Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,989cataloged exploits

40,450CVEs with public exploitation

24,696lab-tested

All Referência 26,240Exploit-DB 24,488GitHub PoC 18,042VulnCheck XDB 10,121Nuclei 4,561Metasploit 3,537✓ verified onlyrecent popular risk

18,042 exploits

GitHub PoC★ 1

CVE-2025-4094 – WordPress Digits Plugin < 8.4.6.1 - OTP Authentication Bypass

CVE-2025-4094CRITICAL15 May 2025

Digits < 8.4.6.1 - Auth Bypass via OTP Bruteforcing

53RISK

open ↗

GitHub PoC★ 1

(CVE-2024-51793) Wordpress Plugin: Computer Repair Shop <= 3.8115 - Unauthenticated Arbitrary File Upload

CVE-2024-51793CRITICAL15 May 2025

WordPress RepairBuddy plugin <= 3.8115 - Arbitrary File Upload vulnerability

48RISK

open ↗

GitHub PoC

Analysis, detection, and mitigation of CVE-2023-20198 exploitation in Cisco IOS XE – QUB CSC3064 Network Security Assessment

CVE-2023-20198CRITICALunder attack15 May 2025

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RISK

open ↗

GitHub PoC★ 29

encrypter15/CVE-2025-29824

CVE-2025-29824HIGHunder attackransomware14 May 2025

Windows Common Log File System Driver Elevation of Privilege Vulnerability

76RISK

open ↗

GitHub PoC

This contains single-file exploit for cve-2021-4034 which is a Polkit Local Privilege Escalation. Use it wisely!

CVE-2021-4034HIGHunder attackransomware14 May 2025

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISK

open ↗

GitHub PoC

This contains single-file exploit for ProFTPd 1.3.5 mod_copy (CVE-2015-3306) vulnerability, especially for TryHackMe Kenobi Lab.

CVE-2015-3306CRITICALunder attack14 May 2025

The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and

100RISK

open ↗

GitHub PoC

fatkz/CVE-2020-17530

CVE-2020-17530CRITICALunder attack14 May 2025

Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected

100RISK

open ↗

GitHub PoC

A Python PoC for CVE-2022-21661, adapted from z92g's Go PoC, designed to demonstrate the vulnerability in a more accessible scripting environment.

CVE-2022-21661HIGH13 May 2025

SQL injection in WordPress

78RISK

open ↗

GitHub PoC

MandipJoshi/CVE-2021-3560

CVE-2021-3560HIGHunder attack13 May 2025

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile

91RISK

open ↗

GitHub PoC★ 2

CVE-2025-3248: A critical flaw has been discovered in Langflow that allows malicious actors to execute arbitrary Python code on the target system. This can lead to full remote code execution without authentication, potentially giving attackers control over the server.

CVE-2025-3248CRITICALunder attackransomware13 May 2025

Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code

100RISK

open ↗

GitHub PoC★ 1

Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion

CVE-2025-2294CRITICAL13 May 2025

Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion

85RISK

open ↗

GitHub PoC★ 55

WHW0x455/CVE-2023-41992

CVE-2023-41992HIGHunder attack12 May 2025

The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macO

71RISK

open ↗

GitHub PoC★ 3

rebelle3/cve-2017-7117

CVE-2017-7117—12 May 2025

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud befor

28RISK

open ↗

GitHub PoC

使用PowsrShell掃描CVE-2024-4577

CVE-2024-4577CRITICALunder attackransomware12 May 2025

Argument Injection in PHP-CGI

100RISK

open ↗

GitHub PoC★ 1

eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Deletion

CVE-2025-4603CRITICAL12 May 2025

eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Deletion

48RISK

open ↗

GitHub PoC

shishirpandey18/CVE-2021-3156

CVE-2021-3156HIGHunder attack12 May 2025

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RISK

open ↗

GitHub PoC

laishouchao/Apache-RocketMQ-RCE-CVE-2023-37582-poc

CVE-2023-37582CRITICAL12 May 2025

Apache RocketMQ: Possible remote code execution when using the update configuration function

85RISK

open ↗

GitHub PoC★ 1

Windows & linux support

CVE-2023-42793CRITICALunder attackransomware11 May 2025

In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

100RISK

open ↗

GitHub PoC★ 1

fatkz/CVE-2025-24813

CVE-2025-24813CRITICALunder attack11 May 2025

Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

100RISK

open ↗

GitHub PoC★ 1

PolarisXSec/CVE-2024-21413

CVE-2024-21413CRITICALunder attack11 May 2025

Microsoft Outlook Remote Code Execution Vulnerability

100RISK

open ↗

GitHub PoC

CVE-2025-0411 7-Zip Mark-of-the-Web Bypass

CVE-2025-0411HIGHunder attack11 May 2025

7-Zip Mark-of-the-Web Bypass Vulnerability

83RISK

open ↗

GitHub PoC

congdong007/CVE-2025-29306_poc

CVE-2025-29306CRITICAL10 May 2025

An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.htm

75RISK

open ↗

GitHub PoC★ 1

Apache CXF SSRF CVE-2024-28752

CVE-2024-28752CRITICAL10 May 2025

Apache CXF SSRF Vulnerability using the Aegis databinding

48RISK

open ↗

GitHub PoC★ 3

Drag and Drop Multiple File Upload for WooCommerce <= 1.1.6 - Unauthenticated Arbitrary File Upload via upload Function

CVE-2025-4403CRITICAL10 May 2025

Drag and Drop Multiple File Upload for WooCommerce <= 1.1.6 - Unauthenticated Arbitrary File Upload via upload Function

48RISK

open ↗

GitHub PoC

PoC for CVE-2017-5487 - WordPress User Enumeration via REST

CVE-2017-5487—10 May 2025

wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before

45RISK

open ↗

GitHub PoC

SAP NetWeaver Visual Composer Metadata Uploader <= 7.50 CVE-2025-31324 PoC

CVE-2025-31324CRITICALunder attackransomware10 May 2025

Missing Authorization check in SAP NetWeaver (Visual Composer development server)

100RISK

open ↗

GitHub PoC

Remote Code Execution (RCE) vulnerability in Apache Tomcat.

CVE-2025-24813CRITICALunder attack10 May 2025

Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

100RISK

open ↗

GitHub PoC★ 2

WordPress PDF 2 Post Plugin <= 2.4.0 is vulnerable to Remote Code Execution (RCE) +Subscriber

CVE-2025-32583CRITICAL10 May 2025

WordPress PDF 2 Post Plugin <= 2.4.0 - Remote Code Execution (RCE) vulnerability

53RISK

open ↗

GitHub PoC

CVE-2024-38475 Scanner using FFUF + Seclists

CVE-2024-38475CRITICALunder attack09 May 2025

Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.

100RISK

open ↗

GitHub PoC

Tools for scan CVE-2024-25600 - WordPress Bricks Builder Remote Code Execution (RCE)

CVE-2024-25600CRITICAL09 May 2025

WordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability

85RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.