Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
80,930cataloged exploits
37,572CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,482Referência 23,973GitHub PoC 15,478VulnCheck XDB 9,069Nuclei 4,426Metasploit 3,502✓ verified onlyrecentpopularrisk
80,930 exploits
VulnCheck XDB
initial-access
In Apache Struts 2.0.0 through 2.3.33 and 2.5 through 2.5.10.1, using an unintentional expression in a Freemarker tag in
60RISK
open ↗GitHub PoC
Proof of Concept for CVE-2024-32002: Git submodule path injection vulnerability.
Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution
53RISK
open ↗Metasploit600
Centreon authenticated command injection leading to RCE via broker engine "reload" parameter
RCE via the poller reload feature available only to user with high privilege
41RISK
open ↗GitHub PoC
CVE-2025-57174 Unauthenticated Remote Command Execution
An issue was discovered in Siklu Communications Etherhaul 8010TX and 1200FX devices, Firmware 7.4.0 through 10.7.3 and p
48RISK
open ↗GitHub PoC
iteride/CVE-2025-2294
Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion
85RISK
open ↗GitHub PoC
yass2400012/Email-exploit-Moniker-Link-CVE-2024-21413-
Microsoft Outlook Remote Code Execution Vulnerability
100RISK
open ↗GitHub PoC
Next.js middleware auth-bypass lab (CVE-2025-29927 simulation)
Authorization Bypass in Next.js Middleware
85RISK
open ↗VulnCheck XDB
local
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISK
open ↗GitHub PoC
Proof-of-concept script for CVE-2020-3452 — Cisco ASA/FTD Path Traversal vulnerability. Supports automated extraction of known file targets with a hard limit on successful downloads for safety. Intended for authorized security testing and research purposes only.
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability
100RISK
open ↗GitHub PoC★ 2
Detection for CVE-2025-26399
SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability
100RISK
open ↗VulnCheck XDB
infoleak
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability
100RISK
open ↗GitHub PoC
Michaael01/LetsDefend--SOC-342-CVE-2025-53770-SharePoint-Exploit-ToolShell
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISK
open ↗GitHub PoC★ 1
Summar Employee Portal Prior to 3.98.0 Authenticated SQL Injection - CVE-2025-40677
SQL injection vulnerability in Summar Software´s Portal del Empleado
41RISK
open ↗GitHub PoC★ 1
PoC and exploit scripts for CVE-2023-20048 - Remote Code Execution vulnerability affecting Cisco RV series routers. Includes a vulnerability checker (PoC) and a working exploit for gaining remote shell access. For educational and research purposes only.
A vulnerability in the web services interface of Cisco Firepower Management Center (FMC) Software could allow an authent
53RISK
open ↗GitHub PoC★ 10
Take first steps in CodeQL for Python by writing a query to find CVE-2024-32022
Kohya_ss is vulnerable to a command injection in basic_caption_gui.py (GHSL-2024-019)
48RISK
open ↗GitHub PoC★ 1
Complete analysis of CVE-2025-21298, a double free vulnerability related to ole32 library in windows.
Windows OLE Remote Code Execution Vulnerability
70RISK
open ↗VulnCheck XDB
initial-access
Better Search Replace <= 1.4.4 - Unauthenticated PHP Object Injection
68RISK
open ↗GitHub PoC
ay 09 — CVE-2025-27520 (BentoML-style insecure deserialization) — Local Docker lab
BentoML Allows Remote Code Execution (RCE) via Insecure Deserialization
75RISK
open ↗VulnCheck XDB
initial-access
An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerabi
100RISK
open ↗GitHub PoC★ 1
Playing with CVE-2010-2883
Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows
100RISK
open ↗VulnCheck XDB
initial-access
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi
100RISK
open ↗GitHub PoC★ 2
CVE-2020-0796 (SMBGhost) is a critical RCE vulnerability in Windows 10 SMBv3 protocol. It allows attackers to execute code remotely via crafted SMB packets, making it wormable. Affects Windows 10 v1903/v1909 and Server 2019. Exploit targets srv2.sys via buffer overflow
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.