Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,062cataloged exploits
31,617CVEs with public exploitation
0lab-tested
8,069 exploits
VulnCheck XDB
info-leak
CVE-2026-35616CRITICALunder attack20 Apr 2026
A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated atta
100RISK
open
VulnCheck XDB
local
CVE-2021-3493HIGHunder attack20 Apr 2026
The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o
98RISK
open
VulnCheck XDB
initial-access
CVE-2026-34197HIGHunder attack20 Apr 2026
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans
100RISK
open
VulnCheck XDB
initial-access
CVE-2025-2563HIGH20 Apr 2026
User Registration & Membership < 4.1.2- Unauthenticated Privilege Escalation
68RISK
open
VulnCheck XDB
initial-access
CVE-2026-35616CRITICALunder attack19 Apr 2026
A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated atta
100RISK
open
VulnCheck XDB
remote-with-credentials
CVE-2023-33538HIGHunder attack19 Apr 2026
TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerabili
83RISK
open
VulnCheck XDB
initial-access
CVE-2026-39808CRITICALunder attack18 Apr 2026
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet F
100RISK
open
VulnCheck XDB
client-side
CVE-2026-25253HIGH18 Apr 2026
OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically mak
41RISK
open
VulnCheck XDB
initial-access
CVE-2026-4631CRITICAL18 Apr 2026
Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection
68RISK
open
VulnCheck XDB
initial-access
CVE-2025-13342CRITICAL18 Apr 2026
Frontend Admin by DynamiApps <= 3.28.20 - Unauthenticated Arbitrary Options Update
48RISK
open
VulnCheck XDB
initial-access
CVE-2025-15030CRITICAL18 Apr 2026
User Profile Builder < 3.15.2 - Unauthenticated Arbitrary Password Reset
48RISK
open
VulnCheck XDB
initial-access
CVE-2025-2563HIGH18 Apr 2026
User Registration & Membership < 4.1.2- Unauthenticated Privilege Escalation
68RISK
open
VulnCheck XDB
initial-access
CVE-2026-39987CRITICALunder attack18 Apr 2026
marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass
100RISK
open
VulnCheck XDB
initial-access
CVE-2026-1492CRITICAL18 Apr 2026
User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation via Membership Registration
68RISK
open
VulnCheck XDB
initial-access
CVE-2026-27542CRITICAL18 Apr 2026
WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Privilege Escalation vulnerability
48RISK
open
VulnCheck XDB
initial-access
CVE-2026-0740CRITICAL17 Apr 2026
Ninja Forms - File Upload <= 3.3.26 - Unauthenticated Arbitrary File Upload
75RISK
open
VulnCheck XDB
initial-access
CVE-2026-33032CRITICAL17 Apr 2026
Nginx UI: Unauthenticated MCP Endpoint Allows Remote Nginx Takeover
75RISK
open
VulnCheck XDB
remote-with-credentials
CVE-2026-26980CRITICAL17 Apr 2026
Ghost has a SQL Injection in its Content API
75RISK
open
VulnCheck XDB
initial-access
CVE-2023-27163MEDIUM17 Apr 2026
request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baske
48RISK
open
VulnCheck XDB
initial-access
CVE-2025-8110HIGHunder attack17 Apr 2026
File overwrite in file update API in Gogs
100RISK
open
VulnCheck XDB
local
CVE-2021-3560HIGHunder attack17 Apr 2026
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RISK
open
VulnCheck XDB
initial-access
CVE-2024-42009CRITICALunder attack16 Apr 2026
A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to stea
100RISK
open
VulnCheck XDB
initial-access
CVE-2025-49113CRITICALunder attack16 Apr 2026
Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the
100RISK
open
VulnCheck XDB
initial-access
CVE-2026-21858CRITICAL16 Apr 2026
n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling
85RISK
open
VulnCheck XDB
initial-access
CVE-2025-24893CRITICALunder attack16 Apr 2026
Remote code execution as guest via SolrSearchMacros request in xwiki
100RISK
open
VulnCheck XDB
remote-with-credentials
CVE-2025-59528CRITICAL16 Apr 2026
Flowise has Remote Code Execution vulnerability
85RISK
open
VulnCheck XDB
local
CVE-2024-30088HIGHunder attackransomware16 Apr 2026
Windows Kernel Elevation of Privilege Vulnerability
83RISK
open
VulnCheck XDB
remote-with-credentials
CVE-2025-59528CRITICAL15 Apr 2026
Flowise has Remote Code Execution vulnerability
85RISK
open
VulnCheck XDB
remote-with-credentials
CVE-2025-59528CRITICAL15 Apr 2026
Flowise has Remote Code Execution vulnerability
85RISK
open
VulnCheck XDB
initial-access
CVE-2026-39808CRITICALunder attack15 Apr 2026
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet F
100RISK
open

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.