Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
85,682cataloged exploits
39,953CVEs with public exploitation
24,696lab-tested
AllReferência 25,887Exploit-DB 24,488GitHub PoC 17,378VulnCheck XDB 9,888Nuclei 4,513Metasploit 3,528✓ verified onlyrecentpopularrisk
4,513 exploits
Nucleimedium
ipTIME A2004 - Unauthorized Access
An access control issue in the component /login/hostinfo.cgi of ipTIME A2004 v12.17.0 allows attackers to obtain sensiti
28RISK
open ↗Nucleimedium
ipTIME A2004 - Unauthorized Access
An access control issue in the component /login/hostinfo2.cgi of ipTIME A2004 v12.17.0 allows attackers to obtain sensit
28RISK
open ↗Nucleihigh
AVM FRITZ!Box 7530 AX - Unauthorized Access
An access control issue in the component /juis_boxinfo.xml of AVM FRITZ!Box 7530 AX v7.59 allows attackers to obtain sen
36RISK
open ↗Nucleimedium
LearnPress < 4.2.6.8.1 - Information Disclosure
LearnPress – WordPress LMS Plugin <= 4.2.6.8 - Basic Information Disclosure via JSON API
28RISK
open ↗Nucleicritical
SEOPress < 7.9 - Authentication Bypass
SEOPress < 7.9 - Unauthenticated Object Injection
63RISK
open ↗Nucleimedium
IceWarp Server 10.2.1 - Cross-Site Scripting
IceWarp Server 10.2.1 is vulnerable to Cross Site Scripting (XSS) via the meta parameter.
28RISK
open ↗Nucleicritical
WordPress HTML5 Video Player < 2.5.27 - SQL Injection
HTML5 Video Player < 2.5.27 - Unauthenticated SQLi
48RISK
open ↗Nucleihigh
DevDojo Voyager <=1.8.0 - Arbitrary File Read
DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass.
33RISK
open ↗Nucleilow
DevDojo Voyager <=1.8.0 - Cross-Site Scripting
DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass. By manipulating an authenticate
28RISK
open ↗Nucleihigh
DevDojo Voyager <= 1.8.0 - Arbitrary File Write vulnerability
DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user u
33RISK
open ↗Nucleihigh
MasterSAM Star Gate v11 - Local File Inclusion
MasterSAM Star Gate 11 is vulnerable to directory traversal via /adama/adama/downloadService. An attacker can exploit th
48RISK
open ↗Nucleicritical
Mitel MiCollab - Arbitary File Read
Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative privilege to conduct a local fi
70RISK
open ↗Nucleicritical
Fortinet - Authentication Bypass
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 thro
100RISK
open ↗Nucleicritical
D-Tale <= 3.16.0 - Pre-Auth RCE via Pandas Query Injection
D-Tale allows Remote Code Execution through the Custom Filter Input
48RISK
open ↗Nucleicritical
Cleo Harmony < 5.8.0.24 - File Upload Vulnerability
In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an unauthenticated user can impo
95RISK
open ↗Nucleicritical
WP SuperBackup <= 2.3.3 - Unauthenticated Arbitrary File Upload to RCE
WordPress WP SuperBackup plugin <= 2.3.3 - Unauthenticated Arbitrary File Upload vulnerability
75RISK
open ↗Nucleicritical
Craft CMS - Remote Code Execution via Template Path Manipulation
RCE when PHP `register_argc_argv` config setting is enabled in craftcms/cms
100RISK
open ↗Nucleimedium
Astro - Information Disclosure
Server source code is exposed to the public if sourcemaps are enabled
36RISK
open ↗Nucleicritical
Apache Pinot < 1.3.0 - Authentication Bypass
Apache Pinot: Authentication bypass issue. If the path does not contain / and contain . authentication is not required
65RISK
open ↗Nucleicritical
DataEase < 2.10.4 - Authentication Bypass via Whitelist Path Traversal
DataEase has an unauthorized vulnerability
55RISK
open ↗Nucleimedium
Apache NiFi - Information Disclosure
Apache NiFi: Missing Complete Authorization for Parameter and Service References
23RISK
open ↗Nucleicritical
D-Link DIR-859 - Information Disclosure
A vulnerability in the D-Link DIR-859 router with firmware version A3 1.05 and earlier permits unauthorized individuals
55RISK
open ↗Nucleihigh
Netgear DGN2200 - Improper Authentication
A vulnerability in the Netgear DGN2200 router with firmware version v1.0.0.46 and earlier permits unauthorized individua
36RISK
open ↗Nucleicritical
WordPress WP-Advanced-Search <= 3.3.9 - SQL Injection
WP-Advanced-Search < 3.3.9.2 - Unauthenticated SQL Injection
28RISK
open ↗Nucleihigh
HuangDou UTCMS V9 - OS Command Injection
HuangDou UTCMS cli.php os command injection
50RISK
open ↗Nucleihigh
PDF Generator Addon for Elementor Page Builder <= 1.7.5 - Arbitrary File Download
PDF Generator Addon for Elementor Page Builder <= 2.0.0 - Unauthenticated Arbitrary File Download
36RISK
open ↗Nucleicritical
Crypto <= 2.15 - Authentication Bypass
Crypto <= 2.18 - Authentication Bypass via log_in
43RISK
open ↗Nucleicritical
Palo Alto Networks Expedition - OS Command Injection
Expedition: OS Command Injection Vulnerability
58RISK
open ↗Nucleicritical
PAN-OS Management Interface - Path Confusion to Authentication Bypass
PAN-OS: Authentication Bypass in the Management Web Interface
100RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.