Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
72,018cataloged exploits
32,219CVEs with public exploitation
1,932lab-tested
AllExploit-DB 22,786Referência 20,023GitHub PoC 13,334VulnCheck XDB 8,195Nuclei 4,217Metasploit 3,463✓ verified onlyrecentpopularrisk
4,217 exploits
Nucleicritical
Angular-Base64-Upload - Remote Code Execution
angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php. Explo
75RISK
open ↗Nucleimedium
AcuToWeb server/10.5.0.7577c8b - Cross-Site Scripting
Cross Site Scripting vulnerability in AcuToWeb server v.10.5.0.7577C8b allows a remote attacker to execute arbitrary cod
28RISK
open ↗Nucleicritical
Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via Hash
Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via hash
68RISK
open ↗Nucleicritical
Cost Calculator Builder <= 3.2.15 - SQL Injection
WordPress Cost Calculator Builder plugin <= 3.2.15 - SQL Injection vulnerability
43RISK
open ↗Nucleicritical
BerqWP <= 1.7.6 - Arbitrary File Upload
WordPress BerqWP plugin <= 1.7.6 - Unauthenticated Arbitrary File Upload vulnerability
63RISK
open ↗Nucleihigh
Gradio - Server-Side Request Forgery
Server-Side Request Forgery (SSRF) in gradio-app/gradio
48RISK
open ↗Nucleimedium
Contest Gallery - Broken Access Control
WordPress Contest Gallery plugin <= 23.1.2 - Unauthenticated Comment UserID And IP address Disclosure vulnerability
28RISK
open ↗Nucleicritical
Moodle - Remote Code Execution
Moodle: remote code execution via calculated question types
78RISK
open ↗Nucleicritical
Apache HugeGraph-Server <1.5.0 - Authentication Bypass
Apache HugeGraph-Server: Fixed JWT Token(Secret)
55RISK
open ↗Nucleimedium
osCommerce v4.0 - Cross-site Scripting
osCommerce all-products cross site scripting
28RISK
open ↗Nucleicritical
Progress Telerik Report Server - Authentication Bypass
Registration Authentication Bypass Vulnerability
100RISK
open ↗Nucleicritical
WordPress TI WooCommerce Wishlist Plugin <= 2.8.2 - SQL Injection
WordPress TI WooCommerce Wishlist plugin <= 2.8.2 - SQL Injection vulnerability
68RISK
open ↗Nucleicritical
YARPP <= 5.30.10 - Missing Authorization
WordPress Yet Another Related Posts Plugin (YARPP) plugin <= 5.30.10 - Broken Access Control vulnerability
40RISK
open ↗Nucleicritical
SendGrid for WordPress <= 1.4 - SQL Injection
WordPress SendGrid for WordPress plugin <= 1.4 - SQL Injection vulnerability
36RISK
open ↗Nucleimedium
Sunshine Photo Cart <= 3.2.5 - Reflected Cross-Site Scripting
WordPress Sunshine Photo Cart plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerability
36RISK
open ↗Nucleicritical
WordPress CAS Theme <= 1.0.0 - Server-Side Request Forgery
CAS <= 1.0.0 - Unauthenticated SSRF
63RISK
open ↗Nucleihigh
LiteSpeed Cache <= 6.4.1 - Sensitive Information Exposure
WordPress LiteSpeed Cache plugin < 6.5.0.1 - Unauthenticated Account Takeover via Cookie Leak vulnerability
85RISK
open ↗Nucleicritical
LearnPress WordPress LMS Plugin <= 4.2.6.5 - SQL Injection
LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Time-Based SQL Injection
55RISK
open ↗Nucleicritical
AnteeoWMS < v4.7.34 - SQL Injection
A SQL injection vulnerability in login portal in AnteeoWMS before v4.7.34 allows unauthenticated attackers to execute ar
63RISK
open ↗Nucleihigh
WordPress Core <6.5.2 - Cross-Site Scripting
WordPress Core is vulnerable to Stored Cross-Site Scripting via user display names in the Avatar block in various versio
58RISK
open ↗Nucleicritical
Business Directory Plugin <= 6.4.2 - SQL Injection
Business Directory Plugin – Easy Listing Directories for WordPress <= 6.4.2 - Unauthenticated SQL Injection via listingfields Parameter
68RISK
open ↗Nucleihigh
YITH WooCommerce Ajax Search <= 2.4.0 - Cross-Site Scripting
YITH WooCommerce Ajax Search <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting
36RISK
open ↗Nucleimedium
Usermin 2.100 - Username Enumeration
A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows attackers to enumerate valid
48RISK
open ↗Nucleicritical
Qualitor <= 8.24 - Remote Code Execution
Qualitor up to 8.24 is vulnerable to Remote Code Execution (RCE) via Arbitrary File Upload in checkAcesso.php.
75RISK
open ↗Nucleihigh
Apache OFBiz - Remote Code Execution
Apache OFBiz: Confused controller-view authorization logic (forced browsing)
100RISK
open ↗Nucleicritical
Apache Solr - Authentication Bypass
Apache Solr: Authentication bypass possible using a fake URL Path ending
85RISK
open ↗Nucleihigh
CentralSquare CryWolf - Path Traversal
A traversal vulnerability in GeneralDocs.aspx in CentralSquare CryWolf (False Alarm Management) through 2024-08-09 allow
41RISK
open ↗Nucleihigh
TablePress < 2.4.3 - XXE Injection
XML External Entity Reference (XXE) in PHPSpreadsheet's XLSX reader
36RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.