Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,107cataloged exploits

34,679CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,443Referência 21,692GitHub PoC 13,812VulnCheck XDB 8,460Nuclei 4,233Metasploit 3,467✓ verified onlyrecent popular risk

13,812 exploits

GitHub PoC★ 1

CVE-2022-26134 web payload

CVE-2022-26134CRITICALunder attackransomware26 Aug 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISK

open ↗

GitHub PoC★ 9

Search for BTC coins on earlier versions of Bitcoin Core with critical vulnerability OpenSSL 0.9.8 CVE-2008-0166

CVE-2008-0166—26 Aug 2022

OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that ge

45RISK

open ↗

GitHub PoC★ 5

Python Script to exploit Zimbra Auth Bypass + RCE (CVE-2022-27925)

CVE-2022-27925HIGHunder attackransomware26 Aug 2022

Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts file

100RISK

open ↗

GitHub PoC★ 18

Oracle WebLogic CVE-2022-21371

CVE-2022-21371HIGH25 Aug 2022

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported ve

78RISK

open ↗

GitHub PoC

Simple Java Front and Back end with bad log4j version featuring CVE-2021-44228

CVE-2021-44228CRITICALunder attackransomware25 Aug 2022

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

open ↗

GitHub PoC★ 19

Zimbra CVE-2022-37042 Nuclei weaponized template

CVE-2022-37042CRITICALunder attackransomware25 Aug 2022

Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts fi

100RISK

open ↗

GitHub PoC

nvchungkma/CVE-2021-40444-Microsoft-Office-Word-Remote-Code-Execution-

CVE-2021-40444HIGHunder attackransomware24 Aug 2022

Microsoft MSHTML Remote Code Execution Vulnerability

100RISK

open ↗

GitHub PoC★ 9

SiJiDo/CVE-2022-22947

CVE-2022-22947CRITICALunder attack23 Aug 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RISK

open ↗

GitHub PoC★ 118

PrintNightmare (CVE-2021-34527) PoC Exploit

CVE-2021-34527HIGHunder attackransomware23 Aug 2022

Windows Print Spooler Remote Code Execution Vulnerability

100RISK

open ↗

GitHub PoC

CVE-2022-26134-Console

CVE-2022-26134CRITICALunder attackransomware22 Aug 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISK

open ↗

GitHub PoC★ 3

This is a modified version of the original GhostCat Exploit

CVE-2020-1938CRITICALunder attack21 Aug 2022

When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc

100RISK

open ↗

GitHub PoC★ 43

Zimbra CVE-2022-27925 PoC

CVE-2022-27925HIGHunder attackransomware20 Aug 2022

Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts file

100RISK

open ↗

GitHub PoC

navokus/CVE-2022-27925

CVE-2022-27925HIGHunder attackransomware20 Aug 2022

Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts file

100RISK

open ↗

GitHub PoC

miko550/CVE-2022-27925

CVE-2022-27925HIGHunder attackransomware19 Aug 2022

Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts file

100RISK

open ↗

GitHub PoC

CVE-2018-0798复现

CVE-2018-0798HIGHunder attack19 Aug 2022

Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows

93RISK

open ↗

GitHub PoC

Advanced Comment System 1.0 - Remote Command Execution (RCE)

CVE-2009-4623—19 Aug 2022

Multiple PHP remote file inclusion vulnerabilities in Advanced Comment System 1.0 allow remote attackers to execute arbi

23RISK

open ↗

GitHub PoC★ 7

GreyNoise-Intelligence/Zimbra_CVE-2022-37042-_CVE-2022-27925

CVE-2022-37042CRITICALunder attackransomware18 Aug 2022

Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts fi

100RISK

open ↗

GitHub PoC★ 5

CVE-2022-0847 used to achieve container escape 利用CVE-2022-0847 (Dirty Pipe) 实现容器逃逸

CVE-2022-0847HIGHunder attack18 Aug 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISK

open ↗

GitHub PoC

tharindudh/tharindudh-Log4j-Vulnerability-in-Ghidra-tool-CVE-2021-44228

CVE-2021-44228CRITICALunder attackransomware18 Aug 2022

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

open ↗

GitHub PoC★ 2

Remote code execution in CA APM Team Center (Wily Introscope)

CVE-2020-6364CRITICAL17 Aug 2022

SAP Solution Manager and SAP Focused Run (update provided in WILY_INTRO_ENTERPRISE 9.7, 10.1, 10.5, 10.7), allows an att

48RISK

open ↗

GitHub PoC★ 17

A powershell poc to load and automatically run Certify and Rubeus from memory.

CVE-2022-26923HIGHunder attack17 Aug 2022

Active Directory Domain Services Elevation of Privilege Vulnerability

100RISK

open ↗

GitHub PoC

huahuatzt/CVE-2022-27925

CVE-2022-27925HIGHunder attackransomware15 Aug 2022

Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts file

100RISK

open ↗

GitHub PoC

RakhithJK/CVE-2022-30333

CVE-2022-30333HIGHunder attackransomware15 Aug 2022

RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) o

100RISK

open ↗

GitHub PoC★ 1

CVE-2011-0104复现

CVE-2011-0104—15 Aug 2022

Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow re

35RISK

open ↗

GitHub PoC★ 1

CVE-2017-11882复现

CVE-2017-11882HIGHunder attackransomware15 Aug 2022

Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi

100RISK

open ↗

GitHub PoC

CVE-2013-2028复现

CVE-2013-2028—15 Aug 2022

The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cau

60RISK

open ↗

GitHub PoC★ 1

CVE-2010-3333复现

CVE-2010-3333HIGHunder attack15 Aug 2022

Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2

100RISK

open ↗

GitHub PoC★ 1

CVE-2012-0158复现

CVE-2012-0158HIGHunder attack15 Aug 2022

The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls

100RISK

open ↗

GitHub PoC★ 2

ApacheOfBiz 17.12.01 - Unauthorized Remote Code Executión

CVE-2020-9496—15 Aug 2022

XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03

60RISK

open ↗

GitHub PoC★ 2

CVE-2017-0199复现

CVE-2017-0199HIGHunder attackransomware15 Aug 2022

Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Window

100RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.