Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

75,526cataloged exploits
34,478CVEs with public exploitation
24,695lab-tested
75,526 exploits
GitHub PoC7
Privilege escalation in Fedora Linux via ABRT (Automatic Bug Reporting Tool): CVE-2025-12744
CVE-2025-12744HIGH18 Oct 2025
Abrt: command-injection in abrt leading to local privilege escalation
41RISK
open
GitHub PoC
Custom vulnerable VM (Ubuntu 14.04) designed for teaching multi-stage penetration testing. Features 10 interconnected challenges across Forensics, Web Exploitation (SQLi, XSS), Cryptography, and Kernel Exploitation (OverlayFS/CVE-2015-1328) to achieve full root compromise.
CVE-2015-132818 Oct 2025
The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does no
50RISK
open
GitHub PoC
CVE-2024-27956
CVE-2024-27956CRITICAL17 Oct 2025
WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability
85RISK
open
VulnCheck XDB
local
CVE-2017-100036717 Oct 2025
Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_
23RISK
open
VulnCheck XDB
local
CVE-2025-32463CRITICALunder attack17 Oct 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISK
open
VulnCheck XDB
local
CVE-2025-32463CRITICALunder attack17 Oct 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISK
open
GitHub PoC
autocode07/cisagov__check-cve-2019-19781.4142e02b
CVE-2019-19781CRITICALunder attackransomware17 Oct 2025
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th
100RISK
open
GitHub PoC1
secvulnhub/CVE-2025-32463-EXPLOIT
CVE-2025-32463CRITICALunder attack17 Oct 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISK
open
GitHub PoC1
Sudo Vulnerability Local PrivEsc (CVE-2025-32463) POC with Python
CVE-2025-32463CRITICALunder attack17 Oct 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISK
open
GitHub PoC
CVE-2017-1000367
CVE-2017-100036717 Oct 2025
Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_
23RISK
open
VulnCheck XDB
infoleak
CVE-2024-27956CRITICAL17 Oct 2025
WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability
85RISK
open
GitHub PoC
0axz-tools/CVE-2024-51793
CVE-2024-51793CRITICAL17 Oct 2025
WordPress RepairBuddy plugin <= 3.8115 - Arbitrary File Upload vulnerability
48RISK
open
VulnCheck XDB
local
CVE-2025-24990HIGHunder attack16 Oct 2025
Windows Agere Modem Driver Elevation of Privilege Vulnerability
71RISK
open
GitHub PoC
POC of CVE-2025-61882
CVE-2025-61882CRITICALunder attackransomware16 Oct 2025
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integratio
100RISK
open
GitHub PoC47
Tool that reproduces CVE-2025-55315 in ASP.NET Core.
CVE-2025-55315CRITICAL16 Oct 2025
ASP.NET Security Feature Bypass Vulnerability
60RISK
open
GitHub PoC1
Investigation into the XZ Utils backdoor (CVE-2024-3094): chronology, attack chain, risk to SSH, and supply-chain insights. Includes slides, sources, and mitigations (parity checks, attestations, or SBOMs, as well as SLSA)
CVE-2024-3094CRITICAL16 Oct 2025
Xz: malicious code in distributed source
70RISK
open
GitHub PoC1
The default configuration of LDAP on FortiOS v6.0.x to v6.2.0 does not check server identity for LDAP/S leading to MITM attacks. This PoC demos full exfiltration of credentials sent on the local subnet to an LDAP server that is easily impersonated.
CVE-2019-5591MEDIUMunder attack16 Oct 2025
A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept s
83RISK
open
GitHub PoC13
Proof of concept for CVE-2022-1364 against Alibaba's UC Browser
CVE-2022-1364HIGHunder attack16 Oct 2025
Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit
76RISK
open
GitHub PoC
PoC of CVE-2025-60751
CVE-2025-60751HIGH16 Oct 2025
GeographicLib 2.5 is vulnerable to Buffer Overflow in GeoConvert DMS::InternalDecode.
41RISK
open
VulnCheck XDB
client-side
CVE-2022-1364HIGHunder attack16 Oct 2025
Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit
76RISK
open
GitHub PoC151
Exploit for CVE-2025-11001 or CVE-2025-11002
CVE-2025-11001HIGH15 Oct 2025
7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability
46RISK
open
VulnCheck XDB
initial-access
CVE-2021-2476215 Oct 2025
Perfect Survey < 1.5.2 - Unauthenticated SQL Injection
60RISK
open
VulnCheck XDB
initial-access
CVE-2024-53677CRITICAL15 Oct 2025
Apache Struts: Mixing setters for uploaded files and normal fields can allow bypass file upload checks
70RISK
open
GitHub PoC
CVE-2024-53677 관련 컨설턴트용 툴 개발
CVE-2024-53677CRITICAL15 Oct 2025
Apache Struts: Mixing setters for uploaded files and normal fields can allow bypass file upload checks
70RISK
open
VulnCheck XDB
local
CVE-2025-11001HIGH15 Oct 2025
7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability
46RISK
open
GitHub PoC1
This repo shows an exploit to CVE-2021-24762. This is an Blind SQLi exploit that, on default config, greps the admin password.
CVE-2021-2476215 Oct 2025
Perfect Survey < 1.5.2 - Unauthenticated SQL Injection
60RISK
open
VulnCheck XDB
initial-access
CVE-2017-10271HIGHunder attackransomware15 Oct 2025
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte
100RISK
open
GitHub PoC8
BYOVD research performed by KOSEC. Includes vulnerable drivers and writeups (CVE-2026-0828).
CVE-2026-0828HIGH15 Oct 2025
Kernel driver vulnerability in Safetica Endpoint Client
41RISK
open
GitHub PoC
Oracle WebLogic WLS-WSAT Remote Code Execution Exploit (CVE-2017-10271)
CVE-2017-10271HIGHunder attackransomware15 Oct 2025
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte
100RISK
open
GitHub PoC20
PoC for CVE-2025-25198: automated Host header poisoning test for Mailcow - HTTPS listener, automatic cookie/CSRF handling, captures first reset link.
CVE-2025-25198HIGH14 Oct 2025
mailcow: dockerized vulnerable to password reset poisoning
41RISK
open
previouspage 192 / 2,518next

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.