Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,679cataloged exploits

40,329CVEs with public exploitation

24,696lab-tested

All Referência 26,150Exploit-DB 24,488GitHub PoC 17,946VulnCheck XDB 10,016Nuclei 4,547Metasploit 3,532✓ verified onlyrecent popular risk

17,946 exploits

GitHub PoC★ 1

Proof-Of-Concept to check privileges of af_packet.c for validating the privileges acquired by any hacker upon successful exploitation of CVE-2021-22600

CVE-2021-22600MEDIUMunder attack17 Sep 2025

Double Free in net/packet/af_packet.c leading to priviledge escalation

63RISK

GitHub PoC

PoC for CVE-2025-20265 Cisco Secure FMC Software RADIUS Remote Code Execution Vulnerability

CVE-2025-20265CRITICAL16 Sep 2025

Cisco Secure Firewall Management Center Software Radius Remote Code Execution Vulnerability

53RISK

GitHub PoC

A Rust implementation of the CVE-2014-6287 exploit targeting Rejetto HTTP File Server (HFS) versions 2.3x before 2.3c.

CVE-2014-6287CRITICALunder attack16 Sep 2025

The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c a

100RISK

GitHub PoC★ 2

RedArrow3.2 是一款用于渗透测试ThinkPHP 5.0.23 远程命令执行漏洞(CVE-2018-20062)的图形化工具。

CVE-2018-20062CRITICALunder attack16 Sep 2025

An issue was discovered in NoneCms V1.3. thinkphp/library/think/App.php allows remote attackers to execute arbitrary PHP

100RISK

GitHub PoC

2 web apps vulnerable to CVE-2025-27210

CVE-2025-27210HIGH16 Sep 2025

An incomplete fix has been identified for CVE-2025-23084 in Node.js, specifically affecting Windows device names like CO

46RISK

GitHub PoC

CVE-2019-3396 confluence SSTI RCE

CVE-2019-3396CRITICALunder attackransomware16 Sep 2025

The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from vers

100RISK

GitHub PoC★ 2

Example PoC for CVE-2025-24813 (Tomcat RCE)

CVE-2025-24813CRITICALunder attack16 Sep 2025

Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

100RISK

GitHub PoC★ 3

Langflow Remote Code Execution

CVE-2025-3248CRITICALunder attackransomware15 Sep 2025

Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code

100RISK

GitHub PoC

tcetin704/CVE-2017-12611

CVE-2017-12611—15 Sep 2025

In Apache Struts 2.0.0 through 2.3.33 and 2.5 through 2.5.10.1, using an unintentional expression in a Freemarker tag in

60RISK

GitHub PoC

Authentication bypass vulnerability in versions of the CrushFTP server.

CVE-2025-31161CRITICALunder attackransomware15 Sep 2025

CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unle

100RISK

GitHub PoC

0xDTC/js2py-Sandbox-Escape-CVE-2024-28397-RCE

CVE-2024-28397MEDIUM15 Sep 2025

An issue in the component js2py.disable_pyimport() of js2py up to v0.74 allows attackers to execute arbitrary code via a

48RISK

GitHub PoC

tranphuc2005/CVE-2017-9822

CVE-2017-9822HIGHunder attackransomware15 Sep 2025

DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code e

100RISK

GitHub PoC

shoucheng3/apache__dolphinscheduler_CVE-2023-49109_3_2_1_fixed

CVE-2023-49109CRITICAL14 Sep 2025

Remote Code Execution in Apache Dolphinscheduler

48RISK

GitHub PoC

A proof-of-concept exploit for WinRAR vulnerability (CVE-2025-8088) affecting versions 7.12 and lower. This tool creates a malicious RAR archive that embeds payloads in Alternate Data Streams (ADS) with path traversal, potentially leading to arbitrary code execution.

CVE-2025-8088HIGHunder attackransomware14 Sep 2025

Path traversal vulnerability in WinRAR

93RISK

GitHub PoC

Documented CVE-2021-41773 (Apache HTTP Server path traversal, CVSS 9.8) — produced CVSS breakdown, impact assessment, and a mitigation plan (patch to 2.4.51+, CGI disable, firewall) and published the analysis on GitHub.

