CVE & Exploit Intelligence Database

Updated 2h ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

337,098 CVEs tracked 53,218 with exploits 4,684 exploited in wild 1,536 CISA KEV 3,912 Nuclei templates 37,750 vendors 42,417 researchers

5 results Clear all

CVE-2023-0669 7.2 HIGH KEV RANSOMWARE 8 PoCs Analysis NUCLEI EPSS 0.94

Fortra GoAnywhere MFT Unsafe Deserialization RCE

Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. This issue was patched in version 7.1.2.

CWE-502 Feb 06, 2023

CVE-2020-11023 6.9 MEDIUM KEV 7 PoCs Analysis EPSS 0.36

jQuery <3.5.0 - XSS

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

CWE-79 Apr 29, 2020

CVE-2019-5418 7.5 HIGH KEV 12 PoCs Analysis NUCLEI EPSS 0.94

Ruby On Rails File Content Disclosure (

There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the target system's filesystem to be exposed.

CWE-22 Mar 27, 2019

CVE-2016-0752 7.5 HIGH KEV 4 PoCs Analysis EPSS 0.93

Ruby on Rails Dynamic Render File Upload Remote Code Execution

Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.

CWE-22 Feb 16, 2016

CVE-2014-0130 7.5 HIGH KEV 1 PoC Analysis EPSS 0.45

Ruby on Rails <3.2.18, <4.0.5, <4.1.1 - Path Traversal

Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5, and 4.1.x before 4.1.1, when certain route globbing configurations are enabled, allows remote attackers to read arbitrary files via a crafted request.

CWE-22 May 07, 2014