Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
89,287cataloged exploits
41,245CVEs with public exploitation
24,696lab-tested
AllReferência 26,769Exploit-DB 24,490GitHub PoC 18,551exploitation intelligence 11,309Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
11,309 exploits
initial-access
Remote code execution as guest via SolrSearchMacros request in xwiki
100RISK
initial-access
cups-browsed binds to `INADDR_ANY:631`, trusting any packet from any source
60RISK
initial-access
PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities
100RISK
initial-access
Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache CouchDB be
60RISK
remote-with-credentials
Active Directory Domain Services Elevation of Privilege Vulnerability
100RISK
local
net/rds: reset op_nents when zerocopy page pin fails
41RISK
initial-access
crypto: algif_aead - Revert to operating out-of-place
100RISK
info-leak
Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost
58RISK
info-leak
Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost
58RISK
local
crypto: algif_aead - Revert to operating out-of-place
100RISK
initial-access
InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.
50RISK
local
xfrm: esp: avoid in-place decrypt on shared skb frags
78RISK
local
net/rds: reset op_nents when zerocopy page pin fails
41RISK
local
net/rds: reset op_nents when zerocopy page pin fails
41RISK
initial-access
NGINX ngx_http_rewrite_module vulnerability
60RISK
initial-access
Hoverfly vulnerable to remote code execution at `/api/v2/hoverfly/middleware` endpoint due to insecure middleware implementation
68RISK
info-leak
Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
100RISK
initial-access
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISK
initial-access
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISK
initial-access
The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows rem
60RISK
initial-access
Drupal core - Highly critical - Remote Code Execution
100RISK
info-leak
Ghost has a SQL Injection in its Content API
85RISK
local
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RISK
local
xfrm: esp: avoid in-place decrypt on shared skb frags
78RISK
initial-access
DbGate: Unauthenticated Remote Code Execution via JSON Script Runner
63RISK
initial-access
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
100RISK
initial-access
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
initial-access
Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
100RISK
initial-access
Everest Forms <= 3.4.3 - Unauthenticated PHP Object Injection via Form Entry Metadata
63RISK
info-leak
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc
100RISK
We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and exploitation-intelligence sources. A public PoC existing does not mean the flaw is exploitable in your environment.