Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
89,287cataloged exploits
41,245CVEs with public exploitation
24,696lab-tested
AllReferência 26,769Exploit-DB 24,490GitHub PoC 18,551exploitation intelligence 11,309Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
11,309 exploits
initial-access
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment
100RISK
initial-access
WP Maps Pro <= 6.1.0 - Unauthenticated Privilege Escalation via Administrator Account Creation to wpgmp_temp_access_ajax AJAX Action
68RISK
local
net: skbuff: preserve shared-frag marker during coalescing
91RISK
denial-of-service
Windows Netlogon Remote Code Execution Vulnerability
70RISK
local
crypto: algif_aead - Revert to operating out-of-place
100RISK
local
crypto: algif_aead - Revert to operating out-of-place
100RISK
initial-access
The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execut
100RISK
initial-access
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
local
Use-after-free in Linux kernel's netfilter: nf_tables component
76RISK
initial-access
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
local
In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privilege
83RISK
initial-access
REC in MCPJam inspector due to HTTP Endpoint exposes
75RISK
initial-access
REC in MCPJam inspector due to HTTP Endpoint exposes
75RISK
initial-access
REC in MCPJam inspector due to HTTP Endpoint exposes
75RISK
initial-access
REC in MCPJam inspector due to HTTP Endpoint exposes
75RISK
initial-access
Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution
85RISK
info-leak
Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.
100RISK
initial-access
REC in MCPJam inspector due to HTTP Endpoint exposes
75RISK
initial-access
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Bui
100RISK
initial-access
Microsoft Outlook Remote Code Execution Vulnerability
100RISK
local
net/rds: reset op_nents when zerocopy page pin fails
41RISK
initial-access
Service Finder Bookings <= 6.0 - Authentication Bypass via User Switch Cookie
63RISK
initial-access
Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver
100RISK
info-leak
OrderConvo <= 15.1 - Unauthenticated Arbitrary File Read
56RISK
local
posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
71RISK
initial-access
Gotenberg: Unauthenticated RCE via ExifTool Metadata Key Injection
63RISK
initial-access
LiteLLM: SQL injection in Proxy API key verification
100RISK
initial-access
WP Maps Pro <= 6.1.0 - Unauthenticated Privilege Escalation via Administrator Account Creation to wpgmp_temp_access_ajax AJAX Action
68RISK
initial-access
WP Maps Pro <= 6.1.0 - Unauthenticated Privilege Escalation via Administrator Account Creation to wpgmp_temp_access_ajax AJAX Action
68RISK
initial-access
WP Maps Pro <= 6.1.0 - Unauthenticated Privilege Escalation via Administrator Account Creation to wpgmp_temp_access_ajax AJAX Action
68RISK
We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and exploitation-intelligence sources. A public PoC existing does not mean the flaw is exploitable in your environment.