Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,989cataloged exploits

40,450CVEs with public exploitation

24,696lab-tested

All Referência 26,240Exploit-DB 24,488GitHub PoC 18,042VulnCheck XDB 10,121Nuclei 4,561Metasploit 3,537✓ verified onlyrecent popular risk

18,042 exploits

GitHub PoC

This is an exercise built around CVE-2021-3560

CVE-2021-3560HIGHunder attack09 May 2025

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile

91RISK

open ↗

GitHub PoC

CVE-2024-38475 Scanner using FFUF + Seclists

CVE-2024-38475CRITICALunder attack09 May 2025

Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.

100RISK

open ↗

GitHub PoC★ 8

exploit for CVE-2025-27533, a Denial of Service (DoS) vulnerability in Apache ActiveMQ

CVE-2025-27533MEDIUM09 May 2025

Apache ActiveMQ: Unchecked buffer length can cause excessive memory allocation

33RISK

open ↗

GitHub PoC

The Web Is Vulnerable to CVE-2021-44228

CVE-2021-44228CRITICALunder attackransomware08 May 2025

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

open ↗

GitHub PoC

x-middleware exploit for next.js CVE-2023–46298 cache poisoning and CVE-2025-29927 bypass

CVE-2025-29927CRITICAL08 May 2025

Authorization Bypass in Next.js Middleware

85RISK

open ↗

GitHub PoC★ 1

sap-netweaver-cve-2025-31324-check

CVE-2025-31324CRITICALunder attackransomware08 May 2025

Missing Authorization check in SAP NetWeaver (Visual Composer development server)

100RISK

open ↗

GitHub PoC★ 2

exploiting CVE-2025-27007, a critical unauthenticated privilege escalation vulnerability in the OttoKit (formerly SureTriggers) WordPress plugin

CVE-2025-27007CRITICAL07 May 2025

WordPress SureTriggers <= 1.0.82 - Privilege Escalation Vulnerability

75RISK

open ↗

GitHub PoC★ 8

NULLTRACE0X/CVE-2025-31324

CVE-2025-31324CRITICALunder attackransomware07 May 2025

Missing Authorization check in SAP NetWeaver (Visual Composer development server)

100RISK

open ↗

GitHub PoC★ 2

Exploitation report of the Samba Trans2Open vulnerability (CVE-2003-0201), including tools used, exploitation steps, and protection techniques to secure systems.

CVE-2003-0201—07 May 2025

Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x vers

60RISK

open ↗

GitHub PoC

Vite WASM Import Path Traversal 🛡️

CVE-2025-31125MEDIUMunder attack07 May 2025

Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query

100RISK

open ↗

GitHub PoC★ 1

1Altruist/CVE-2025-46271-Reverse-Shell-PoC

CVE-2025-46271CRITICAL07 May 2025

Planet Technology Network Products OS Command Injection

48RISK

open ↗

GitHub PoC

abrewer251/CVE-2024-38475_SonicBoom_Apache_URL_Traversal_PoC

CVE-2024-38475CRITICALunder attack07 May 2025

Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.

100RISK

open ↗

GitHub PoC

abrewer251/CVE-2025-1974_IngressNightmare_PoC

CVE-2025-1974CRITICAL06 May 2025

ingress-nginx admission controller RCE escalation

85RISK

open ↗

GitHub PoC★ 1

PoC for CVE-2025-2011 - SQLi in Depicter plugin <= 3.6.1

CVE-2025-2011HIGH06 May 2025

Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection via 's' Parameter

68RISK

open ↗

GitHub PoC★ 1

Next.js Auth Bypass PoC Edge Runtime Env Leak via Middleware Bug

CVE-2025-29927CRITICAL06 May 2025

Authorization Bypass in Next.js Middleware

85RISK

open ↗

GitHub PoC★ 5

Research Purposes only

CVE-2025-31324CRITICALunder attackransomware06 May 2025

Missing Authorization check in SAP NetWeaver (Visual Composer development server)

100RISK

open ↗

GitHub PoC

Hirainsingadia/CVE-2002-2154

CVE-2002-2154—06 May 2025

Directory traversal vulnerability in Monkey HTTP Daemon 0.1.4 allows remote attackers to read arbitrary files via .. (do

23RISK

open ↗

GitHub PoC★ 1

Commvault Remote Code Execution (CVE-2025-34028) NSE

CVE-2025-34028CRITICALunder attack06 May 2025

Commvault Command Center Innovation Release <= 11.38.25 Unathenticated Install Package Path Traversal

100RISK

open ↗

GitHub PoC

NGINX DNS Overflow Vulnerability Check - CVE-2021-23017 PoC

CVE-2021-23017—06 May 2025

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from t

35RISK

open ↗

GitHub PoC★ 2

Proof-of-Concept (PoC) for CVE-2025-34028, a Remote Code Execution vulnerability in Commvault Command Center. This Python script scans single or multiple targets, executes commands, and reports vulnerable hosts.

CVE-2025-34028CRITICALunder attack06 May 2025

Commvault Command Center Innovation Release <= 11.38.25 Unathenticated Install Package Path Traversal

100RISK

open ↗

GitHub PoC★ 5

This Python exploit script targets a vulnerable Laravel Filemanager created by UniSharp, which allows authenticated users to bypass file restrictions and upload malicious files. This can lead to Remote Code Execution (RCE) when the uploaded payload is triggered.

CVE-2024-21546CRITICAL05 May 2025

Versions of the package unisharp/laravel-filemanager before 2.9.1 are vulnerable to Remote Code Execution (RCE) through

48RISK

open ↗

GitHub PoC★ 1

ductink98lhp/analyze-Exploit-CVE-2023-22518-Confluence

CVE-2023-22518CRITICALunder attackransomware05 May 2025

All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authoriz

100RISK

open ↗

GitHub PoC★ 1

Scanner and exploit for CVE-2025-3248

CVE-2025-3248CRITICALunder attackransomware05 May 2025

Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code

100RISK

open ↗

GitHub PoC★ 1

Scanner and exploit for CVE-2025-3248

CVE-2025-3248CRITICALunder attackransomware05 May 2025

Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code

100RISK

open ↗

GitHub PoC

Shellshock Vulnerability Scanner

CVE-2014-6271CRITICALunder attack05 May 2025

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISK

open ↗

GitHub PoC★ 2

Artemir7/CVE-2025-24893-EXP

CVE-2025-24893CRITICALunder attack05 May 2025

Remote code execution as guest via SolrSearchMacros request in xwiki

100RISK

open ↗

GitHub PoC★ 2

CVE-2025-4524 - Unauthenticated madara-core Wordpress theme LFI

CVE-2025-4524CRITICAL05 May 2025

Madara – Responsive and modern WordPress theme for manga sites <= 2.2.2 - Unauthenticated Local File Inclusion

68RISK

open ↗

GitHub PoC

CCIEVoice2009/CVE-2023-46604

CVE-2023-46604CRITICALunder attackransomware04 May 2025

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISK

open ↗

GitHub PoC

Bridg3Ops/SOC335-CVE-2024-49138-Exploitation-Detected

CVE-2024-49138HIGHunder attack04 May 2025

Windows Common Log File System Driver Elevation of Privilege Vulnerability

76RISK

open ↗

GitHub PoC

CVE-2024-10914 Shell Exploit

CVE-2024-10914CRITICAL03 May 2025

D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L account_mgr.cgi cgi_user_add os command injection

85RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.