Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,313cataloged exploits
34,834CVEs with public exploitation
24,695lab-tested
13,885 exploits
GitHub PoC3
An NSIS script that helps deploy and roll back the mitigation registry patch for CVE-2022-30190 as recommended by Microsoft
CVE-2022-30190HIGHunder attackransomware01 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC7
MS-MSDT Follina CVE-2022-30190 PoC document generator
CVE-2022-30190HIGHunder attackransomware01 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC
Vaisakhkm2625/MSDT-0-Day-CVE-2022-30190-Poc
CVE-2022-30190HIGHunder attackransomware01 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC
mitespsoc/CVE-2022-30190-POC
CVE-2022-30190HIGHunder attackransomware01 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC8
Just another PoC for the new MSDT-Exploit
CVE-2022-30190HIGHunder attackransomware01 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC
hscorpion/CVE-2022-30190
CVE-2022-30190HIGHunder attackransomware01 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC
Proof of Concept zu MSDT-Follina - CVE-2022-30190. ÜBERPRÜFUNG DER WIRKSAMKEIT VON MICROSOFT DEFNEDER IN DER JEWEILS AKTUELLSTEN WINDOWS 10 VERSION.
CVE-2022-30190HIGHunder attackransomware01 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC17
Follina MS-MSDT 0-day MS Office RCE (CVE-2022-30190) PoC in Go
CVE-2022-30190HIGHunder attackransomware01 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC
Python script to exploit CVE-2022-29303
CVE-2022-29303CRITICALunder attack01 Jun 2022
SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.
100RISK
open
GitHub PoC
CVE-2022-30190 or "Follina" 0day proof of concept
CVE-2022-30190HIGHunder attackransomware01 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC1
A proof of concept of an SEH overflow with arbitrary dll injection
CVE-2010-530101 Jun 2022
Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a HEAD re
28RISK
open
GitHub PoC1
tuannq2299/CVE-2019-8942
CVE-2019-894231 May 2022
WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an _wp_attached_file Post Meta entry ca
60RISK
open
GitHub PoC25
Exploit to trigger RCE for CVE-2018-16763 on FuelCMS <= 1.4.1 and interactive shell.
CVE-2018-1676331 May 2022
FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca
60RISK
open
GitHub PoC
JCPpeiqi/-cve-2021-46381
CVE-2021-4638131 May 2022
Local File Inclusion due to path traversal in D-Link DAP-1620 leads to unauthorized internal files reading [/etc/passwd]
50RISK
open
GitHub PoC
2867a0/CVE-2022-30190
CVE-2022-30190HIGHunder attackransomware31 May 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC
Exploit for Apache 2.4.50 (CVE-2021-42013)
CVE-2021-42013CRITICALunder attackransomware31 May 2022
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
100RISK
open
GitHub PoC1,250
【懒人神器】一款图形化、批量采集url、批量对采集的url进行各种nday检测的工具。可用于src挖掘、cnvd挖掘、0day利用、打造自己的武器库等场景。可以批量利用Actively Exploited Atlassian Confluence 0Day CVE-2022-26134和DedeCMS v5.7.87 SQL注入 CVE-2022-23337。
CVE-2022-26134CRITICALunder attackransomware31 May 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISK
open
GitHub PoC6
CVE-2022-30190 remediation via removal of ms-msdt from Windows registry
CVE-2022-30190HIGHunder attackransomware31 May 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC
aymankhder/MSDT_CVE-2022-30190-follina-
CVE-2022-30190HIGHunder attackransomware31 May 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC4
Microsoft Sentinel analytic rule and hunting queries in ASIM for activity of MSDT and CVE-2022-30190.
CVE-2022-30190HIGHunder attackransomware31 May 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC1
CVE-2022-30190- A Zero-Click RCE Vulnerability In MSDT
CVE-2022-30190HIGHunder attackransomware31 May 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC
Picking up processes that have triggered ASR related to CVE-2022-30190
CVE-2022-30190HIGHunder attackransomware31 May 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC1
Aka Follina = benign POC.
CVE-2022-30190HIGHunder attackransomware31 May 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC38
This Repository Talks about the Follina MSDT from Defender Perspective
CVE-2022-30190HIGHunder attackransomware31 May 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC3
Python script to exploit CVE-2022-29303
CVE-2022-29303CRITICALunder attack31 May 2022
SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.
100RISK
open
GitHub PoC60
Microsoft Office Word Rce 复现(CVE-2022-30190)
CVE-2022-30190HIGHunder attackransomware31 May 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC105
CVE-2022-30190 Follina POC
CVE-2022-30190HIGHunder attackransomware31 May 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC5
CVE-2022-1292 OpenSSL c_rehash Vulnerability
CVE-2022-1292CRITICAL30 May 2022
The c_rehash script allows command injection
70RISK
open
GitHub PoC157
POC CVE-2022-30190 : CVE 0-day MS Offic RCE aka msdt follina
CVE-2022-30190HIGHunder attackransomware30 May 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC28
CVE-2022-1292 OpenSSL c_rehash Vulnerability - POC
CVE-2022-1292CRITICAL30 May 2022
The c_rehash script allows command injection
70RISK
open
previouspage 314 / 463next

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.