blinko <= 1.8.3 - User Information Leak
CVE-2026-23486MEDIUM
Blinko: Unauthorized User Information Leak
28RISK
open ↗
Nucleihigh
InvoicePlane <= 1.6.3 - Arbitrary File Read
CVE-2026-23491CRITICAL
InvoicePlane has Unauthenticated Path Traversal in Guest Controller
43RISK
open ↗
Nucleihigh
Feast Feature Server <=0.58.0 - Arbitrary File Read
CVE-2026-23536HIGH
Feast: unauthenticated arbitrary file read
36RISK
open ↗
Nucleihigh
Modular DS - Broken Access Control
CVE-2026-23550CRITICAL
WordPress Modular DS plugin <= 2.5.1 - Privilege Escalation vulnerability
68RISK
open ↗
Nucleihigh
ElementsKit Lite <3.7.9 - Unauthenticated Mailchimp Proxy
CVE-2026-23693CRITICAL
ElementsKit Elementor Addons < 3.7.9 Unauthenticated Mailchimp REST Endpoint
43RISK
open ↗
Nucleicritical
Windmill < 1.603.3 - SQL Injection
CVE-2026-23696CRITICAL
Windmill < 1.603.3 File Ownership Handling SQLi RCE
68RISK
open ↗
Nucleicritical
MCPJam Inspector - Remote Code Execution
CVE-2026-23744CRITICAL
REC in MCPJam inspector due to HTTP Endpoint exposes
75RISK
open ↗
Nucleicritical
SmarterTools SmarterMail - Admin Password Reset
CVE-2026-23760CRITICALunder attackransomware
SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API
100RISK
open ↗
Nucleimedium
XWiki Platform Distribution Flavor Main - Cross-Site Scripting
CVE-2026-24128MEDIUM
XWiki Affected by Reflected Cross-Site Scripting (XSS) in Error Messages
28RISK
open ↗
Nucleihigh
Ally – Web Accessibility & Usability <= 4.0.3 - SQL Injection
CVE-2026-2413HIGH
Ally – Web Accessibility & Usability <= 4.0.3 - Unauthenticated SQL Injection via URL Path
36RISK
open ↗
Nucleihigh
Geo Mashup <= 1.13.17 - SQL Injection
CVE-2026-2416HIGH
Geo Mashup <= 1.13.17 - Unauthenticated SQL Injection via 'sort' Parameter
36RISK
open ↗
Nucleicritical
NVIDIA Triton Inference Server <= 26.02 - Authentication Bypass
CVE-2026-24207CRITICAL
NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A succes
63RISK
open ↗
Nucleicritical
SmarterMail - Remote Code Execution
CVE-2026-24423CRITICALunder attackransomware
SmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub API
100RISK
open ↗
← previouspage 72 / 151next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.