Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

75,432cataloged exploits
34,424CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,493GitHub PoC 13,618VulnCheck XDB 8,198Nuclei 4,217Metasploit 3,463✓ verified onlyrecentpopularrisk
13,334 exploits
GitHub PoC
Repository for internship test task.
CVE-2024-25600CRITICAL26 Jan 2025
WordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability
85RISK
open ↗
GitHub PoC★ 1
CVE-2016-2555 Exploit
CVE-2016-2555—26 Jan 2025
SQL injection vulnerability in include/lib/mysql_connect.inc.php in ATutor 2.2.1 allows remote attackers to execute arbi
60RISK
open ↗
GitHub PoC★ 4
Exploit for WordPress File Upload Plugin - All versions up to 4.24.11 are vulnerable.
CVE-2024-9047CRITICAL25 Jan 2025
WordPress File Upload <= 4.24.11 - Unauthenticated Path Traversal to Arbitrary File Read and Deletion in wfu_file_downloader.php
85RISK
open ↗
GitHub PoC★ 8
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS and FortiProxy may allow a remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.
CVE-2024-55591CRITICALunder attackransomware24 Jan 2025
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 thro
100RISK
open ↗
GitHub PoC★ 1
Exploit for CVE-2023-4220
CVE-2023-4220HIGH24 Jan 2025
Chamilo LMS Unauthenticated Big Upload File Remote Code Execution
78RISK
open ↗
GitHub PoC★ 1
CVE-2024-3673 Exploit: Local File Inclusion in Web Directory Free WordPress Plugin ( before 1.7.3 )
CVE-2024-3673CRITICAL24 Jan 2025
Web Directory Free < 1.7.3 - Unauthenticated LFI
63RISK
open ↗
GitHub PoC
This repository contains informaion about the Fortigate firewall vulnerability (CVE-2022-40684) and affected data that were publicly disclosed by the Belsen Group. This information is being shared for security research and defensive purposes to help organizations identify if they were impacted.
CVE-2022-40684CRITICALunder attackransomware24 Jan 2025
An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an
100RISK
open ↗
GitHub PoC
CVE-2017-7921 exploit. Allows admin password retrieval and automatic snapshot download.
CVE-2017-7921CRITICALunder attack24 Jan 2025
An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16
100RISK
open ↗
GitHub PoC★ 1
Proof of Concept for CVE-2024-45337 against Gitea and Forgejo
CVE-2024-45337CRITICAL24 Jan 2025
Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto
48RISK
open ↗
GitHub PoC★ 1
Course Booking System <= 6.0.5 - Unauthenticated SQL Injection
CVE-2025-22785CRITICAL23 Jan 2025
WordPress Course Booking System plugin <= 6.0.6 - SQL Injection vulnerability
63RISK
open ↗
GitHub PoC★ 1
XalfiE/Fortigate-Belsen-Leak-Dump-CVE-2022-40684-
CVE-2022-40684CRITICALunder attackransomware23 Jan 2025
An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an
100RISK
open ↗
GitHub PoC
CVE-2024-38077-POC
CVE-2024-38077CRITICAL23 Jan 2025
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
70RISK
open ↗
GitHub PoC★ 2
ExploitDB CVE-2024-50379 a vulnerability that enables attackers to upload a JSP shell to a vulnerable server and execute commands remotely. The exploit is especially effective when the /uploads directory is either unprotected or missing on the target server.
CVE-2024-50379CRITICAL23 Jan 2025
Apache Tomcat: RCE due to TOCTOU issue in JSP compilation
60RISK
open ↗
GitHub PoC★ 155
This repository contains POC scenarios as part of CVE-2025-0411 MotW bypass.
CVE-2025-0411HIGHunder attack22 Jan 2025
7-Zip Mark-of-the-Web Bypass Vulnerability
83RISK
open ↗
GitHub PoC★ 3
sysirq/fortios-auth-bypass-exploit-CVE-2024-55591
CVE-2024-55591CRITICALunder attackransomware22 Jan 2025
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 thro
100RISK
open ↗
GitHub PoC
备份的CVE
CVE-2024-6460CRITICAL22 Jan 2025
Grow by Tradedoubler <= 2.0.21 - Unauthenticated LFI
63RISK
open ↗
GitHub PoC
Exploit for CVE-2024-53704 - SonicWall SonicOS SSLVPN authentication bypass
CVE-2024-53704HIGHunder attackransomware22 Jan 2025
An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authe
100RISK
open ↗
GitHub PoC
In this project, I exploited the CVE-2024-27198-RCE vulnerability to perform a remote code execution (RCE) attack on a vulnerable TeamCity server.
CVE-2024-27198CRITICALunder attackransomware22 Jan 2025
In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible
100RISK
open ↗
GitHub PoC
Check Point Security Gateways RCE via CVE-2021-40438
CVE-2021-40438CRITICALunder attackransomware22 Jan 2025
mod_proxy SSRF
100RISK
open ↗
GitHub PoC★ 2
Exploit for CVE-2025-0282: A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for ZTA gateways
CVE-2025-0282CRITICALunder attackransomware22 Jan 2025
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7
100RISK
open ↗
GitHub PoC
ekcrsm/CVE-2024-23733
CVE-2024-23733HIGH21 Jan 2025
The /WmAdmin/,/invoke/vm.server/login login page in the Integration Server in Software AG webMethods 10.15.0 before Core
41RISK
open ↗
GitHub PoC★ 26
sysirq/fortios-auth-bypass-poc-CVE-2024-55591
CVE-2024-55591CRITICALunder attackransomware21 Jan 2025
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 thro
100RISK
open ↗
GitHub PoC
Grow by Tradedoubler < 2.0.22 - Unauthenticated LFI
CVE-2024-6460CRITICAL21 Jan 2025
Grow by Tradedoubler <= 2.0.21 - Unauthenticated LFI
63RISK
open ↗
GitHub PoC★ 8
This is a modified version of the CVE-2024-41570 SSRF PoC from @chebuya chained with the auth RCE exploit from @hyperreality. This exploit executes code remotely to a target due to multiple vulnerabilities in Havoc C2 Framework. (https://github.com/HavocFramework/Havoc)
CVE-2024-41570CRITICAL21 Jan 2025
An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7 allows attackers to send
48RISK
open ↗
GitHub PoC★ 4
themirze/cve-2024-12084
CVE-2024-12084CRITICAL21 Jan 2025
Rsync: heap buffer overflow in rsync due to improper checksum length handling
70RISK
open ↗
GitHub PoC★ 1
CVE-2022-0847
CVE-2022-0847HIGHunder attack21 Jan 2025
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RISK
open ↗
GitHub PoC★ 12
Automated Reverse Shell Exploit via WebSocket | Havoc-C2-SSRF with RCE
CVE-2024-41570CRITICAL21 Jan 2025
An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7 allows attackers to send
48RISK
open ↗
GitHub PoC
bananoname/CVE-2024-49138-POC
CVE-2024-49138HIGHunder attack21 Jan 2025
Windows Common Log File System Driver Elevation of Privilege Vulnerability
76RISK
open ↗
GitHub PoC★ 2
POC for CVE-2023-40028: Ghost CMS Arbitrary File Read
CVE-2023-40028MEDIUM20 Jan 2025
Arbitrary file read via symlinks in Ghost
45RISK
open ↗
GitHub PoC
调试环境
CVE-2021-44228CRITICALunder attackransomware20 Jan 2025
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
open ↗
← previouspage 172 / 445next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.