Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,886cataloged exploits
32,153CVEs with public exploitation
1,932lab-tested
AllExploit-DB 22,786Referência 19,978GitHub PoC 13,282VulnCheck XDB 8,176Nuclei 4,202Metasploit 3,462✓ verified onlyrecentpopularrisk
4,202 exploits
Nucleimedium
Adobe Experience Manager ≤ 6.5.23.0 - XML Injection
CVE-2025-54251MEDIUM
Adobe Experience Manager | XML Injection (aka Blind XPath Injection) (CWE-91)
28RISK
open ↗
Nucleimedium
Copyparty <=1.18.6 - Cross-Site Scripting
CVE-2025-54589MEDIUM
copyparty Reflected XSS via Filter Parameter
48RISK
open ↗
Nucleimedium
Heimdall Application Dashboard < 2.7.3 - Reflected XSS
CVE-2025-54597HIGH
LinuxServer.io Heimdall before 2.7.3 allows XSS via the q parameter.
36RISK
open ↗
Nucleihigh
WordPress JS Archive List <= 6.1.5 - SQL Injection
CVE-2025-54726CRITICAL
WordPress JS Archive List Plugin < 6.1.6 - SQL Injection Vulnerability
63RISK
open ↗
Nucleicritical
NestJS DevTools Integration - Remote Code Execution
CVE-2025-54782CRITICAL
@nestjs/devtools-integration's CSRF to Sandbox Escape Allows for RCE against JS Developers
75RISK
open ↗
Nucleimedium
Astro SSR - Open Redirect
CVE-2025-54793MEDIUM
Astro: Duplicate trailing slash feature can lead to Open Redirects
28RISK
open ↗
Nucleihigh
Stirling-PDF < 1.1.0 - Server-Side Request Forgery
CVE-2025-55150HIGH
Stirling-PDF SSRF vulnerability on /api/v1/convert/html/pdf
36RISK
open ↗
Nucleihigh
Stirling-PDF SSRF via Markdown
CVE-2025-55161HIGH
Stirling-PDF SSRF vulnerability on /api/v1/convert/markdown/pdf
36RISK
open ↗
Nucleicritical
WeGIA - Directory Traversal
CVE-2025-55169CRITICAL
WeGIA Path Traversal at endpoint 'html/socio/sistema/download_remessa.php' via parameter 'file'
43RISK
open ↗
Nucleicritical
React Server Components - Remote Code Execution
CVE-2025-55182CRITICALunder attackransomware
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
Nucleihigh
React Server Components - Denial of Service
CVE-2025-55184HIGH
A pre-authentication denial of service vulnerability exists in React Server Components versions 19.0.0, 19.0.1 19.1.0, 1
68RISK
open ↗
Nucleicritical
ArgoCD Project API Token Repository Credentials Exposure
CVE-2025-55190CRITICAL
Argo CD: Project API Token Exposes Repository Credentials
43RISK
open ↗
Nucleimedium
Astro - Unauthorized Third-Party Image Access
CVE-2025-55303MEDIUM
Unauthorized third-party images in Astro’s _image endpoint
28RISK
open ↗
Nucleihigh
Agent-Zero 0.8.0 - 0.9.4 - Arbitrary File Download
CVE-2025-55523LOW
An issue in the component /api/download_work_dir_file.py of Agent-Zero v0.8.* allows attackers to execute a directory tr
23RISK
open ↗
Nucleicritical
IdeaCMS <= 1.7 - SQL Injection
CVE-2025-5569MEDIUM
IdeaCMS getList.html Goods sql injection
28RISK
open ↗
Nucleihigh
XWiki Platform - Information Disclosure
CVE-2025-55747CRITICAL
XWiki Platform's configuration files can be accessed through the webjars API
43RISK
open ↗
Nucleihigh
XWiki Platform - Path Traversal
CVE-2025-55748CRITICAL
XWiki Platform's configuration files can be accessed through jsx and sx endpoints
43RISK
open ↗
Nucleihigh
XWiki - Information Disclosure
CVE-2025-55749HIGH
The XWiki Jetty package (XJetty) allows accessing any application file through URL
36RISK
open ↗
Nucleimedium
WSO2 Management Console - Authentication Bypass
CVE-2025-5605MEDIUM
Authentication Bypass via URI Manipulation in Multiple WSO2 Products' Management Console Leading to Partial Information Disclosure
28RISK
open ↗
Nucleihigh
LiquidFiles < 4.2 - User Enumeration via Password Reset
CVE-2025-56132HIGH
LiquidFiles filetransfer server is vulnerable to a user enumeration issue in its password reset functionality. The appli
56RISK
open ↗
Nucleimedium
Avigilon ACM - Host Header Injection
CVE-2025-56266CRITICAL
A Host Header Injection vulnerability in Avigilon ACM v7.10.0.20 allows attackers to execute arbitrary code via supplyin
43RISK
open ↗
Nucleihigh
Dify v1.6.0 - Server-Side Request Forgery
CVE-2025-56520MEDIUM
Dify v1.6.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component controllers.console.remote_
28RISK
open ↗
Nucleicritical
Datart v1.0.0-rc.3 - Remote Code Execution
CVE-2025-56819CRITICAL
An issue in Datart v.1.0.0-rc.3 allows a remote attacker to execute arbitrary code via the INIT connection parameter.
63RISK
open ↗
Nucleicritical
HyperComments <= 1.2.2 - Arbitrary Options Update
CVE-2025-5701HIGH
HyperComments <= 1.2.2 - Unauthenticated (Subscriber+) Arbitrary Options Update
36RISK
open ↗
Nucleicritical
Citrix NetScaler Memory Disclosure - CitrixBleed 2
CVE-2025-5777CRITICALunder attackransomware
NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread
100RISK
open ↗
Nucleimedium
Commvault Unauthenticated Password Disclosure (WT-2025-0047)
CVE-2025-57788MEDIUM
Unauthorized API Access Risk
28RISK
open ↗
Nucleimedium
Commvault Initial Administrator Login Process Vulnerability
CVE-2025-57789MEDIUM
Vulnerability in Initial Administrator Login Process
28RISK
open ↗
Nucleihigh
ESPHome - Authentication Bypass
CVE-2025-57808HIGH
ESP-IDF web_server basic auth bypass using empty or incomplete Authorization header
36RISK
open ↗
Nucleicritical
FreePBX - Remote Code Execution
CVE-2025-57819CRITICALunder attack
FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE
100RISK
open ↗
Nucleimedium
Next.js Middleware - Server-Side Request Forgery
CVE-2025-57822MEDIUM
Next.js Improper Middleware Redirect Handling Leads to SSRF
28RISK
open ↗
← previouspage 104 / 141next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.