Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
85,682cataloged exploits
39,953CVEs with public exploitation
24,696lab-tested
AllReferência 25,887Exploit-DB 24,488GitHub PoC 17,378VulnCheck XDB 9,888Nuclei 4,513Metasploit 3,528✓ verified onlyrecentpopularrisk
4,513 exploits
Nucleicritical
Fortinet FortiWLM Unauthenticated Command Injection Vulnerability
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versio
48RISK
open ↗Nucleicritical
Ivanti Endpoint Manager Mobile (EPMM) - Authentication Bypass
An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or re
100RISK
open ↗Nucleicritical
MobileIron Core - Remote Unauthenticated API Access
An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted fu
100RISK
open ↗Nucleimedium
XWiki - Cross-Site Scripting
XWiki Platform vulnerable to cross-site scripting in target parameter via share page by email
36RISK
open ↗Nucleimedium
XWiki >= 6.0-rc-1 - Cross-Site Scripting
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in delete template
43RISK
open ↗Nucleimedium
XWiki - Cross-Site Scripting
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in restore template
43RISK
open ↗Nucleihigh
PrestaShop MyPrestaModules - PhpInfo Disclosure
MyPrestaModules Prestashop Module v6.2.9 and UpdateProducts Prestashop Module v3.6.9 were discovered to contain a PHPInf
30RISK
open ↗Nucleimedium
IceWarp Mail Server v10.4.5 - Cross-Site Scripting
IceWarp Mail Server v10.4.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the color
18RISK
open ↗Nucleicritical
WBCE 1.6.0 - SQL Injection
SQL injection vulnerability in the miniform module in WBCE CMS v.1.6.0 allows remote unauthenticated attacker to execute
18RISK
open ↗Nucleimedium
Mingsoft MCMS < 5.3.1 - Cross-Site Scripting
Mingsoft MCMS HTTP POST Request search.do cross site scripting
23RISK
open ↗Nucleihigh
LiteSpeed Cache <= 5.7 - Unauthenticated Stored XSS
WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Site Wide Stored XSS vulnerability
68RISK
open ↗Nucleicritical
WS_FTP Server - Insecure Deserialization
WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability
100RISK
open ↗Nucleimedium
Stock Ticker <= 3.23.2 - Cross-Site Scripting
WordPress Stock Ticker Plugin <= 3.23.3 is vulnerable to Cross Site Scripting (XSS)
36RISK
open ↗Nucleihigh
Post Grid <= 2.2.50 - Information Exposure via REST API
WordPress Post Grid Plugin <= 2.2.50 is vulnerable to Sensitive Data Exposure
36RISK
open ↗Nucleimedium
Axigen WebMail - Cross-Site Scripting
Cross Site Scripting (XSS) vulnerability in Axigen versions 10.3.3.0 before 10.3.3.59, 10.4.0 before 10.4.19, and 10.5.0
28RISK
open ↗Nucleicritical
LG Simple Editor <= v3.21.0 - Command Injection
LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability
65RISK
open ↗Nucleimedium
EWWW Image Optimizer <= 7.2.0 - Unauthenticated Information Disclosure
WordPress EWWW Image Optimizer Plugin <= 7.2.0 is vulnerable to Sensitive Data Exposure
48RISK
open ↗Nucleicritical
PHPJabbers Food Delivery Script - SQL Injection
PHPJabbers Food Delivery Script 3.0 has a SQL injection (SQLi) vulnerability in the "q" parameter of index.php.
18RISK
open ↗Nucleicritical
PHPJabbers Food Delivery Script v3.0 - SQL Injection
PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php.
18RISK
open ↗Nucleimedium
PHPJabbers Yacht Listing Script v1.0 - Cross-Site Scripting
There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in PHPJabbers Yacht Listing S
18RISK
open ↗Nucleimedium
PHPJabbers Fundraising Script v1.0 - Cross-Site Scripting
PHPJabbers Fundraising Script v1.0 is vulnerable to Cross Site Scripting (XSS) via the "action" parameter of index.php.
18RISK
open ↗Nucleimedium
PHPJabbers Make an Offer Widget v1.0 - Cross-Site Scripting
There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in PHPJabbers Make an Offer W
18RISK
open ↗Nucleimedium
PHPJabbers Ticket Support Script v3.2 - Cross-Site Scripting
There is a Cross Site Scripting (XSS) vulnerability in the message parameter of index.php in PHPJabbers Ticket Support S
18RISK
open ↗Nucleimedium
PHPJabbers Callback Widget v1.0 - Cross-Site Scripting
There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Callback Widge
18RISK
open ↗Nucleimedium
IceWarp Mail Server Deep Castle 2 v.13.0.1.2 - Open Redirect
An issue in IceWarp Mail Server Deep Castle 2 v.13.0.1.2 allows a remote attacker to execute arbitrary code via a crafte
18RISK
open ↗Nucleihigh
SolarView Compact < 6.00 - Directory Traversal
SolarView Compact < 6.00 is vulnerable to Directory Traversal.
18RISK
open ↗Nucleimedium
Nagios XI v5.11.0 - SQL Injection
A SQL injection vulnerability in Nagios XI from version 5.11.0 up to and including 5.11.1 allows authenticated attackers
23RISK
open ↗Nucleimedium
PHPJabbers Availability Booking Calendar 5.0 - Cross-Site Scripting
PHP Jabbers Availability Booking Calendar index.php cross site scripting
23RISK
open ↗Nucleicritical
SmartNode SN200 Analog Telephone Adapter (ATA) & VoIP Gateway - Command Injection
SmartNode SN200 (aka SN200) 3.21.2-23021 allows unauthenticated OS Command Injection.
30RISK
open ↗Nucleimedium
PHPJabbers Bus Reservation System 1.1 - Cross-Site Scripting
PHP Jabbers Bus Reservation System index.php cross site scripting
28RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.