Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
89,287cataloged exploits
41,245CVEs with public exploitation
24,696lab-tested
AllReferência 26,769Exploit-DB 24,490GitHub PoC 18,551exploitation intelligence 11,309Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
11,309 exploits
initial-access
Burst Statistics 3.4.0 - 3.4.1.1 - Authentication Bypass to Admin Account Takeover
68RISK
initial-access
marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass
100RISK
initial-access
Burst Statistics 3.4.0 - 3.4.1.1 - Authentication Bypass to Admin Account Takeover
68RISK
local
crypto: algif_aead - Revert to operating out-of-place
100RISK
remote-with-credentials
Flowise has Remote Code Execution vulnerability
85RISK
local
crypto: algif_aead - Revert to operating out-of-place
100RISK
initial-access
Adobe ColdFusion Improper Access Control Arbitrary code execution
100RISK
local
crypto: algif_aead - Revert to operating out-of-place
100RISK
initial-access
NGINX ngx_http_rewrite_module vulnerability
60RISK
local
xfrm: esp: avoid in-place decrypt on shared skb frags
78RISK
initial-access
NGINX ngx_http_rewrite_module vulnerability
60RISK
initial-access
NGINX ngx_http_rewrite_module vulnerability
60RISK
local
net: skbuff: preserve shared-frag marker during coalescing
91RISK
initial-access
Burst Statistics 3.4.0 - 3.4.1.1 - Authentication Bypass to Admin Account Takeover
68RISK
initial-access
Craft CMS Allows Remote Code Execution
100RISK
local
Microsoft Exchange Server Spoofing Vulnerability
93RISK
local
xfrm: esp: avoid in-place decrypt on shared skb frags
78RISK
local
crypto: algif_aead - Revert to operating out-of-place
100RISK
initial-access
Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and
60RISK
initial-access
Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability
100RISK
initial-access
Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and
100RISK
local
crypto: algif_aead - Revert to operating out-of-place
100RISK
initial-access
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code exec
100RISK
denial-of-service
NGINX ngx_http_rewrite_module vulnerability
60RISK
initial-access
NGINX ngx_http_rewrite_module vulnerability
60RISK
initial-access
NGINX ngx_http_rewrite_module vulnerability
60RISK
initial-access
NGINX ngx_http_rewrite_module vulnerability
60RISK
local
crypto: algif_aead - Revert to operating out-of-place
100RISK
initial-access
NGINX ngx_http_rewrite_module vulnerability
60RISK
initial-access
NGINX ngx_http_rewrite_module vulnerability
60RISK
We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and exploitation-intelligence sources. A public PoC existing does not mean the flaw is exploitable in your environment.