CVE-2021-41773HIGHunder attackransomware14 Sep 2025

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISK

GitHub PoC

Shubhankargupta691/CVE-2024-42009

CVE-2024-42009CRITICALunder attack14 Sep 2025

A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to stea

100RISK

GitHub PoC

CVE-2025-26264 - GeoVision GV-ASWeb with the version 6.1.2.0 or less, contains a Remote Code Execution (RCE) vulnerability within its Notification Settings feature. An authenticated attacker with "System Settings" privileges in ASWeb can exploit this flaw to execute arbitrary commands on the server, leading to a full system compromise.

CVE-2025-26264HIGH14 Sep 2025

GeoVision GV-ASWeb with the version 6.1.2.0 or less (fixed in 6.2.0), contains a Remote Code Execution (RCE) vulnerabili

46RISK

GitHub PoC★ 1

Safe, read-only SQL Injection checker for FreePBX (CVE-2025-57819), using error/boolean/time-based techniques with per-parameter verdicts and JSON reporting.

CVE-2025-57819CRITICALunder attack14 Sep 2025

FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE

100RISK

GitHub PoC

Grafana SQL Expressions → DuckDB LFI (CVE-2024-9264)

CVE-2024-9264CRITICAL13 Sep 2025

Grafana SQL Expressions allow for remote code execution

85RISK

GitHub PoC★ 1

Hands-on pentest project using Kali Linux vs Metasploitable2. Includes full workflow: Nmap scanning, enumeration, Metasploit exploitation (Samba CVE-2007-2447), post-exploitation validation, and mitigation steps. Repo contains commands, outputs, and report showing both offensive techniques and defensive recommendations.

CVE-2007-2447—13 Sep 2025

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands

50RISK

GitHub PoC

chin-tech/CrushFTP_CVE-2025-54309

CVE-2025-54309CRITICALunder attack13 Sep 2025

CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is not used, mishandles AS2 validation and

100RISK

GitHub PoC

CVE-2025-48384-submodule

CVE-2025-48384HIGHunder attack13 Sep 2025

Git allows arbitrary code execution through broken config quoting

71RISK

GitHub PoC★ 7

Python PoC script for pgAdmin4 Query Tool RCE (CVE-2025-2945)

CVE-2025-2945CRITICAL13 Sep 2025

pgAdmin 4: Remote Code Execution in Query Tool and Cloud Deployment

75RISK

GitHub PoC

Grafana CVE-2025-4123-POC

CVE-2025-4123HIGH12 Sep 2025

A cross-site scripting (XSS) vulnerability exists in Grafana caused by combining a client path traversal and open redire

78RISK

GitHub PoC

GIT vulnerability | Carriage Return and RCE on cloning

CVE-2025-48384HIGHunder attack12 Sep 2025

Git allows arbitrary code execution through broken config quoting

71RISK

GitHub PoC★ 8

FreePBX versions 15, 16, and 17 contain a Remote Code Execution (RCE) vulnerability caused by insufficient sanitization of user-supplied data in endpoints.

CVE-2025-57819CRITICALunder attack12 Sep 2025

FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE

100RISK

GitHub PoC★ 2

CVE-2024-3094 exposed a backdoor in the XZ compression library, allowing remote SSH access by bypassing authentication. It’s a major supply chain attack affecting Linux systems, highlighting risks in trusted open-source components.

CVE-2024-3094CRITICAL12 Sep 2025

Xz: malicious code in distributed source

70RISK

GitHub PoC★ 1

JinhyukKo/CVE-2024-4701-POC

CVE-2024-4701CRITICAL12 Sep 2025

Path Traversal vulnerability via File Uploads in Genie

53RISK

GitHub PoC★ 4

Ash1996x/CVE-2025-54914-PoC

CVE-2025-54914CRITICAL12 Sep 2025

Azure Networking Elevation of Privilege Vulnerability

48RISK

GitHub PoC★ 1

For CTF's and Safe Environments.... CVE-2021-4034 Local PrivEsc.

CVE-2021-4034HIGHunder attackransomware11 Sep 2025

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.