Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
76,542cataloged exploits
34,971CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,899GitHub PoC 13,947VulnCheck XDB 8,542Nuclei 4,243Metasploit 3,468✓ verified onlyrecentpopularrisk
13,937 exploits
GitHub PoC★ 9
zer0yu/CVE-2021-41277
GeoJSON URL validation can expose server files and environment variables to unauthorized users
100RISK
open ↗GitHub PoC★ 18
CVE-2021-1675 LPE PoC in Nim (PrintNightmare Local Privilege Escalation)
Windows Print Spooler Remote Code Execution Vulnerability
100RISK
open ↗GitHub PoC★ 8
Microsoft Exchange ProxyLogon PoC (CVE-2021-26855)
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISK
open ↗GitHub PoC
sinisterghost/https-github.com-iBearcat-CVE-2018-8174_EXP
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows
93RISK
open ↗GitHub PoC
MaximeSchlegel/CVE-2021-32724-Target
check-spelling workflow vulnerable to GITHUB_TOKEN leakage via symlink attack
48RISK
open ↗GitHub PoC★ 1
a python3 version of the exploit written for CVE-2014-6287. Useful for completing the "Steel Mountain" room on TryHackMe.com without the use of metasploit.
The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c a
100RISK
open ↗GitHub PoC
A write up on the Steel Mountain box from TryHackMe.com and exploit for CVE-2014-6287
The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c a
100RISK
open ↗GitHub PoC
dearpan/cve-2018-9995
TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L
60RISK
open ↗GitHub PoC★ 1
CVE-2021-42325 POC
Froxlor through 0.10.29.1 allows SQL injection in Database/Manager/DbManagerMySQL.php via a custom DB name.
28RISK
open ↗GitHub PoC★ 5
Gex is an iOS 14.7 jailbreak using CVE-2021-30807 IOMFB & CVE-2021-30860 exploit(s)
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS
76RISK
open ↗GitHub PoC
Strapi Framework, 3.0.0-beta.17.4
The Strapi framework before 3.0.0-beta.17.8 is vulnerable to Remote Code Execution in the Install and Uninstall Plugin c
35RISK
open ↗GitHub PoC★ 1
NSE script to fingerprint if GitLab is vulnerable to cve-2021-22205-nse
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati
100RISK
open ↗GitHub PoC
Detect with python and tracking IP
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi
100RISK
open ↗GitHub PoC★ 2
Proof of concept for CVE-2020-7247 for educational purposes.
smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to
100RISK
open ↗GitHub PoC
lisinan988/CVE-2019-0708-scan
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RISK
open ↗GitHub PoC
lisinan988/CVE-2018-8174-exp
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows
93RISK
open ↗GitHub PoC★ 3
A CVE-2021-22205 Gitlab RCE POC written in Golang
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati
100RISK
open ↗GitHub PoC
lisinan988/CVE-2020-0796-exp
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISK
open ↗GitHub PoC
lisinan988/CVE-2021-40444-exp
Microsoft MSHTML Remote Code Execution Vulnerability
100RISK
open ↗GitHub PoC
lisinan988/CVE-2017-11882-exp
Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi
100RISK
open ↗GitHub PoC
Metabase GeoJSON map local file inclusion
GeoJSON URL validation can expose server files and environment variables to unauthorized users
100RISK
open ↗GitHub PoC★ 4
Vulnmachines/Metabase_CVE-2021-41277
GeoJSON URL validation can expose server files and environment variables to unauthorized users
100RISK
open ↗GitHub PoC
plugin made for LeakiX
GeoJSON URL validation can expose server files and environment variables to unauthorized users
100RISK
open ↗GitHub PoC
Python 3 script to identify CVE-2021-26084 via network requests.
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISK
open ↗GitHub PoC★ 83
Microsoft Exchange Server Poc
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISK
open ↗GitHub PoC★ 17
对Exchange Proxyshell 做了二次修改，精确的拆分、实现辅助性安全测试。
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISK
open ↗GitHub PoC
A write up on the THM room Vulnerability Capstone & Exploit script for CVE-2018-16763.
FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca
60RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.