Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,313cataloged exploits

34,834CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,443Referência 21,797GitHub PoC 13,885VulnCheck XDB 8,484Nuclei 4,237Metasploit 3,467✓ verified onlyrecent popular risk

13,885 exploits

GitHub PoC

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration "require all denied", these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution. This issue is known to be exploited in the wild. This issue only affects Apache 2.4.49 and not earlier versions. The fix in Apache HTTP Server 2.4.50 was found to be incomplete, see CVE-2021-42013.

CVE-2021-41773HIGHunder attackransomware17 Jun 2022

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISK

GitHub PoC

unauthorized RcE exploit for webnin < 1.920

CVE-2019-15107CRITICALunder attackransomware17 Jun 2022

An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera

100RISK

GitHub PoC

🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.

CVE-2025-55182CRITICALunder attackransomware17 Jun 2022

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISK

GitHub PoC

0xF331-D3AD/CVE-2012-2982

CVE-2012-2982—16 Jun 2022

file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid

50RISK

GitHub PoC

This repository is developed to understand CVE-2019-6447

CVE-2019-6447—15 Jun 2022

The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary fi

50RISK

GitHub PoC

p4tq/hikvision_CVE-2017-7921_auth_bypass_config_decryptor

CVE-2017-7921CRITICALunder attack15 Jun 2022

An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16

100RISK

GitHub PoC★ 31

Extract payload URLs from Follina (CVE-2022-30190) docx and rtf files

CVE-2022-30190HIGHunder attackransomware15 Jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISK

GitHub PoC

notherealhazard/follina-CVE-2022-30190

CVE-2022-30190HIGHunder attackransomware15 Jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISK

GitHub PoC

follina zero day vulnerability to help Microsoft to mitigate the attack

CVE-2022-30190HIGHunder attackransomware15 Jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISK

GitHub PoC

ernestak/CVE-2022-30190

CVE-2022-30190HIGHunder attackransomware14 Jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISK

GitHub PoC

ernestak/Sigma-Rule-for-CVE-2022-30190

CVE-2022-30190HIGHunder attackransomware14 Jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISK

GitHub PoC

WebLogic CNVD-C-2019_48814 CVE-2017-10271 Scan By 7kbstorm

CVE-2017-10271HIGHunder attackransomware14 Jun 2022

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte

100RISK

GitHub PoC★ 1

CVE-2022-22620: Use-after-free in Safari

CVE-2022-22620HIGHunder attack14 Jun 2022

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS

76RISK

GitHub PoC★ 1

I wrote a blog post about Apache CouchDB CVE-2022-24706 RCE Exploits

CVE-2022-24706CRITICALunder attack14 Jun 2022

Remote Code Execution Vulnerability in Packaging

100RISK

GitHub PoC★ 106

PoC for CVE-2022-26809, analisys and considerations are shown in the github.io.

CVE-2022-26809CRITICAL13 Jun 2022

Remote Procedure Call Runtime Remote Code Execution Vulnerability

70RISK

GitHub PoC★ 1

CVE-2022-30525 POC

CVE-2022-30525CRITICALunder attack13 Jun 2022

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat

100RISK

GitHub PoC★ 4

CVE-2022-26134 - Pre-Auth Remote Code Execution via OGNL Injection

CVE-2022-26134CRITICALunder attackransomware13 Jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISK

GitHub PoC

CVE-2022-30190 : CVE 0-day MS Offic RCE aka msdt follina

CVE-2022-30190HIGHunder attackransomware13 Jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISK

GitHub PoC★ 2

An Unofficial Patch Follina CVE-2022-30190 (patch) by micrisoft Guidelines.

CVE-2022-30190HIGHunder attackransomware13 Jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISK

GitHub PoC

These are the source codes of the Python scripts to apply the temporary protection against the CVE-2022-30190 vulnerability (Follina)

CVE-2022-30190HIGHunder attackransomware12 Jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISK

GitHub PoC★ 2

seymanurmutlu/CVE-2022-24086-CVE-2022-24087

CVE-2022-24086CRITICALunder attack12 Jun 2022

Adobe Commerce checkout improper input validation leads to remote code execution

100RISK

GitHub PoC

ahmetfurkans/CVE-2022-22718

CVE-2022-22718HIGHunder attack12 Jun 2022

Windows Print Spooler Elevation of Privilege Vulnerability

76RISK

GitHub PoC

Log4Shell CVE-2021-44228 Demo

CVE-2021-44228CRITICALunder attackransomware12 Jun 2022

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

GitHub PoC★ 1

A OS Command Injection Vulnerability in the CGI Program of Zyxel

CVE-2022-30525CRITICALunder attack12 Jun 2022

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat

100RISK

GitHub PoC

These are two Python scripts compiled to easily and quickly apply temporary protection against the CVE-2022-30190 vulnerability (Follina)

CVE-2022-30190HIGHunder attackransomware11 Jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISK

GitHub PoC

Practising technical writing with researching CVE-2022-22954 VMware Workspace ONE Access RCE vulnerability.

CVE-2022-22954CRITICALunder attackransomware11 Jun 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RISK

GitHub PoC★ 3

[CVE-2022-26134] Attlasian Confluence RCE

CVE-2022-26134CRITICALunder attackransomware10 Jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISK

GitHub PoC

CVE-2022-26134, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. This is CVE-2022-26134 expoitation script

CVE-2022-26134CRITICALunder attackransomware10 Jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISK

GitHub PoC★ 1

check CVE-2021-40438

CVE-2021-40438CRITICALunder attackransomware10 Jun 2022

mod_proxy SSRF

100RISK

GitHub PoC★ 7

PoC for Sourcegraph Gitserver < 3.37.0 RCE (CVE-2022-23642)

CVE-2022-23642HIGH10 Jun 2022

Code Injection in Sourcegraph

78RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.