Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
85,682cataloged exploits
39,953CVEs with public exploitation
24,696lab-tested
AllReferência 25,887Exploit-DB 24,488GitHub PoC 17,378VulnCheck XDB 9,888Nuclei 4,513Metasploit 3,528✓ verified onlyrecentpopularrisk
4,513 exploits
Nucleicritical
Viessmann Vitogate 300 - Remote Code Execution
In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute a
23RISK
open ↗Nucleihigh
qdPM 9.2 - Directory Traversal
qdPM 9.2 allows Directory Traversal to list files and directories by navigating to the /uploads URI.
18RISK
open ↗Nucleicritical
Gibbon LMS <= v25.0.01 - File Upload to RCE
GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because rubrics_visualise_saveAjax.phps does not
50RISK
open ↗Nucleicritical
WordPress Plugin Forminator 1.24.6 - Arbitrary File Upload
Forminator <= 1.24.6 - Unauthenticated Arbitrary File Upload
68RISK
open ↗Nucleicritical
Media Library Assistant < 3.09 - Remote Code Execution/Local File Inclusion
Media Library Assistant <= 3.09 - Unauthenticated Local/Remote File Inclusion & Remote Code Execution
85RISK
open ↗Nucleicritical
PrestaShop Step by Step products Pack - SQL Injection
In the module "Step by Step products Pack" (ndk_steppingpack) version 1.5.6 and before from NDK Design for PrestaShop, a
55RISK
open ↗Nucleicritical
cPH2 Charging Station v1.87.0 - OS Command Injection
An OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthen
65RISK
open ↗Nucleihigh
GL.iNet <= 4.3.7 - Arbitrary File Write
In GL.iNET GL-AR300M routers with firmware v4.3.7 it is possible to write arbitrary files through a path traversal attac
30RISK
open ↗Nucleicritical
TOTOLINK A3700R - Command Injection
An issue in TOTOLINK A3700R v.9.1.2u.6165_20211012 allows a remote attacker to execute arbitrary code via the FileName p
30RISK
open ↗Nucleicritical
Form-Maker < 1.15.20 - Unauthenticated Arbitrary File Upload
Form-Maker < 1.15.20 - Unauthenticated Arbitrary File Upload
63RISK
open ↗Nucleimedium
XWiki < 14.10.14 - Cross-Site Scripting
Reflected Cross-site scripting through revision parameter in content menu in XWiki Platform
43RISK
open ↗Nucleicritical
F5 BIG-IP - Unauthenticated RCE via AJP Smuggling
BIG-IP Configuration utility unauthenticated remote code execution vulnerability
100RISK
open ↗Nucleihigh
Ivanti ICS - Authentication Bypass
An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a re
100RISK
open ↗Nucleihigh
ISPConfig - PHP Code Injection
An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by
41RISK
open ↗Nucleihigh
Chaosblade < 1.7.4 - Remote Code Execution
exec.CommandContext in Chaosblade 0.3 through 1.7.3, when server mode is used, allows OS command execution via the cmd p
36RISK
open ↗Nucleihigh
Label Studio - Cross-Site Scripting
Label Studio XSS Vulnerability on Avatar Upload
36RISK
open ↗Nucleihigh
Label Studio - Sensitive Information Exposure
Object Relational Mapper Leak Vulnerability in Filtering Task in Label Studio
36RISK
open ↗Nucleihigh
PlayTube 3.0.1 - Information Disclosure
PlayTube Redirect information disclosure
28RISK
open ↗Nucleihigh
ManageEngine OpManager - Directory Traversal
A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A speciall
55RISK
open ↗Nucleicritical
SysAid Server - Remote Code Execution
In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a f
100RISK
open ↗Nucleicritical
PyArrow Flight RPC - Remote Code Execution
PyArrow, PyArrow: Arbitrary code execution when loading a malicious data file
23RISK
open ↗Nucleicritical
Qualitor <= 8.20 - Remote Code Execution
Qualitor through 8.20 allows remote attackers to execute arbitrary code via PHP code in the html/ad/adpesquisasql/reques
68RISK
open ↗Nucleimedium
SuiteCRM Unauthenticated Graphql Introspection
SuiteCRM has Unauthenticated Graphql Introspection Enabled
23RISK
open ↗Nucleimedium
Essential Grid <= 3.1.0 - Cross-Site Scripting
WordPress Essential Grid Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)
36RISK
open ↗Nucleicritical
WordPress WP Child Theme Generator < 1.1.3 - Arbitrary File Upload
WordPress WP Child Theme Generator plugin <= 1.0.9 - Arbitrary File Upload vulnerability
43RISK
open ↗Nucleicritical
Anyscale Ray - Remote Code Execution
Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the ve
85RISK
open ↗Nucleicritical
Anyscale Ray 2.6.3 and 2.8.0 - Server-Side Request Forgery
Anyscale Ray 2.6.3 and 2.8.0 allows /log_proxy SSRF. NOTE: the vendor's position is that this report is irrelevant becau
55RISK
open ↗Nucleicritical
Nagios XI < 5.11.3 - SQL Injection
Nagios XI before version 5.11.3 was discovered to contain a SQL injection vulnerability via the bulk modification tool.
50RISK
open ↗Nucleihigh
XWiki < 4.10.15 - Information Disclosure
XWiki exposed whole content of all documents of all wikis to anybody with view right on Solr suggest service
58RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.