Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
89,340cataloged exploits
41,245CVEs with public exploitation
24,696lab-tested
AllReferência 26,769Exploit-DB 24,491GitHub PoC 18,603exploitation intelligence 11,309Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
11,309 exploits
initial-access
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
initial-access
Nginx UI: Unauthenticated Backup Download with Encryption Key Disclosure
68RISK
initial-access
cups-browsed binds to `INADDR_ANY:631`, trusting any packet from any source
60RISK
initial-access
Redis Lua Use-After-Free may lead to remote code execution
85RISK
initial-access
WavePlayer < 3.8.0 - Unauthenticated Arbitrary File Upload
48RISK
client-side
A type confusion issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 15.8.7 and iPadOS 15.
76RISK
initial-access
NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that
100RISK
initial-access
NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that
100RISK
initial-access
NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that
100RISK
initial-access
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
client-side
Microsoft Office Security Feature Bypass Vulnerability
93RISK
initial-access
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi
100RISK
initial-access
Budibase Universal Auth Bypass via Webhook Query Param Injection
68RISK
initial-access
An issue was discovered in Kentico 12.0.x before 12.0.15, 11.0.x before 11.0.48, 10.0.x before 10.0.52, and 9.x versions
100RISK
initial-access
Control iD iDSecure passwordCustom Authentication Bypass
75RISK
local
Windows Kernel Elevation of Privilege Vulnerability
83RISK
initial-access
Nginx UI: Unauthenticated Backup Download with Encryption Key Disclosure
68RISK
initial-access
Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
100RISK
client-side
OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically mak
53RISK
initial-access
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment
100RISK
remote-with-credentials
Windows SMB Client Elevation of Privilege Vulnerability
93RISK
initial-access
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
100RISK
local
crypto: algif_aead - Revert to operating out-of-place
100RISK
initial-access
WooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File Upload
60RISK
initial-access
Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS
100RISK
initial-access
Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability
68RISK
initial-access
SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. T
85RISK
initial-access
Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
100RISK
denial-of-service
A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req
100RISK
local
Windows NTLM Elevation of Privilege Vulnerability
41RISK
We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and exploitation-intelligence sources. A public PoC existing does not mean the flaw is exploitable in your environment.