Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
76,008cataloged exploits
34,638CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,662GitHub PoC 13,743VulnCheck XDB 8,460Nuclei 4,233Metasploit 3,467✓ verified onlyrecentpopularrisk
13,743 exploits
GitHub PoC
PowerShell Script for initial mitigation of vulnerability
Windows Search Remote Code Execution Vulnerability
93RISK
open ↗GitHub PoC★ 1
lakshit1212/CVE-2021-23017-PoC
A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from t
35RISK
open ↗GitHub PoC
Muhammad-Ali007/Log4j_CVE-2021-44228
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
open ↗GitHub PoC★ 1
This shellscript given the OrgKey 0 will parse the header of the base64 artifacts found in MOVEit Logs and decrypt the Serialized object used a payload
In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023.
100RISK
open ↗GitHub PoC★ 2
Automating Exploitation of CVE-2022-44268 ImageMagick Arbitrary File Read
ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulti
55RISK
open ↗GitHub PoC★ 2
This script allows for remote code execution (RCE) on Oracle WebLogic Server
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISK
open ↗GitHub PoC★ 15
Script to check for CVE-2023-36884 hardening
Windows Search Remote Code Execution Vulnerability
93RISK
open ↗GitHub PoC★ 1
Muhammad-Ali007/Follina_MSDT_CVE-2022-30190
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗GitHub PoC★ 6
Integrate Google Drive <= 1.1.99 - Missing Authorization via REST API Endpoints
WordPress Integrate Google Drive plugin <= 1.1.99 - Unauthenticated Broken Access Control vulnerability
63RISK
open ↗GitHub PoC
d0x-awrqxavc/CVE-2019-7609-KibanaRCE
Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker
100RISK
open ↗GitHub PoC★ 4
NyaMeeEain/CVE-2022-28171-POC
The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to t
53RISK
open ↗GitHub PoC
Fuel CMS 1.4.1 - Remote Code Execution - Python 3.x
FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca
60RISK
open ↗GitHub PoC★ 2
This is an emergency solution while Microsoft addresses the vulnerability.
Windows Search Remote Code Execution Vulnerability
93RISK
open ↗GitHub PoC★ 46
Apache RocketMQ Arbitrary File Write Vulnerability Exploit
Apache RocketMQ: Possible remote code execution when using the update configuration function
85RISK
open ↗GitHub PoC★ 22
Muhammad-Ali007/OutlookNTLM_CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
100RISK
open ↗GitHub PoC
Pog-Frog/cve-2022-44268
ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulti
55RISK
open ↗GitHub PoC★ 1
CVE-2023-33592批量漏洞利用程序
Lost and Found Information System v1.0 was discovered to contain a SQL injection vulnerability via the component /php-lf
23RISK
open ↗GitHub PoC★ 1
Recent Campaign abusing CVE-2023-36884
Windows Search Remote Code Execution Vulnerability
93RISK
open ↗GitHub PoC★ 2
This is a Python3 script that demonstrates an exploit for a Blind SQL Injection vulnerability in WebERP version 4.15.
A SQL Injection issue was discovered in webERP 4.15. Payments.php accepts payment data in base64 format. After this is d
23RISK
open ↗GitHub PoC★ 106
Full Chain Analysis of CVE-2022-4262, a non-trivial feedback slot type confusion in V8.
Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corru
76RISK
open ↗GitHub PoC
Proof of concept for LabVIEW Web Server HTTP Get Newline DoS vulnerability
LabVIEW Web Server 5.1.1 through 6.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET reques
28RISK
open ↗GitHub PoC★ 26
The remediation script should set the reg entries described in https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36884 . The detection script checks if they exist. Provided AS-IS without any warrenty.
Windows Search Remote Code Execution Vulnerability
93RISK
open ↗GitHub PoC
F5-BIG-IP Remote Code Execution Vulnerability CVE-2022-1388: A Case Study
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISK
open ↗GitHub PoC★ 13
This project is a Python script that exploits the CVE-2023-24489 vulnerability in ShareFile. It allows remote command execution on the target server. The script supports both Windows and Linux (On testing) platforms, and it can be used to exploit individual targets or perform mass checking on a list of URLs.
A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, coul
100RISK
open ↗GitHub PoC★ 1
Python script that generates pfs payloads to exploit CVE-2022-4510
Path Traversal in binwalk
46RISK
open ↗GitHub PoC★ 7
Exploit and scanner for CVE-2023-3460
Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation
60RISK
open ↗GitHub PoC★ 2
CVE-2023-27372-SPIP-CMS-Bypass
SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. T
85RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.