Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

75,902cataloged exploits

34,597CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,443Referência 21,624GitHub PoC 13,727VulnCheck XDB 8,410Nuclei 4,231Metasploit 3,467✓ verified onlyrecent popular risk

13,727 exploits

GitHub PoC★ 5

CVE-2023-46604 Apache ActiveMQ RCE exp 基于python

CVE-2023-46604CRITICALunder attackransomware08 Nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISK

GitHub PoC★ 2

Server Broken Access Control in Confluence - CVE-2023-22515

CVE-2023-22515CRITICALunder attackransomware08 Nov 2023

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited

100RISK

GitHub PoC★ 1

WinRAR cve-2023-38831-poc-generator

CVE-2023-38831HIGHunder attackransomware07 Nov 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RISK

GitHub PoC★ 5

Proof of Concept Exploit for CVE-2021-43609

CVE-2021-43609CRITICAL06 Nov 2023

An issue was discovered in Spiceworks Help Desk Server before 1.3.3. A Blind Boolean SQL injection vulnerability within

48RISK

GitHub PoC

d4rkb0n3/CVE-2022-24715-go

CVE-2022-24715HIGH06 Nov 2023

Arbitrary code execution for authenticated users in Icinga Web 2

46RISK

GitHub PoC★ 16

Android Kernel Vulnerability (CVE-2019-2215) temporary root PoC

CVE-2019-2215HIGHunder attack05 Nov 2023

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

98RISK

GitHub PoC★ 17

Wordpress Plugin Canto < 3.0.5 - Remote File Inclusion (RFI) and Remote Code Execution (RCE)

CVE-2023-3452CRITICAL05 Nov 2023

Canto <= 3.0.4 - Unauthenticated Remote File Inclusion

63RISK

GitHub PoC★ 9

Exploit for CVE-2023-37903

CVE-2023-37903CRITICAL05 Nov 2023

Sandbox Escape in vm2

48RISK

GitHub PoC

ayushx007/CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847HIGHunder attack05 Nov 2023

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISK

GitHub PoC

In this repository you will find the technical report of Nibbles, the exploit to abuse the CVE-2015-6967 and an autopwn tool in case you want to resolve the machine in HackTheBox

CVE-2015-6967—05 Nov 2023

Unrestricted file upload vulnerability in the My Image plugin in Nibbleblog before 4.0.5 allows remote administrators to

50RISK

GitHub PoC★ 27

WonderCMS Authenticated RCE - CVE-2023-41425

CVE-2023-41425MEDIUM05 Nov 2023

Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code

60RISK

GitHub PoC★ 5

The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE.

CVE-2023-5360—05 Nov 2023

Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload

60RISK

GitHub PoC★ 43

An Exploitation tool to exploit the confluence server that are vulnerable to CVE-2023-22518 Improper Authorization

CVE-2023-22518CRITICALunder attackransomware05 Nov 2023

All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authoriz

100RISK

GitHub PoC★ 40

evkl1d/CVE-2023-46604

CVE-2023-46604CRITICALunder attackransomware04 Nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISK

GitHub PoC★ 3

This is an exploit file which is used to check CVE-2021-21716 vulnerability

CVE-2023-21716CRITICAL04 Nov 2023

Microsoft Word Remote Code Execution Vulnerability

70RISK

GitHub PoC★ 126

Achieving a Reverse Shell Exploit for Apache ActiveMQ (CVE_2023-46604)

CVE-2023-46604CRITICALunder attackransomware03 Nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISK

GitHub PoC★ 7

An Exploitation script developed to exploit the CVE-2023-20198 Cisco zero day vulnerability on their IOS routers

CVE-2023-20198CRITICALunder attack03 Nov 2023

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RISK

GitHub PoC★ 3

An Exploitation script developed to exploit the CVE-2023-46747 which Pre Auth Remote Code Execution of f5-BIG Ip producs

CVE-2023-46747CRITICALunder attackransomware03 Nov 2023

BIG-IP Configuration utility unauthenticated remote code execution vulnerability

100RISK

GitHub PoC

Wordpress CVE-2023-5360

CVE-2023-5360—03 Nov 2023

Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload

60RISK

GitHub PoC

NestyF/SSH_Enum_CVE-2018-15473

CVE-2018-15473MEDIUM02 Nov 2023

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati

70RISK

GitHub PoC

sajaljat/CVE-2023-46980

CVE-2023-46980CRITICAL02 Nov 2023

An issue in Best Courier Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privile

48RISK

GitHub PoC★ 10

Exploit for the unauthenticated file upload vulnerability in WordPress's Royal Elementor Addons and Templates plugin (< 1.3.79). CVE-ID: CVE-2023-5360.

CVE-2023-5360—02 Nov 2023

Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload

60RISK

GitHub PoC★ 7

nvansluis/test_cve-2023-46747

CVE-2023-46747CRITICALunder attackransomware02 Nov 2023

BIG-IP Configuration utility unauthenticated remote code execution vulnerability

100RISK

GitHub PoC

jakedmurphy1/CVE-2023-46954

CVE-2023-46954CRITICAL02 Nov 2023

SQL Injection vulnerability in Relativity ODA LLC RelativityOne v.12.1.537.3 Patch 2 and earlier allows a remote attacke

48RISK

GitHub PoC★ 8

Checker for CVE-2023-22518 vulnerability on Confluence

CVE-2023-22518CRITICALunder attackransomware02 Nov 2023

All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authoriz

100RISK

GitHub PoC

SideCopy APT Group exploits CVE-2023-38831

CVE-2023-38831HIGHunder attackransomware01 Nov 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RISK

GitHub PoC

CVE-2023-46747 Criticle Auth Bypass

CVE-2023-46747CRITICALunder attackransomware01 Nov 2023

BIG-IP Configuration utility unauthenticated remote code execution vulnerability

100RISK

GitHub PoC★ 1

A simple bash script that exploits CVE-2021-22205 against vulnerable instances of gitlab

CVE-2021-22205CRITICALunder attackransomware01 Nov 2023

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati

100RISK

GitHub PoC★ 208

exploit for f5-big-ip RCE cve-2023-46747

CVE-2023-46747CRITICALunder attackransomware01 Nov 2023

BIG-IP Configuration utility unauthenticated remote code execution vulnerability

100RISK

GitHub PoC★ 2

maniak-academy/Mitigate-CVE-2023-46747

CVE-2023-46747CRITICALunder attackransomware01 Nov 2023

BIG-IP Configuration utility unauthenticated remote code execution vulnerability

100RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.