Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
89,287cataloged exploits
41,245CVEs with public exploitation
24,696lab-tested
AllReferência 26,769Exploit-DB 24,490GitHub PoC 18,551exploitation intelligence 11,309Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
11,309 exploits
local
xfrm: esp: avoid in-place decrypt on shared skb frags
78RISK
local
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
local
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
info-leak
MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated
100RISK
local
Ollama before 0.1.34 does not validate the format of the digest (sha256 with 64 hex digits) when getting the model path,
78RISK
remote-with-credentials
LiteLLM affected by privilege escalation via unrestricted proxy configuration endpoint
68RISK
initial-access
NGINX ngx_http_rewrite_module vulnerability
60RISK
initial-access
Import and export users and customers <= 1.29.7 - Privilege Escalation to Administrator via save_extra_user_profile_fields
41RISK
remote-with-credentials
LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/t
61RISK
initial-access
NGINX ngx_http_rewrite_module vulnerability
60RISK
initial-access
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
100RISK
denial-of-service
NGINX ngx_http_rewrite_module vulnerability
60RISK
initial-access
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
local
xfrm: esp: avoid in-place decrypt on shared skb frags
78RISK
info-leak
GHSL-2023-232: Flowise Path Injection at /api/v1/openai-assistants-file
56RISK
remote-with-credentials
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans
100RISK
initial-access
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans
100RISK
local
crypto: algif_aead - Revert to operating out-of-place
100RISK
local
crypto: algif_aead - Revert to operating out-of-place
100RISK
initial-access
In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible
100RISK
initial-access
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
local
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
local
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
46RISK
remote-with-credentials
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans
100RISK
local
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
46RISK
local
crypto: algif_aead - Revert to operating out-of-place
100RISK
remote-with-credentials
Flowise has Remote Code Execution vulnerability
85RISK
initial-access
Burst Statistics 3.4.0 - 3.4.1.1 - Authentication Bypass to Admin Account Takeover
68RISK
local
crypto: algif_aead - Revert to operating out-of-place
100RISK
remote-with-credentials
Flowise has Remote Code Execution vulnerability
85RISK
We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and exploitation-intelligence sources. A public PoC existing does not mean the flaw is exploitable in your environment.