A searchable exploit intelligence database connecting vulnerabilities to real, testable proof-of-concepts.
The exploit search engine that cuts research time to identify exploits
Lesion Search ingests the entire CVE dataset and breaks each record into dozens of searchable factors — then maps every CVE to the working exploits, PoC code, and references scattered across the web. Advanced filtering and version-aware search let security researchers quickly pin down whether something is actually exploitable — all in a single search instead of ten browser tabs.
File upload logic in Apache Struts is flawed. An attacker...
So from Apache Struts 2.0.0 to 2.5.29, still some of the
Missing XML Validation vulnerability in Apache Struts
A vulnerability, which was classified as critical, has been found in
Structured CVE intelligence mapped to real, testable exploits and proof-of-concepts.
Query by keyword, vendor, product, version, CVE, exploit type, or attack vector.
Automatically links vulnerabilities to public exploits, GitHub PoCs, and research writeups.
Community driven points system to reward the hard working security community for there CVEs and writeups.
Save your queries into folders and rerun them anytime, no rebuilding the same filters twice.
Instantly view vendor advisories, patches, mitigations, and remediation references.
Pinpoint whether a specific product version is affected instead of guessing across version ranges.
You're not just paying for features—you're funding automation, integrations, and the support that keeps the vision going.
Eliminate fragmented vulnerability research with a centralized, structured exploit database.