Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,313cataloged exploits

34,834CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,443Referência 21,797GitHub PoC 13,885VulnCheck XDB 8,484Nuclei 4,237Metasploit 3,467✓ verified onlyrecent popular risk

13,885 exploits

GitHub PoC★ 1

Heap-based buffer overflow in aswRdr.sys (aka the TDI RDR driver) in avast! Home and Professional 4.8.1356.0 allows local users to cause a denial of service (memory corruption) or possibly gain privileges via crafted arguments to IOCTL 0x80002024.

CVE-2009-4049—10 Jul 2022

Heap-based buffer overflow in aswRdr.sys (aka the TDI RDR driver) in avast! Home and Professional 4.8.1356.0 allows loca

23RISK

GitHub PoC

Tatsu Plugin ZIP File add_custom_font unrestricted upload

CVE-2021-25094—10 Jul 2022

Tatsu < 3.3.12 - Unauthenticated RCE

60RISK

GitHub PoC★ 1

GILANG - Exploiter for CVE-2021-25094

CVE-2021-25094—10 Jul 2022

Tatsu < 3.3.12 - Unauthenticated RCE

60RISK

GitHub PoC★ 3

Exploiting Android Vulnerability in ES File Explorer

CVE-2019-6447—08 Jul 2022

The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary fi

50RISK

GitHub PoC★ 1

confluence rce

CVE-2022-26134CRITICALunder attackransomware08 Jul 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISK

GitHub PoC★ 5

CodoForum v5.1 - File Upload Bypass to RCE (Authenticated) exploit code

CVE-2022-31854—07 Jul 2022

Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin

50RISK

GitHub PoC★ 2

BIGIP CVE-2020-5902 Exploit POC and automation scanning vulnerability

CVE-2020-5902CRITICALunder attackransomware07 Jul 2022

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

GitHub PoC★ 2

f4yd4-s3c/cve-2022-26134

CVE-2022-26134CRITICALunder attackransomware06 Jul 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISK

GitHub PoC★ 24

Redis 沙盒逃逸（CVE-2022-0543）POC&EXP

CVE-2022-0543CRITICALunder attack06 Jul 2022

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific

100RISK

GitHub PoC★ 2

EXP for Spring4Shell(CVE-2022-22965)

CVE-2022-22965CRITICALunder attack05 Jul 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISK

GitHub PoC★ 1

CVE-2022-29464 Exploit

CVE-2022-29464CRITICALunder attackransomware05 Jul 2022

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file

100RISK

GitHub PoC★ 2

exp of CVE-2022-0847

CVE-2022-0847HIGHunder attack05 Jul 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISK

GitHub PoC

mq_notify: double sock_put()

CVE-2017-11176—05 Jul 2022

The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retr

23RISK

GitHub PoC★ 29

An eBPF detection program for CVE-2022-0847

CVE-2022-0847HIGHunder attack05 Jul 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISK

GitHub PoC★ 29

Atlassian Confluence (CVE-2022-26134) - Unauthenticated Remote code execution (RCE)

CVE-2022-26134CRITICALunder attackransomware05 Jul 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISK

GitHub PoC★ 2

exp of CVE-2022-0847

CVE-2022-0847HIGHunder attack05 Jul 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISK

GitHub PoC★ 3

Atlassian Confluence (CVE-2022-26134) - Unauthenticated OGNL injection vulnerability (RCE).

CVE-2022-26134CRITICALunder attackransomware05 Jul 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISK

GitHub PoC★ 2

CVE-2022-35513 | blink1-pass-decrypt

CVE-2022-35513—05 Jul 2022

The Blink1Control2 application <= 2.2.7 uses weak password encryption and an insecure method of storage.

23RISK

GitHub PoC★ 13

TheL1ghtVn/CVE-2022-30333-PoC

CVE-2022-30333HIGHunder attackransomware05 Jul 2022

RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) o

100RISK

GitHub PoC★ 5

Visualization, Fuzzing, Exploit and Patch of Baron Samedit Vulnerability

CVE-2021-3156HIGHunder attack04 Jul 2022

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RISK

GitHub PoC★ 1

Atlassian, CVE-2022-26134 An interactive lab showcasing the Confluence Server and Data Center un-authenticated RCE vulnerability.

CVE-2022-26134CRITICALunder attackransomware04 Jul 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISK

GitHub PoC★ 30

POC exploit for CVE-2015-10141

CVE-2015-10141CRITICAL04 Jul 2022

Xdebug Remote Debugger Unauthenticated OS Command Execution

63RISK

GitHub PoC

CVE-2022-1388, bypassing iControl REST authentication

CVE-2022-1388CRITICALunder attackransomware04 Jul 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISK

GitHub PoC

CVE-2022-24706 POC exploit

CVE-2022-24706CRITICALunder attack04 Jul 2022

Remote Code Execution Vulnerability in Packaging

100RISK

GitHub PoC

The above investigation of the ES file browser security weakness allows us to see the issue in its entirety

CVE-2019-6447—03 Jul 2022

The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary fi

50RISK

GitHub PoC★ 13

CVE-2022-2185 poc

CVE-2022-2185CRITICAL02 Jul 2022

A critical issue has been discovered in GitLab affecting all versions starting from 14.0 prior to 14.10.5, 15.0 prior to

85RISK

GitHub PoC★ 5

Ruby反序列化命令执行漏洞（CVE-2019-5420）-vulfocus通关版

CVE-2019-5420—02 Jul 2022

A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess th

60RISK

GitHub PoC★ 4

Apache Tomcat DoS (CVE-2022-29885) Exploit

CVE-2022-29885—01 Jul 2022

EncryptInterceptor does not provide complete protection on insecure networks

45RISK

GitHub PoC★ 1

PoC for exploiting CVE-2022-1388 on BIG IP F5

CVE-2022-1388CRITICALunder attackransomware01 Jul 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISK

GitHub PoC

A collection of exploits and documentation that can be used to exploit the Linux Dirty Pipe vulnerability.

CVE-2022-0847HIGHunder attack30 Jun 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.