Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,313cataloged exploits
34,834CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,797GitHub PoC 13,885VulnCheck XDB 8,484Nuclei 4,237Metasploit 3,467✓ verified onlyrecentpopularrisk
13,885 exploits
GitHub PoC★ 3
TerraMaster TOS Unauthenticated Remote Command Execution(RCE) Vulnerability CVE-2022-24990
CVE-2022-24990CRITICALunder attackransomware12 Apr 2022
TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agen
100RISK
open ↗
GitHub PoC
Wangsafz/cve-2017-0358.sh
CVE-2017-0358HIGH12 Apr 2022
ntfs-3g: Modprobe influence vulnerability via environment variables
56RISK
open ↗
GitHub PoC★ 23
spring4shell | CVE-2022-22965
CVE-2022-22965CRITICALunder attack12 Apr 2022
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISK
open ↗
GitHub PoC★ 12
提供批量扫描URL以及执行命令功能。Workspace ONE Access 模板注入漏洞，可执行任意代码
CVE-2022-22954CRITICALunder attackransomware12 Apr 2022
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISK
open ↗
GitHub PoC
lucksec/VMware-CVE-2022-22954
CVE-2022-22954CRITICALunder attackransomware12 Apr 2022
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISK
open ↗
GitHub PoC★ 1
mumu2020629/-CVE-2022-22954-scanner
CVE-2022-22954CRITICALunder attackransomware12 Apr 2022
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISK
open ↗
GitHub PoC★ 1
CVE-2022-22954 Açığı test etme
CVE-2022-22954CRITICALunder attackransomware12 Apr 2022
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISK
open ↗
GitHub PoC★ 1
corelight/cve-2022-22954
CVE-2022-22954CRITICALunder attackransomware12 Apr 2022
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISK
open ↗
GitHub PoC★ 10
PoC for CVE-2022-22954 - VMware Workspace ONE Access Freemarker Server-Side Template Injection
CVE-2022-22954CRITICALunder attackransomware12 Apr 2022
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISK
open ↗
GitHub PoC★ 1
Greenwolf/CVE-2022-1175
CVE-2022-1175HIGH12 Apr 2022
Improper neutralization of user input in GitLab CE/EE versions 14.4 before 14.7.7, all versions starting from 14.8 befor
63RISK
open ↗
GitHub PoC★ 4
aniqfakhrul/CVE-2022-22954
CVE-2022-22954CRITICALunder attackransomware11 Apr 2022
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISK
open ↗
GitHub PoC★ 11
CVE-2022-22954 is a server-side template injection vulnerability in the VMware Workspace ONE Access and Identity Manager
CVE-2022-22954CRITICALunder attackransomware11 Apr 2022
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISK
open ↗
GitHub PoC★ 279
POC for VMWARE CVE-2022-22954
CVE-2022-22954CRITICALunder attackransomware11 Apr 2022
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISK
open ↗
GitHub PoC★ 4
Spring4Shell , Spring Framework RCE (CVE-2022-22965) , Burpsuite Plugin
CVE-2022-22965CRITICALunder attack11 Apr 2022
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISK
open ↗
GitHub PoC
Script to check for Spring4Shell vulnerability
CVE-2022-22965CRITICALunder attack11 Apr 2022
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISK
open ↗
GitHub PoC★ 2
burp被动扫描插件，目前只有CVE-2022-22947
CVE-2022-22947CRITICALunder attack11 Apr 2022
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe
100RISK
open ↗
GitHub PoC
G01d3nW01f/CVE-2022-22963
CVE-2022-22963CRITICALunder attack11 Apr 2022
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po
100RISK
open ↗
GitHub PoC
nanopathi/external_expat_AOSP10_r33_CVE-2022-22822toCVE-2022-22827
CVE-2022-22822CRITICAL11 Apr 2022
addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
48RISK
open ↗
GitHub PoC
mappl3/CVE-2019-0841
CVE-2019-0841HIGHunder attackransomware09 Apr 2022
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li
98RISK
open ↗
GitHub PoC★ 3
phpunit-shell | CVE_2017-9841
CVE-2017-9841CRITICALunder attack09 Apr 2022
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP c
100RISK
open ↗
GitHub PoC
fransvanbuul/CVE-2022-22965-susceptibility
CVE-2022-22965CRITICALunder attack09 Apr 2022
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISK
open ↗
GitHub PoC★ 1
Ported golang version of dirtycow.c
CVE-2016-5195HIGHunder attack08 Apr 2022
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RISK
open ↗
GitHub PoC★ 3
CalumHutton/CVE-2022-22965-PoC_Payara
CVE-2022-22965CRITICALunder attack07 Apr 2022
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISK
open ↗
GitHub PoC★ 101
Spring Framework RCE (CVE-2022-22965) Nmap (NSE) Checker (Non-Intrusive)
CVE-2022-22965CRITICALunder attack07 Apr 2022
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISK
open ↗
GitHub PoC
Spring Cloud Config CVE-2019-3799|CVE_2020_5410 漏洞检测
CVE-2019-3799—07 Apr 2022
Directory Traversal with spring-cloud-config-server
60RISK
open ↗
GitHub PoC
Spring4Shell PoC (CVE-2022-22965)
CVE-2022-22965CRITICALunder attack07 Apr 2022
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISK
open ↗
GitHub PoC★ 63
CVE-2022-22965写入冰蝎webshell脚本
CVE-2022-22965CRITICALunder attack07 Apr 2022
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISK
open ↗
GitHub PoC★ 6
CVE-2022-22965 pocsuite3 POC
CVE-2022-22965CRITICALunder attack07 Apr 2022
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISK
open ↗
GitHub PoC
tmatejicek/CVE-2015-1397
CVE-2015-1397—07 Apr 2022
SQL injection vulnerability in the getCsvFile function in the Mage_Adminhtml_Block_Widget_Grid class in Magento Communit
35RISK
open ↗
GitHub PoC★ 2
Navigate CMS <= 2.9.4 - Server-Side Request Forgery (Authenticated)
CVE-2022-28117—06 Apr 2022
A Server-Side Request Forgery (SSRF) in feed_parser class of Navigate CMS v2.9.4 allows remote attackers to force the ap
43RISK
open ↗
← previouspage 322 / 463next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.