Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
89,340cataloged exploits
41,245CVEs with public exploitation
24,696lab-tested
AllReferência 26,769Exploit-DB 24,491GitHub PoC 18,603exploitation intelligence 11,309Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
11,309 exploits
initial-access
NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that
100RISK
info-leak
An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiC
100RISK
initial-access
REC in MCPJam inspector due to HTTP Endpoint exposes
75RISK
client-side
Windows CSC Service Elevation of Privilege Vulnerability
41RISK
initial-access
Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint
100RISK
initial-access
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
initial-access
WooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File Upload
60RISK
initial-access
REC in MCPJam inspector due to HTTP Endpoint exposes
75RISK
initial-access
REC in MCPJam inspector due to HTTP Endpoint exposes
75RISK
initial-access
User Profile Builder < 3.15.2 - Unauthenticated Arbitrary Password Reset
48RISK
initial-access
OpenNetAdmin os command injection
48RISK
initial-access
A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation,
100RISK
initial-access
Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint
100RISK
initial-access
OpenNetAdmin os command injection
48RISK
initial-access
Cisco ISE API Unauthenticated Remote Code Execution Vulnerability
75RISK
initial-access
REC in MCPJam inspector due to HTTP Endpoint exposes
75RISK
initial-access
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment
100RISK
local
An issue in the BdApiUtil driver of Baidu Antivirus v5.2.3.116083 allows attackers to terminate arbitrary process via ex
28RISK
initial-access
REC in MCPJam inspector due to HTTP Endpoint exposes
75RISK
initial-access
REC in MCPJam inspector due to HTTP Endpoint exposes
75RISK
local
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISK
initial-access
Kali Forms <= 2.4.9 - Unauthenticated Remote Code Execution via form_process
63RISK
initial-access
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
local
Path traversal vulnerability in WinRAR
93RISK
initial-access
Kan is Vulnerable to Unauthenticated SSRF via Attachment Download Endpoint
61RISK
initial-access
MCP Inspector proxy server lacks authentication between the Inspector client and proxy
75RISK
info-leak
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can by
100RISK
local
In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a work
41RISK
initial-access
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
initial-access
REC in MCPJam inspector due to HTTP Endpoint exposes
75RISK
We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and exploitation-intelligence sources. A public PoC existing does not mean the flaw is exploitable in your environment.