Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

75,902cataloged exploits
34,597CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,624GitHub PoC 13,727VulnCheck XDB 8,410Nuclei 4,231Metasploit 3,467✓ verified onlyrecentpopularrisk
13,727 exploits
GitHub PoC★ 13
Quick test for CVE-2023-26025 behaviours
CVE-2023-36025HIGHunder attack17 Nov 2023
Windows SmartScreen Security Feature Bypass Vulnerability
93RISK
open ↗
GitHub PoC★ 52
exploit for cve-2023-47246 SysAid RCE (shell upload)
CVE-2023-47246CRITICALunder attackransomware17 Nov 2023
In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a f
100RISK
open ↗
GitHub PoC★ 2
CVE-2023-46604环境复现包
CVE-2023-46604CRITICALunder attackransomware16 Nov 2023
Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack
100RISK
open ↗
GitHub PoC
SynixCyberCrimeMY CVE Exploiter By SamuraiMelayu1337 & ?/h4zzzzzz.scc
CVE-2022-29464CRITICALunder attackransomware16 Nov 2023
Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file
100RISK
open ↗
GitHub PoC★ 64
CVE-2023-20198 Exploit PoC
CVE-2023-20198CRITICALunder attack16 Nov 2023
Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS
100RISK
open ↗
GitHub PoC
Ansible Playbook for CVE-2023-36845(Juniper Networks Junos OS 远程代码执行漏洞)
CVE-2023-36845CRITICALunder attack15 Nov 2023
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RISK
open ↗
GitHub PoC
POC repo for CVE-2023-46604
CVE-2023-46604CRITICALunder attackransomware15 Nov 2023
Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack
100RISK
open ↗
GitHub PoC★ 4
WinRAR-6.22、CVE-2023-38831、CNNVD-202308-1943、DM-202307-003730、QVD-2023-19572漏洞复现
CVE-2023-38831HIGHunder attackransomware15 Nov 2023
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RISK
open ↗
GitHub PoC
NataliSemi/-CVE-2022-44268
CVE-2022-44268MEDIUM14 Nov 2023
ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulti
55RISK
open ↗
GitHub PoC★ 2
An improved POC exploit based on the reported CVE on exploitdb
CVE-2023-32707HIGH14 Nov 2023
‘edit_user’ Capability Privilege Escalation
78RISK
open ↗
GitHub PoC★ 3
MrR0b0t19/CVE-2023-41064
CVE-2023-41064HIGHunder attack13 Nov 2023
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1
76RISK
open ↗
GitHub PoC
Log4j Vulnerability RCE - CVE-2021-44228
CVE-2021-44228CRITICALunder attackransomware13 Nov 2023
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
open ↗
GitHub PoC
Обнаружение эксплойта CVE-2023-28252
CVE-2023-28252HIGHunder attackransomware13 Nov 2023
Windows Common Log File System Driver Elevation of Privilege Vulnerability
98RISK
open ↗
GitHub PoC
Spring4Shell Vulnerability RCE - CVE-2022-22965
CVE-2022-22965CRITICALunder attack12 Nov 2023
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISK
open ↗
GitHub PoC★ 18
This script leverages CVE-2023046604 (Apache ActiveMQ) to generate a pseudo shell. The vulnerability allows for remote code execution due to unsafe deserialization within the OpenWire protocol.
CVE-2023-46604CRITICALunder attackransomware12 Nov 2023
Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack
100RISK
open ↗
GitHub PoC
A simple exploit for CVE-2019-2725.
CVE-2019-2725HIGHunder attackransomware11 Nov 2023
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte
100RISK
open ↗
GitHub PoC★ 3
huiwen-yayaya/CVE-2023-4863
CVE-2023-4863HIGHunder attack11 Nov 2023
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to
93RISK
open ↗
GitHub PoC
ersinerenler/CVE-2023-46022-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-Vulnerability
CVE-2023-46022—11 Nov 2023
SQL Injection vulnerability in delete.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands
23RISK
open ↗
GitHub PoC★ 16
Examples for Implementing cve-2023-44487 ( HTTP/2 Rapid Reset Attack ) Concept
CVE-2023-44487HIGHunder attack10 Nov 2023
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISK
open ↗
GitHub PoC
exp
CVE-2023-34039CRITICAL10 Nov 2023
Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key g
75RISK
open ↗
GitHub PoC★ 3
h3x3h0g/ActiveMQ-RCE-CVE-2023-46604-Write-up
CVE-2023-46604CRITICALunder attackransomware09 Nov 2023
Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack
100RISK
open ↗
GitHub PoC
olingo99/CVE-2019-15107
CVE-2019-15107CRITICALunder attackransomware09 Nov 2023
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera
100RISK
open ↗
GitHub PoC
cve-2019-9978 PoC
CVE-2019-9978MEDIUMunder attack09 Nov 2023
The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_optio
100RISK
open ↗
GitHub PoC★ 5
Exploit CVE-2023-22518
CVE-2023-22518CRITICALunder attackransomware09 Nov 2023
All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authoriz
100RISK
open ↗
GitHub PoC★ 45
Takeover Account OpenSSH
CVE-2023-38408CRITICAL09 Nov 2023
The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remot
70RISK
open ↗
GitHub PoC★ 23
配合 CVE-2023-22515 后台上传jar包实现RCE
CVE-2023-22515CRITICALunder attackransomware09 Nov 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISK
open ↗
GitHub PoC
Takeover of Oracle WebLogic Server
CVE-2020-14882CRITICALunder attack09 Nov 2023
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISK
open ↗
GitHub PoC★ 2
Server Broken Access Control in Confluence - CVE-2023-22515
CVE-2023-22515CRITICALunder attackransomware08 Nov 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISK
open ↗
GitHub PoC★ 6
Highly configurable tool to check a server's vulnerability against CVE-2023-44487 by rapidly sending HEADERS and RST_STREAM frames and documenting the server's responses.
CVE-2023-44487HIGHunder attack08 Nov 2023
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISK
open ↗
GitHub PoC★ 5
CVE-2023-46604 Apache ActiveMQ RCE exp 基于python
CVE-2023-46604CRITICALunder attackransomware08 Nov 2023
Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack
100RISK
open ↗
← previouspage 251 / 458next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.