Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
85,682cataloged exploits
39,953CVEs with public exploitation
24,696lab-tested
AllReferência 25,887Exploit-DB 24,488GitHub PoC 17,378VulnCheck XDB 9,888Nuclei 4,513Metasploit 3,528✓ verified onlyrecentpopularrisk
4,513 exploits
Nucleimedium
AcuToWeb server/10.5.0.7577c8b - Cross-Site Scripting
Cross Site Scripting vulnerability in AcuToWeb server v.10.5.0.7577C8b allows a remote attacker to execute arbitrary cod
28RISK
open ↗Nucleicritical
Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via Hash
Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via hash
68RISK
open ↗Nucleicritical
Cost Calculator Builder <= 3.2.15 - SQL Injection
WordPress Cost Calculator Builder plugin <= 3.2.15 - SQL Injection vulnerability
43RISK
open ↗Nucleicritical
BerqWP <= 1.7.6 - Arbitrary File Upload
WordPress BerqWP plugin <= 1.7.6 - Unauthenticated Arbitrary File Upload vulnerability
63RISK
open ↗Nucleihigh
Gradio - Server-Side Request Forgery
Server-Side Request Forgery (SSRF) in gradio-app/gradio
48RISK
open ↗Nucleimedium
Contest Gallery - Broken Access Control
WordPress Contest Gallery plugin <= 23.1.2 - Unauthenticated Comment UserID And IP address Disclosure vulnerability
28RISK
open ↗Nucleicritical
Moodle - Remote Code Execution
Moodle: remote code execution via calculated question types
78RISK
open ↗Nucleicritical
Apache HugeGraph-Server <1.5.0 - Authentication Bypass
Apache HugeGraph-Server: Fixed JWT Token(Secret)
65RISK
open ↗Nucleimedium
osCommerce v4.0 - Cross-site Scripting
osCommerce all-products cross site scripting
28RISK
open ↗Nucleicritical
Progress Telerik Report Server - Authentication Bypass
Registration Authentication Bypass Vulnerability
100RISK
open ↗Nucleicritical
JeecgBoot v3.7.1 - SQL Injection
JeecgBoot v3.7.1 was discovered to contain a SQL injection vulnerability via the component /onlDragDatasetHead/getTotalD
75RISK
open ↗Nucleihigh
Qualitor <= v8.24 - Server-Side Request Forgery
Qualitor v8.24 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /request/viewValidacao.p
36RISK
open ↗Nucleimedium
LoLLMS WebUI - Subfolder Prediction via Path Traversal
Path Traversal in parisneo/lollms-webui
28RISK
open ↗Nucleihigh
Netis Wifi Router - Information Disclosure
An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi
23RISK
open ↗Nucleicritical
NetAlert X - Arbitary File Read
NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and
48RISK
open ↗Nucleicritical
ServiceNow UI Macros - Template Injection
Jelly Template Injection Vulnerability in ServiceNow UI Macros
100RISK
open ↗Nucleicritical
Progress Software WhatsUp Gold GetFileWithoutZip Directory Traversal - Remote Code Execution
WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability
100RISK
open ↗Nucleicritical
Vendure - Arbitrary File Read
Vendure asset server plugin has local file read vulnerability with AssetServerPlugin & LocalAssetStorageStrategy
75RISK
open ↗Nucleicritical
WordPress InstaWP Connect <= 0.1.0.38 - Unauthenticated User Creation
InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User Creation
63RISK
open ↗Nucleihigh
ZimaOS <= v1.2.4 - Sensitive Information Disclosure
ZimaOS (Installed Applications and System Information) has Unauthorized Sensitive Data Leak
41RISK
open ↗Nucleicritical
Plenti < v0.7.2 - OS Command Injection
Plenti arbitrary file write vulnerability
36RISK
open ↗Nucleihigh
Sonatype Nexus Repository Manager 3 - Local File Inclusion
Nexus Repository 3 - Path Traversal
61RISK
open ↗Nucleihigh
Zitadel - User Registration Bypass
Zitadel User Registration Bypass Vulnerability
36RISK
open ↗Nucleimedium
Scoold < 1.64.0 - Authentication Bypass
Semicolon Path Injection on API /api;/config
36RISK
open ↗Nucleihigh
Symfony Profiler - Remote Access via Injected Arguments
Ability to change environment from query in symfony/runtime
68RISK
open ↗Nucleicritical
WordPress Stacks Mobile App Builder <=5.2.3 - Authentication Bypass
WordPress Stacks Mobile App Builder plugin <= 5.2.3 - Account Takeover vulnerability
63RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.