MSRXTools / Websites
Exploited vulnerabilities, last 365 days
Every vulnerability CISA confirmed as exploited in the wild in the past year, live: php2shell, React2Shell, WordPress, SharePoint, Citrix, Fortinet and more. Search and filter.
Runs on our server
Loading tool…
Good to know
- The list is CISA's Known Exploited Vulnerabilities catalog: only CVEs with evidence of real attacks, not every published CVE.
- Patch anything here that you run, internet-facing systems first. Products marked “scanner recognises” are flagged automatically when you scan a site that runs them.
- The website scanner matches versions it can see (PHP, WordPress, Apache, nginx) and lists the rest for you to check by hand.
Related tools
Website vulnerability scanner
Paste a URL. Get a SWOT security report scored out of 10: HTTPS, TLS, headers, cookies, content, DNS and email, with fixes.Security headers analyser
Paste response headers from DevTools or curl -I and get the same header grading as the scanner, for pages we cannot reach.Content Security Policy evaluator
Find the gaps in a CSP: unsafe-inline, wildcards, CDN bypasses, missing object-src, base-uri and frame-ancestors.
Paste a URL. Get a SWOT security report scored out of 10: HTTPS, TLS, headers, cookies, content, DNS and email, with fixes.Security headers analyser
Paste response headers from DevTools or curl -I and get the same header grading as the scanner, for pages we cannot reach.Content Security Policy evaluator
Find the gaps in a CSP: unsafe-inline, wildcards, CDN bypasses, missing object-src, base-uri and frame-ancestors.