Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,991cataloged exploits

40,452CVEs with public exploitation

24,696lab-tested

All Referência 26,240Exploit-DB 24,488GitHub PoC 18,044VulnCheck XDB 10,121Nuclei 4,561Metasploit 3,537✓ verified onlyrecent popular risk

18,044 exploits

GitHub PoC★ 2

CVE-2024-57040 is a security vulnerability found in certain TP-Link TL-WR845N router models. Specifically, it involves a "hardcoded" password for the router's root account. This means a default, unchanging password is built into the router's software.

CVE-2024-57040CRITICAL18 Mar 2025

TP-Link TL-WR845N devices with firmware TL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 was discovered to contain a

48RISK

GitHub PoC★ 1

iOS/macOS library that exploits CVE-2023-41991 for signing iOS applications.

CVE-2023-41991MEDIUMunder attack18 Mar 2025

A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A mal

68RISK

GitHub PoC

HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion (LFI)

CVE-2025-1661CRITICAL18 Mar 2025

HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File Inclusion

75RISK

GitHub PoC★ 1

WordPress WPMasterToolKit plugin <= 1.13.1 - Arbitrary File Upload vulnerability

CVE-2024-56249CRITICAL18 Mar 2025

WordPress WPMasterToolKit plugin <= 1.13.1 - Arbitrary File Upload vulnerability

48RISK

GitHub PoC★ 1

Checkmarx/Checkmarx-CVE-2025-30066-Detection-Tool

CVE-2025-30066HIGHunder attack18 Mar 2025

tj-actions changed-files before 46 allows remote attackers to discover secrets by reading actions logs. (The tags v1 thr

93RISK

GitHub PoC★ 7

Apache Tomcat Remote Code Execution (RCE) Exploit - CVE-2025-24813

CVE-2025-24813CRITICALunder attack18 Mar 2025

Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

100RISK

GitHub PoC

Microsoft Windows File Explorer Spoofing Vulnerability / NTLM Hash Leak

CVE-2025-24071MEDIUM18 Mar 2025

Microsoft Windows File Explorer Spoofing Vulnerability

38RISK

GitHub PoC★ 1

Jimmy01240397/CVE-2024-12641_12642_12645

CVE-2024-12641CRITICAL17 Mar 2025

Chunghwa Telecom TenderDocTransfer - Reflected Cross-site Scripting to RCE

48RISK

GitHub PoC★ 1

regantemudo/CVE-2024-25641-Exploit-for-Cacti-1.2.26

CVE-2024-25641CRITICAL17 Mar 2025

Cacti RCE vulnerability when importing packages

85RISK

GitHub PoC★ 1

orilevy8/cve-2023-0386

CVE-2023-0386HIGHunder attack17 Mar 2025

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities wa

86RISK

GitHub PoC

KillReal01/CVE-2023-4911

CVE-2023-4911HIGHunder attack17 Mar 2025

Glibc: buffer overflow in ld.so leading to privilege escalation

98RISK

GitHub PoC★ 3

Nuclei Template CVE-2025–24813

CVE-2025-24813CRITICALunder attack17 Mar 2025

Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

100RISK

GitHub PoC

RCE, Citirx ADC and Gateway Directory Traversal

CVE-2019-19781CRITICALunder attackransomware16 Mar 2025

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

GitHub PoC

DavidBr27/CVE-2013-3900-Remediation-Script

CVE-2013-3900MEDIUMunder attack16 Mar 2025

WinVerifyTrust Signature Validation Vulnerability

75RISK

GitHub PoC★ 16

CVE-2025-24813利用工具

CVE-2025-24813CRITICALunder attack16 Mar 2025

Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

100RISK

GitHub PoC

CVE-2024-9047, wfu_file_downloader.php

CVE-2024-9047CRITICAL16 Mar 2025

WordPress File Upload <= 4.24.11 - Unauthenticated Path Traversal to Arbitrary File Read and Deletion in wfu_file_downloader.php

85RISK

GitHub PoC★ 2

Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request.

CVE-2023-30258CRITICAL16 Mar 2025

Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary com

85RISK

GitHub PoC★ 415

CVE-2025-24071: NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File

CVE-2025-24071MEDIUM16 Mar 2025

Microsoft Windows File Explorer Spoofing Vulnerability

38RISK

GitHub PoC★ 2

CVE-2024-51788 - WordPress The Novel Design Store Directory plugin <= 4.3.0 - Unauthenticated Arbitrary File Upload Vulnerability

CVE-2024-51788CRITICAL15 Mar 2025

WordPress The Novel Design Store Directory plugin <= 4.3.0 - Arbitrary File Upload vulnerability

48RISK

GitHub PoC★ 2

One-Click-Root program based on CVE-2016-5195, that works on the old 'PlayStation Certified' android devices

CVE-2016-5195HIGHunder attack15 Mar 2025

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISK

GitHub PoC★ 2

PoC - OpenSSL NPN Buffer Overread

CVE-2024-5535CRITICAL15 Mar 2025

SSL_select_next_proto buffer overread

48RISK

GitHub PoC★ 52

一個測試CVE-2024-4577和CVE-2024-8926的安全滲透工具

CVE-2024-4577CRITICALunder attackransomware15 Mar 2025

Argument Injection in PHP-CGI

100RISK

GitHub PoC

ishwardeepp/CVE-2025-22604-Cacti-RCE

CVE-2025-22604CRITICAL15 Mar 2025

Cacti has Authenticated RCE via multi-line SNMP responses

48RISK

GitHub PoC★ 193

his repository contains an automated Proof of Concept (PoC) script for exploiting **CVE-2025-24813**, a Remote Code Execution (RCE) vulnerability in Apache Tomcat. The vulnerability allows an attacker to upload a malicious serialized payload to the server, leading to arbitrary code execution via deserialization when specific conditions are met.

CVE-2025-24813CRITICALunder attack14 Mar 2025

Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

100RISK

GitHub PoC★ 1

User name enumeration against SSH daemons affected by CVE-2016-6210.

CVE-2016-6210MEDIUM14 Mar 2025

sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static

70RISK

GitHub PoC★ 3

CVE-2025-24813_POC

CVE-2025-24813CRITICALunder attack14 Mar 2025

Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

100RISK

GitHub PoC

Webmin 1.580 /file/show.cgi Remote Code Execution

CVE-2012-2982—14 Mar 2025

file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid

50RISK

GitHub PoC★ 11

cve-2025-24813验证脚本

CVE-2025-24813CRITICALunder attack14 Mar 2025

Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

100RISK

GitHub PoC

DeividasTerechovas/SOC335-CVE-2024-49138-Exploitation-Detected

CVE-2024-49138HIGHunder attack14 Mar 2025

Windows Common Log File System Driver Elevation of Privilege Vulnerability

76RISK

GitHub PoC

Pei4AN/CVE-2025-28915

CVE-2025-28915CRITICAL14 Mar 2025

WordPress ThemeEgg ToolKit plugin <= 1.2.9 - Arbitrary File Upload vulnerability

48RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.