Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,886cataloged exploits
32,153CVEs with public exploitation
1,932lab-tested
4,202 exploits
Nucleihigh
MagnusBilling Alarm Module - Cross-Site Scripting
MagnusBilling Stored Cross-Site Scripting in Alarm Module
36RISK
open
Nucleicritical
ICTBroadcast - Command Injection
ICTBroadcast <= 7.4 Unauthenticated Session Cookie RCE
63RISK
open
Nucleihigh
FlowiseAI Flowise <= 2.2.6 - Arbitrary File Upload
FlowiseAI Flowise v2.2.6 was discovered to contain an arbitrary file upload vulnerability in /api/v1/attachments.
75RISK
open
Nucleihigh
InstaWP Connect < 0.1.0.86 - Local PHP File Inclusion
InstaWP Connect <= 0.1.0.85 - Unauthenticated Local PHP File Inclusion
41RISK
open
Nucleicritical
FREEDOM Administration - Default Login
The Web GUI configuration panel of Hirsch (formerly Identiv and Viscount) Enterphone MESH through 2024 ships with defaul
43RISK
open
Nucleicritical
OttoKit < 1.0.83 - SureTriggers allows Privilege Escalation
WordPress SureTriggers <= 1.0.82 - Privilege Escalation Vulnerability
75RISK
open
Nucleimedium
Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting
Yonyou UFIDA ERP-NC login.jsp cross site scripting
28RISK
open
Nucleicritical
CrushFTP - Authentication Bypass
CVE-2025-31161CRITICALunder attackransomware
CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unle
100RISK
open
Nucleicritical
SAP NetWeaver Visual Composer Metadata Uploader - Deserialization
CVE-2025-31324CRITICALunder attackransomware
Missing Authorization check in SAP NetWeaver (Visual Composer development server)
100RISK
open
Nucleimedium
Vite server.fs.deny Bypass - Local File Inclusion
Vite allows server.fs.deny to be bypassed with .svg or relative paths
40RISK
open
Nucleihigh
MinIO - Incomplete Signature Validation for Unsigned-Trailer Uploads
MinIO performs incomplete signature validation for unsigned-trailer uploads
36RISK
open
Nucleimedium
1 Click WordPress Migration <= 2.2 - Unauthenticated Information Disclsoure
WordPress 1 Click WordPress Migration plugin <= 2.5.7 - Sensitive Data Exposure vulnerability
28RISK
open
Nucleihigh
Rocket TRUfusion Enterprise - Server Side Request Forgery
Rocket TRUfusion Enterprise through 7.10.4.0 uses a reverse proxy to handle incoming connections. However, the proxy is
36RISK
open
Nucleimedium
Vite - Path Traversal
Vite has an `server.fs.deny` bypass with an invalid `request-target`
28RISK
open
Nucleicritical
XWiki Platform - SQL Injection
XWiki Platform vulnerable to SQL injection through getdeleteddocuments.vm template sort parameter
85RISK
open
Nucleimedium
XWiki Platform - Cross-Site Scripting
XWiki Platform contains Reflected XSS vulnerability in two templates
28RISK
open
Nucleicritical
CraftCMS - Remote Code Execution
CVE-2025-32432CRITICALunder attack
Craft CMS Allows Remote Code Execution
100RISK
open
Nucleicritical
Langflow AI - Unauthenticated Remote Code Execution
CVE-2025-3248CRITICALunder attackransomware
Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code
100RISK
open
Nucleihigh
EventON Lite <= 2.4 - Authenticated Local File Inclusion
WordPress EventON plugin <= 2.4 - Local File Inclusion vulnerability
36RISK
open
Nucleicritical
Web-Check < 2.0.1 Screenshot API - OS Command Injection
Web-Check allows command Injection via Unvalidated URL in Screenshot API
68RISK
open
Nucleihigh
Infoblox NetMRI < 7.6.1 - Unauthenticated Command Injection in get_saml_request
An issue was discovered in Infoblox NETMRI before 7.6.1. Remote Unauthenticated Command Injection can occur.
48RISK
open
Nucleicritical
NetMRI Unauthenticated SQL Injection via skipjackUsername
An issue was discovered in Infoblox NETMRI before 7.6.1. Unauthenticated SQL Injection can occur.
55RISK
open
Nucleimedium
NetMRI < 7.6.1 - Authentication Bypass via Hardcoded Credentials
An issue was discovered in Infoblox NETMRI before 7.6.1. Authentication Bypass via a Hardcoded credential can occur.
40RISK
open
Nucleicritical
DataEase 2.10.4-2.10.7 - Remote Code Execution
Dataease H2 JDBC Connection Remote Code Execution
36RISK
open
Nucleicritical
XWiki REST API Query - SQL Injection
org.xwiki.platform:xwiki-platform-rest-server allows SQL injection in query endpoint of REST API
65RISK
open
Nucleimedium
XWiki WYSIWYG API - Open Redirect
org.xwiki.platform:xwiki-platform-wysiwyg-api Open Redirect vulnerability
28RISK
open
Nucleihigh
Karel IP Phone IP1211 Web Management Panel - Local File Inclusion
Karel IP Phone IP1211 Path Traversal
36RISK
open
Nucleicritical
Versa Concerto Actuator Endpoint - Authentication Bypass
CVE-2025-34026CRITICALunder attack
Versa Concerto Actuator Authentication Bypass Information Leak
100RISK
open
Nucleicritical
Versa Concerto API Path Based - Authentication Bypass
Versa Concerto Authentication Bypass File Write Remote Code Execution
75RISK
open
Nucleicritical
Commvault - SSRF via /commandcenter/deployWebpackage.do
CVE-2025-34028CRITICALunder attack
Commvault Command Center Innovation Release <= 11.38.25 Unathenticated Install Package Path Traversal
100RISK
open

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.