Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
71,886cataloged exploits
32,153CVEs with public exploitation
1,932lab-tested
AllExploit-DB 22,786Referência 19,978GitHub PoC 13,282VulnCheck XDB 8,176Nuclei 4,202Metasploit 3,462✓ verified onlyrecentpopularrisk
4,202 exploits
Nucleihigh
PrestaShop PireosPay - SQL Injection
In the module "PireosPay" (pireospay) before version 1.7.10 from 01generator.com for PrestaShop, a guest can perform SQL
30RISK
open ↗Nucleicritical
D-Link DAR-8000-10 - Command Injection
D-Link DAR-8000-10 sys1.php os command injection
70RISK
open ↗Nucleimedium
SPA-Cart eCommerce CMS 1.9.0.3 - Cross-Site Scripting
SPA-Cart eCommerce CMS search cross site scripting
55RISK
open ↗Nucleimedium
MooSocial 3.1.8 - Cross-Site Scripting
Cross Site Scripting vulnerability in mooSocial 3.1.8 allows a remote attacker to obtain sensitive information via a cra
18RISK
open ↗Nucleimedium
Apache Tomcat - HTTP Request Smuggling
Apache Tomcat: Trailer header parsing too lenient
28RISK
open ↗Nucleimedium
Frigate < 0.13.0 Beta 3 - Cross-Site Scripting
Frigate reflected XSS through `/<camera_name>` API endpoints
28RISK
open ↗Nucleimedium
PaperCut NG Unauthenticated XMLRPC Functionality
PaperCut NG Unauthenticated XMLRPC
28RISK
open ↗Nucleimedium
Leantime < 2.4 - Authenticated SQL Injection
Authenticated SQL Injection in leantime
28RISK
open ↗Nucleicritical
Viessmann Vitogate 300 - Remote Code Execution
In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute a
23RISK
open ↗Nucleihigh
qdPM 9.2 - Directory Traversal
qdPM 9.2 allows Directory Traversal to list files and directories by navigating to the /uploads URI.
18RISK
open ↗Nucleicritical
Gibbon LMS <= v25.0.01 - File Upload to RCE
GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because rubrics_visualise_saveAjax.phps does not
50RISK
open ↗Nucleicritical
WordPress Plugin Forminator 1.24.6 - Arbitrary File Upload
Forminator <= 1.24.6 - Unauthenticated Arbitrary File Upload
68RISK
open ↗Nucleicritical
Media Library Assistant < 3.09 - Remote Code Execution/Local File Inclusion
Media Library Assistant <= 3.09 - Unauthenticated Local/Remote File Inclusion & Remote Code Execution
85RISK
open ↗Nucleicritical
PrestaShop Step by Step products Pack - SQL Injection
In the module "Step by Step products Pack" (ndk_steppingpack) version 1.5.6 and before from NDK Design for PrestaShop, a
55RISK
open ↗Nucleicritical
cPH2 Charging Station v1.87.0 - OS Command Injection
An OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthen
65RISK
open ↗Nucleihigh
GL.iNet <= 4.3.7 - Arbitrary File Write
In GL.iNET GL-AR300M routers with firmware v4.3.7 it is possible to write arbitrary files through a path traversal attac
30RISK
open ↗Nucleicritical
TOTOLINK A3700R - Command Injection
An issue in TOTOLINK A3700R v.9.1.2u.6165_20211012 allows a remote attacker to execute arbitrary code via the FileName p
30RISK
open ↗Nucleicritical
Form-Maker < 1.15.20 - Unauthenticated Arbitrary File Upload
Form-Maker < 1.15.20 - Unauthenticated Arbitrary File Upload
63RISK
open ↗Nucleimedium
XWiki < 14.10.14 - Cross-Site Scripting
Reflected Cross-site scripting through revision parameter in content menu in XWiki Platform
43RISK
open ↗Nucleicritical
F5 BIG-IP - Unauthenticated RCE via AJP Smuggling
BIG-IP Configuration utility unauthenticated remote code execution vulnerability
100RISK
open ↗Nucleihigh
Ivanti ICS - Authentication Bypass
An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a re
100RISK
open ↗Nucleihigh
ISPConfig - PHP Code Injection
An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by
41RISK
open ↗Nucleihigh
Chaosblade < 1.7.4 - Remote Code Execution
exec.CommandContext in Chaosblade 0.3 through 1.7.3, when server mode is used, allows OS command execution via the cmd p
36RISK
open ↗Nucleihigh
Label Studio - Cross-Site Scripting
Label Studio XSS Vulnerability on Avatar Upload
36RISK
open ↗Nucleihigh
Label Studio - Sensitive Information Exposure
Object Relational Mapper Leak Vulnerability in Filtering Task in Label Studio
36RISK
open ↗Nucleihigh
PlayTube 3.0.1 - Information Disclosure
PlayTube Redirect information disclosure
28RISK
open ↗Nucleihigh
ManageEngine OpManager - Directory Traversal
A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A speciall
55RISK
open ↗Nucleicritical
SysAid Server - Remote Code Execution
In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a f
100RISK
open ↗Nucleicritical
PyArrow Flight RPC - Remote Code Execution
PyArrow, PyArrow: Arbitrary code execution when loading a malicious data file
23RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.