Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,313cataloged exploits

34,834CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,443Referência 21,797GitHub PoC 13,885VulnCheck XDB 8,484Nuclei 4,237Metasploit 3,467✓ verified onlyrecent popular risk

13,812 exploits

GitHub PoC

Geni0r/cve-2021-4034-poc

CVE-2021-4034HIGHunder attack14 Aug 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISK

open ↗

GitHub PoC★ 1

amit-pathak009/CVE-2022-29464-mass

CVE-2022-29464CRITICALunder attackransomware13 Aug 2022

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file

100RISK

open ↗

GitHub PoC

amit-pathak009/CVE-2022-22954-PoC

CVE-2022-22954CRITICALunder attackransomware13 Aug 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RISK

open ↗

GitHub PoC★ 1

CVE-2022-33891 Exploit For Apache Spark

CVE-2022-33891HIGHunder attack13 Aug 2022

Apache Spark shell command injection vulnerability via Spark UI

100RISK

open ↗

GitHub PoC

amit-pathak009/CVE-2022-29464

CVE-2022-29464CRITICALunder attackransomware13 Aug 2022

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file

100RISK

open ↗

GitHub PoC

amit-pathak009/CVE-2022-22954

CVE-2022-22954CRITICALunder attackransomware13 Aug 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RISK

open ↗

GitHub PoC★ 3

Modified dirtypipe script into auto root without have to search a file manually to hijack suid binary.

CVE-2022-0847HIGHunder attack13 Aug 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISK

open ↗

GitHub PoC★ 65

Zimbra RCE simple poc

CVE-2022-27925HIGHunder attackransomware12 Aug 2022

Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts file

100RISK

open ↗

GitHub PoC★ 115

A Python script to exploit CVE-2022-36446 Software Package Updates RCE (Authenticated) on Webmin < 1.997.

CVE-2022-36446—11 Aug 2022

software/apt-lib.pl in Webmin before 1.997 lacks HTML escaping for a UI command.

60RISK

open ↗

GitHub PoC

Silencecyber/cve-2021-4034

CVE-2021-4034HIGHunder attack11 Aug 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISK

open ↗

GitHub PoC★ 25

Exploit for PrestaShop bockwishlist module 2.1.0 SQLi (CVE-2022-31101)

CVE-2022-31101HIGH09 Aug 2022

SQL Injection in prestashop/blockwishlist

61RISK

open ↗

GitHub PoC★ 4

PoC for GLPI CVE-2022-31061

CVE-2022-31061CRITICAL09 Aug 2022

SQL injection on login page in GLPI

60RISK

open ↗

GitHub PoC

PoC for CVE-2021-4034.

CVE-2021-4034HIGHunder attack08 Aug 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISK

open ↗

GitHub PoC★ 1

vesperp/CVE-2021-20038-SonicWall-RCE

CVE-2021-20038CRITICALunder attackransomware08 Aug 2022

A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows

100RISK

open ↗

GitHub PoC

CVE-2007-2447 exploit written in python to get reverse shell

CVE-2007-2447—07 Aug 2022

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands

50RISK

open ↗

GitHub PoC

PHPMailer < 5.2.18 Remote Code Execution

CVE-2016-10033CRITICALunder attack05 Aug 2022

The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra para

100RISK

open ↗

GitHub PoC★ 6

Webkit (Safari) - Exploit

CVE-2022-22620HIGHunder attack04 Aug 2022

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS

76RISK

open ↗

GitHub PoC★ 5

Exploit to capitalize on vulnerability CVE-2020-2038.

CVE-2020-2038HIGH03 Aug 2022

PAN-OS: OS command injection vulnerability in the management web interface

78RISK

open ↗

GitHub PoC

aweiiy/CVE-2021-43617

CVE-2021-43617—03 Aug 2022

Laravel Framework through 8.70.2 does not sufficiently block the upload of executable PHP content because Illuminate/Val

28RISK

open ↗

GitHub PoC★ 169

海康威视RCE漏洞批量检测和利用工具

CVE-2021-36260CRITICALunder attack03 Aug 2022

A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation,

100RISK

open ↗

GitHub PoC★ 3

LY613313/CVE-2022-22947

CVE-2022-22947CRITICALunder attack03 Aug 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RISK

open ↗

GitHub PoC

Apache Log4j is a logging tool written in Java. This paper focuses on what is Log4j and log4shell vulnerability and how it works, how it affects the victim, and how can this be mitigated

CVE-2021-44228CRITICALunder attackransomware02 Aug 2022

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

open ↗

GitHub PoC

This paper is about manual exploitation of android open port vulnerability found in ES file manager. This open TCP 59777 port allows the attacker to install a backdoor and gather all the user’s data. Further in this paper there will be a proof of concept presented to consolidate the vulnerability. Download the PDF and enjoy !!! Cheers !!!

CVE-2019-6447—02 Aug 2022

The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary fi

50RISK

open ↗

GitHub PoC★ 4

r4x0r1337/-CVE-2022-29464

CVE-2022-29464CRITICALunder attackransomware01 Aug 2022

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file

100RISK

open ↗

GitHub PoC

xpgdgit/CVE-2015-5531

CVE-2015-5531—01 Aug 2022

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unsp

60RISK

open ↗

GitHub PoC★ 1

Script en python sobre la vulnerabilidad CVE-2021-4034

CVE-2021-4034HIGHunder attack01 Aug 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISK

open ↗

GitHub PoC★ 2

A Fullstack Academy Cybersecurity project examining the full cycle of the Follina (CVE-2022-30190) vulnerability, from exploit to detection and defense.

CVE-2022-30190HIGHunder attackransomware01 Aug 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISK

open ↗

GitHub PoC★ 3

COMPILED

CVE-2022-0847HIGHunder attack01 Aug 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISK

open ↗

GitHub PoC

xpgdgit/CVE-2014-3120

CVE-2014-3120HIGHunder attack01 Aug 2022

The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execut

100RISK

open ↗

GitHub PoC★ 7

CVE-2022-21661 exp for Elementor custom skin.

CVE-2022-21661HIGH31 Jul 2022

SQL injection in WordPress

78RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.