Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
71,886cataloged exploits
32,153CVEs with public exploitation
1,932lab-tested
AllExploit-DB 22,786Referência 19,978GitHub PoC 13,282VulnCheck XDB 8,176Nuclei 4,202Metasploit 3,462✓ verified onlyrecentpopularrisk
4,202 exploits
Nucleihigh
MagnusBilling Alarm Module - Cross-Site Scripting
MagnusBilling Stored Cross-Site Scripting in Alarm Module
36RISK
open ↗Nucleicritical
ICTBroadcast - Command Injection
ICTBroadcast <= 7.4 Unauthenticated Session Cookie RCE
63RISK
open ↗Nucleihigh
FlowiseAI Flowise <= 2.2.6 - Arbitrary File Upload
FlowiseAI Flowise v2.2.6 was discovered to contain an arbitrary file upload vulnerability in /api/v1/attachments.
75RISK
open ↗Nucleihigh
InstaWP Connect < 0.1.0.86 - Local PHP File Inclusion
InstaWP Connect <= 0.1.0.85 - Unauthenticated Local PHP File Inclusion
41RISK
open ↗Nucleicritical
FREEDOM Administration - Default Login
The Web GUI configuration panel of Hirsch (formerly Identiv and Viscount) Enterphone MESH through 2024 ships with defaul
43RISK
open ↗Nucleicritical
OttoKit < 1.0.83 - SureTriggers allows Privilege Escalation
WordPress SureTriggers <= 1.0.82 - Privilege Escalation Vulnerability
75RISK
open ↗Nucleimedium
Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting
Yonyou UFIDA ERP-NC login.jsp cross site scripting
28RISK
open ↗Nucleicritical
CrushFTP - Authentication Bypass
CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unle
100RISK
open ↗Nucleicritical
SAP NetWeaver Visual Composer Metadata Uploader - Deserialization
Missing Authorization check in SAP NetWeaver (Visual Composer development server)
100RISK
open ↗Nucleimedium
Vite server.fs.deny Bypass - Local File Inclusion
Vite allows server.fs.deny to be bypassed with .svg or relative paths
40RISK
open ↗Nucleihigh
MinIO - Incomplete Signature Validation for Unsigned-Trailer Uploads
MinIO performs incomplete signature validation for unsigned-trailer uploads
36RISK
open ↗Nucleimedium
1 Click WordPress Migration <= 2.2 - Unauthenticated Information Disclsoure
WordPress 1 Click WordPress Migration plugin <= 2.5.7 - Sensitive Data Exposure vulnerability
28RISK
open ↗Nucleihigh
Rocket TRUfusion Enterprise - Server Side Request Forgery
Rocket TRUfusion Enterprise through 7.10.4.0 uses a reverse proxy to handle incoming connections. However, the proxy is
36RISK
open ↗Nucleimedium
Vite - Path Traversal
Vite has an `server.fs.deny` bypass with an invalid `request-target`
28RISK
open ↗Nucleicritical
XWiki Platform - SQL Injection
XWiki Platform vulnerable to SQL injection through getdeleteddocuments.vm template sort parameter
85RISK
open ↗Nucleimedium
XWiki Platform - Cross-Site Scripting
XWiki Platform contains Reflected XSS vulnerability in two templates
28RISK
open ↗Nucleicritical
Langflow AI - Unauthenticated Remote Code Execution
Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code
100RISK
open ↗Nucleihigh
EventON Lite <= 2.4 - Authenticated Local File Inclusion
WordPress EventON plugin <= 2.4 - Local File Inclusion vulnerability
36RISK
open ↗Nucleicritical
Web-Check < 2.0.1 Screenshot API - OS Command Injection
Web-Check allows command Injection via Unvalidated URL in Screenshot API
68RISK
open ↗Nucleihigh
Infoblox NetMRI < 7.6.1 - Unauthenticated Command Injection in get_saml_request
An issue was discovered in Infoblox NETMRI before 7.6.1. Remote Unauthenticated Command Injection can occur.
48RISK
open ↗Nucleicritical
NetMRI Unauthenticated SQL Injection via skipjackUsername
An issue was discovered in Infoblox NETMRI before 7.6.1. Unauthenticated SQL Injection can occur.
55RISK
open ↗Nucleimedium
NetMRI < 7.6.1 - Authentication Bypass via Hardcoded Credentials
An issue was discovered in Infoblox NETMRI before 7.6.1. Authentication Bypass via a Hardcoded credential can occur.
40RISK
open ↗Nucleicritical
DataEase 2.10.4-2.10.7 - Remote Code Execution
Dataease H2 JDBC Connection Remote Code Execution
36RISK
open ↗Nucleicritical
XWiki REST API Query - SQL Injection
org.xwiki.platform:xwiki-platform-rest-server allows SQL injection in query endpoint of REST API
65RISK
open ↗Nucleimedium
XWiki WYSIWYG API - Open Redirect
org.xwiki.platform:xwiki-platform-wysiwyg-api Open Redirect vulnerability
28RISK
open ↗Nucleihigh
Karel IP Phone IP1211 Web Management Panel - Local File Inclusion
Karel IP Phone IP1211 Path Traversal
36RISK
open ↗Nucleicritical
Versa Concerto Actuator Endpoint - Authentication Bypass
Versa Concerto Actuator Authentication Bypass Information Leak
100RISK
open ↗Nucleicritical
Versa Concerto API Path Based - Authentication Bypass
Versa Concerto Authentication Bypass File Write Remote Code Execution
75RISK
open ↗Nucleicritical
Commvault - SSRF via /commandcenter/deployWebpackage.do
Commvault Command Center Innovation Release <= 11.38.25 Unathenticated Install Package Path Traversal
100RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.