Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,313cataloged exploits

34,834CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,443Referência 21,797GitHub PoC 13,885VulnCheck XDB 8,484Nuclei 4,237Metasploit 3,467✓ verified onlyrecent popular risk

13,885 exploits

GitHub PoC★ 169

海康威视RCE漏洞批量检测和利用工具

CVE-2021-36260CRITICALunder attack03 Aug 2022

A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation,

100RISK

open ↗

GitHub PoC

aweiiy/CVE-2021-43617

CVE-2021-43617—03 Aug 2022

Laravel Framework through 8.70.2 does not sufficiently block the upload of executable PHP content because Illuminate/Val

28RISK

open ↗

GitHub PoC★ 3

LY613313/CVE-2022-22947

CVE-2022-22947CRITICALunder attack03 Aug 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RISK

open ↗

GitHub PoC★ 5

Exploit to capitalize on vulnerability CVE-2020-2038.

CVE-2020-2038HIGH03 Aug 2022

PAN-OS: OS command injection vulnerability in the management web interface

78RISK

open ↗

GitHub PoC

This paper is about manual exploitation of android open port vulnerability found in ES file manager. This open TCP 59777 port allows the attacker to install a backdoor and gather all the user’s data. Further in this paper there will be a proof of concept presented to consolidate the vulnerability. Download the PDF and enjoy !!! Cheers !!!

CVE-2019-6447—02 Aug 2022

The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary fi

50RISK

open ↗

GitHub PoC

Apache Log4j is a logging tool written in Java. This paper focuses on what is Log4j and log4shell vulnerability and how it works, how it affects the victim, and how can this be mitigated

CVE-2021-44228CRITICALunder attackransomware02 Aug 2022

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

open ↗

GitHub PoC

xpgdgit/CVE-2015-5531

CVE-2015-5531—01 Aug 2022

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unsp

60RISK

open ↗

GitHub PoC★ 1

Script en python sobre la vulnerabilidad CVE-2021-4034

CVE-2021-4034HIGHunder attack01 Aug 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISK

open ↗

GitHub PoC★ 2

A Fullstack Academy Cybersecurity project examining the full cycle of the Follina (CVE-2022-30190) vulnerability, from exploit to detection and defense.

CVE-2022-30190HIGHunder attackransomware01 Aug 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISK

open ↗

GitHub PoC

xpgdgit/CVE-2014-3120

CVE-2014-3120HIGHunder attack01 Aug 2022

The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execut

100RISK

open ↗

GitHub PoC★ 3

COMPILED

CVE-2022-0847HIGHunder attack01 Aug 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISK

open ↗

GitHub PoC★ 4

r4x0r1337/-CVE-2022-29464

CVE-2022-29464CRITICALunder attackransomware01 Aug 2022

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file

100RISK

open ↗

GitHub PoC

PoC exploit for CVE-2017-1000251 (modified)

CVE-2017-1000251—31 Jul 2022

The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and includ

28RISK

open ↗

GitHub PoC★ 7

CVE-2022-21661 exp for Elementor custom skin.

CVE-2022-21661HIGH31 Jul 2022

SQL injection in WordPress

78RISK

open ↗

GitHub PoC★ 2

Script to exploit CVE-2018-1042 in order to do internal port scans.

CVE-2018-1042—30 Jul 2022

Moodle 3.x has Server Side Request Forgery in the filepicker.

28RISK

open ↗

GitHub PoC★ 25

「💥」CVE-2022-33891 - Apache Spark Command Injection

CVE-2022-33891HIGHunder attack30 Jul 2022

Apache Spark shell command injection vulnerability via Spark UI

100RISK

open ↗

GitHub PoC★ 15

Confluence Hardcoded Password POC

CVE-2022-26138CRITICALunder attack30 Jul 2022

The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in th

100RISK

open ↗

GitHub PoC★ 78

wo ee cve-2022-2185 gitlab authenticated rce

CVE-2022-2185CRITICAL29 Jul 2022

A critical issue has been discovered in GitLab affecting all versions starting from 14.0 prior to 14.10.5, 15.0 prior to

85RISK

open ↗

GitHub PoC

xpgdgit/CVE-2015-1427

CVE-2015-1427CRITICALunder attack29 Jul 2022

The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the s

100RISK

open ↗

GitHub PoC★ 1

libSSH-Authentication-Bypass

CVE-2018-10933CRITICAL28 Jul 2022

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul

85RISK

open ↗

GitHub PoC★ 28

WordPress WP_Query SQL Injection POC

CVE-2022-21661HIGH28 Jul 2022

SQL injection in WordPress

78RISK

open ↗

GitHub PoC★ 3

Atlassian Confluence Server and Data Center: CVE-2022-26138

CVE-2022-26138CRITICALunder attack28 Jul 2022

The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in th

100RISK

open ↗

GitHub PoC

Reports on post-exploitation on honeypot exploiting vulnerable wu-ftpd (CVE-2001-0550)

CVE-2001-0550—28 Jul 2022

wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which i

45RISK

open ↗

GitHub PoC★ 14

QNAP N-Day (Probably not CVE-2020-2509)

CVE-2020-2509CRITICALunder attack27 Jul 2022

Command Injection Vulnerability in QTS and QuTS hero

90RISK

open ↗

GitHub PoC

weblogic-cve-2018-2628-exp

CVE-2018-2628CRITICALunder attack27 Jul 2022

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISK

open ↗

GitHub PoC★ 408

警惕一种针对红队的新型溯源手段!

CVE-2022-26809CRITICAL27 Jul 2022

Remote Procedure Call Runtime Remote Code Execution Vulnerability

70RISK

open ↗

GitHub PoC

Module for PrestaShop 1.6.1.X/1.7.X to fix CVE-2022-31181 / CVE-2022-36408 vulnerability (Chain SQL Injection)

CVE-2022-31181CRITICAL26 Jul 2022

Remote code execution in prestashop

63RISK

open ↗

GitHub PoC

A demo for cve-2019-12735

CVE-2019-12735—26 Jul 2022

getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via th

28RISK

open ↗

GitHub PoC★ 7

Zimbra unrar vulnerability. Now there are already POC available, it is safe to release our POC.

CVE-2022-30333HIGHunder attackransomware26 Jul 2022

RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) o

100RISK

open ↗

GitHub PoC★ 1

WebMin Versions <= 1.920 [CVE-2019-15107] RCE PoC

CVE-2019-15107CRITICALunder attackransomware26 Jul 2022

An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera

100RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.