State now. Since yesterday: +2 tier promotions, 0 known-exploited vulnerability additions, 4 leak-site claims, and 4 confirmed breaches.
Public exploits
Browse public exploit and proof-of-concept metadata linked to the Common Vulnerabilities and Exposures (CVE) identifiers targeted, without hosting or mirroring exploit code.
Public exploit and proof-of-concept entries from Exploit-DB, maintained by OffSec, linked to the Common Vulnerabilities and Exposures (CVE) identifiers they target. This page carries metadata and links only, and never hosts or mirrors exploit code: every entry links out to its Exploit-DB page.
Why now: 11 public exploit records were published in the last 30 days.
Source: Exploit-DB (OffSec)
Type: Exploit-DB category (web application, denial of service, local, and remote).
Showing the newest 5,000 of 46,709 Exploit-DB entries, published since 2019-09-02. Filters, search, and the all-dates view cover every entry and load as needed.
Solid CVE chips open the record in the vulnerabilities table. Dashed chips are not tracked here.
About this data
Entries come from the Exploit-DB metadata index, maintained by OffSec. This page tracks metadata and links only: the title, publication date, exploit type, target platform, Exploit-DB's own verification flag, and the CVE identifiers each entry references. It never hosts, mirrors, or links to exploit code directly; the EDB column links to the entry's page on Exploit-DB, where the metadata and any code live. A CVE this tracker follows is a link into the vulnerabilities table; an untracked CVE is shown as plain text. The Verified badge is Exploit-DB's flag, not a verification by this tracker. The published-date window filters the same way the vulnerabilities view does: a segment shows only entries published within it, and an entry with no publication date appears under All only.
Browse every record in stable static pages, for search engines and no-JavaScript access to the full catalog.
Exploit-DB data is provided by Exploit-DB (OffSec) and is licensed under GPL-2.0. There is also an Exploit-DB RSS feed.
How this is computed
Records come from the Exploit Database metadata index. Publication windows use the source date, undated entries appear only under All, and this site publishes metadata and links rather than exploit code.
Method reviewed on .