Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
75,589cataloged exploits
34,508CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,554GitHub PoC 13,689VulnCheck XDB 8,216Nuclei 4,223Metasploit 3,464✓ verified onlyrecentpopularrisk
13,689 exploits
GitHub PoC★ 3
Vulnerability in PHP Phar files, due to buffer overflow, arises from insufficient length checks on file names within the Phar archive. Malicious actors can craft Phar files with long file names, leading to buffer overflow and potential execution of malicious code or data leakage. This vulnerability can be exploited for code execution CVE-2023-3824
Buffer overflow and overread in phar_dir_read()
53RISK
open ↗GitHub PoC★ 20
A proof of concept of the path traversal vulnerability in the python AioHTTP library =< 3.9.1
aiohttp.web.static(follow_symlinks=True) is vulnerable to directory traversal
70RISK
open ↗GitHub PoC★ 54
Fortinet FortiClient EMS SQL Injection
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS versio
100RISK
open ↗GitHub PoC
Proof-of-concept exploit for CVE-2024-25153.
Remote Code Execution in FileCatalyst Workflow 5.x prior to 5.1.6 Build 114
60RISK
open ↗GitHub PoC★ 1
K3ysTr0K3R/CVE-2017-12617-EXPLOIT
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTT
100RISK
open ↗GitHub PoC★ 12
The PoC demonstrates the potential for remote code execution by exploiting the identified security flaw.
A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0
100RISK
open ↗GitHub PoC★ 7
jakabakos/CVE-2023-43208-mirth-connect-rce-poc
NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that
100RISK
open ↗GitHub PoC★ 4
sxyrxyy/aiohttp-exploit-CVE-2024-23334-certstream
aiohttp.web.static(follow_symlinks=True) is vulnerable to directory traversal
70RISK
open ↗GitHub PoC★ 3
Exploit for Open eClass – CVE-2024-26503: Unrestricted File Upload Leads to Remote Code Execution
Unrestricted File Upload vulnerability in Greek Universities Network Open eClass v.3.15 and earlier allows attackers to
48RISK
open ↗GitHub PoC
This is a potentially vulnerable Java web application containing Log4j affected by log4shell(CVE-2021-44228).
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
open ↗GitHub PoC★ 29
A PoC exploit for CVE-2023-43208 - Mirth Connect Remote Code Execution (RCE)
NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that
100RISK
open ↗GitHub PoC
exploit for f5-big-ip RCE cve-2023-46747
BIG-IP Configuration utility unauthenticated remote code execution vulnerability
100RISK
open ↗GitHub PoC
manrop2702/CVE-2020-7961
Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary c
100RISK
open ↗GitHub PoC
A CLI tool for detecting CVE-2023-20048 vulnerability in Cisco Firepower Management Center.
A vulnerability in the web services interface of Cisco Firepower Management Center (FMC) Software could allow an authent
53RISK
open ↗GitHub PoC
corelight/CVE-2021-38647-noimages
Open Management Infrastructure Remote Code Execution Vulnerability
100RISK
open ↗GitHub PoC★ 16
Chequea si tu firewall es vulnerable a CVE-2024-21762 (RCE sin autenticación)
A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0
100RISK
open ↗GitHub PoC★ 150
out-of-bounds write in Fortinet FortiOS CVE-2024-21762 vulnerability
A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0
100RISK
open ↗GitHub PoC★ 3
hienkiet/CVE-2022-21445-for-12.2.1.3.0-Weblogic
Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF
90RISK
open ↗GitHub PoC★ 42
Proof-of-concept exploit for CVE-2024-25153.
Remote Code Execution in FileCatalyst Workflow 5.x prior to 5.1.6 Build 114
60RISK
open ↗GitHub PoC★ 1
CVE-2023-23752 Data Extractor
[20230201] - Core - Improper access check in webservice endpoints
100RISK
open ↗GitHub PoC★ 92
Additional resources for leaking and exploiting ObjRefs via HTTP .NET Remoting (CVE-2024-29059)
.NET Framework Information Disclosure Vulnerability
100RISK
open ↗GitHub PoC
CSV Injection in Addactis IBNRS 3.10.3.107
CSV Injection vulnerability in Addactis IBNRS v.3.10.3.107 allows a remote attacker to execute arbitrary code via a craf
48RISK
open ↗GitHub PoC★ 17
Demo showing Claude Opus does not find CVE-2023-0266
Use after free in SNDRV_CTL_IOCTL_ELEM in Linux Kernel
71RISK
open ↗GitHub PoC★ 1
CharonDefalt/CVE-2024-27198-RCE
In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible
100RISK
open ↗GitHub PoC★ 8
A PoC exploit for CVE-2024-27198 - JetBrains TeamCity Authentication Bypass
In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible
100RISK
open ↗GitHub PoC★ 3
passwa11/CVE-2024-27198-RCE
In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible
100RISK
open ↗GitHub PoC
Exploit for CVE-2024-22393 Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer.
Apache Answer: Pixel Flood Attack by uploading the large pixel file
48RISK
open ↗GitHub PoC
Subrion 4.2.1 allows XSS via the panel/members/ Username, Full Name, or Email field, aka an "Admin Member JSON Update" issue.
Subrion 4.2.1 allows XSS via the panel/members/ Username, Full Name, or Email field, aka an "Admin Member JSON Update" i
23RISK
open ↗GitHub PoC★ 39
hd3s5aa/CVE-2023-21674
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
83RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.