Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,542cataloged exploits

34,971CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,443Referência 21,899GitHub PoC 13,947VulnCheck XDB 8,542Nuclei 4,243Metasploit 3,468✓ verified onlyrecent popular risk

13,937 exploits

GitHub PoC

Ce programme permet de détecter une faille RCE sur les serveurs Apache 2.4.49 et Apache 2.4.50

CVE-2021-41773HIGHunder attackransomware11 Nov 2021

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISK

open ↗

GitHub PoC★ 237

GitLab CE/EE Preauth RCE using ExifTool

CVE-2021-22205CRITICALunder attackransomware11 Nov 2021

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati

100RISK

open ↗

GitHub PoC

bu1xuan2/CVE-2018-15961

CVE-2018-15961CRITICALunder attack10 Nov 2021

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unr

100RISK

open ↗

GitHub PoC★ 1

rust noob tried write easy exploit code with rust lang

CVE-2021-21315HIGHunder attack10 Nov 2021

Command Injection Vulnerability

100RISK

open ↗

GitHub PoC★ 18

A Zeek package to detect CVE-2021-42292, a Microsoft Excel local privilege escalation exploit.

CVE-2021-42292HIGHunder attack09 Nov 2021

Microsoft Excel Security Feature Bypass Vulnerability

83RISK

open ↗

GitHub PoC★ 6

faisalfs10x/GitLab-CVE-2021-22205-scanner

CVE-2021-22205CRITICALunder attackransomware09 Nov 2021

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati

100RISK

open ↗

GitHub PoC★ 3

VMWARE VCENTER SERVER VIRTUAL SAN HEALTH CHECK PLUG-IN RCE (CVE-2021-21985)

CVE-2021-21985CRITICALunder attackransomware09 Nov 2021

The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual

100RISK

open ↗

GitHub PoC★ 1

This Metasploit module exploits an unauthenticated remote code execution vulnerability which exists in Apache version 2.4.49 (CVE-2021-41773). If files outside of the document root are not protected by ‘require all denied’ and CGI has been explicitly enabled, it can be used to execute arbitrary commands. This vulnerability has been reintroduced in the Apache 2.4.50 fix (CVE-2021-42013).

CVE-2021-41773HIGHunder attackransomware09 Nov 2021

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISK

open ↗

GitHub PoC★ 1

Contains the offensive (exploit and auxiliary) modules for the CVE-2021-40444.

CVE-2021-40444HIGHunder attackransomware08 Nov 2021

Microsoft MSHTML Remote Code Execution Vulnerability

100RISK

open ↗

GitHub PoC★ 52

Exploit for CVE-2021-40449

CVE-2021-40449HIGHunder attackransomware07 Nov 2021

Win32k Elevation of Privilege Vulnerability

100RISK

open ↗

GitHub PoC★ 16

Python exploit for vsftpd 2.3.4 - Backdoor Command Execution

CVE-2011-2523—07 Nov 2021

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

60RISK

open ↗

GitHub PoC★ 29

A sample POC for CVE-2021-30657 affecting MacOS

CVE-2021-30657MEDIUMunder attack07 Nov 2021

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2

90RISK

open ↗

GitHub PoC

JWT Exploit

CVE-2018-0114—06 Nov 2021

A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker

35RISK

open ↗

GitHub PoC

mmeza-developer/CVE-2019-5420-RCE

CVE-2019-5420—06 Nov 2021

A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess th

60RISK

open ↗

GitHub PoC

hh-hunter/cve-2021-22205

CVE-2021-22205CRITICALunder attackransomware05 Nov 2021

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati

100RISK

open ↗

GitHub PoC★ 4

Pickle Serialization Remote Code Execution - Memcached Poisoning

CVE-2021-33026CRITICAL05 Nov 2021

The Flask-Caching extension through 1.10.1 for Flask relies on Pickle for serialization, which may lead to remote code e

48RISK

open ↗

GitHub PoC★ 3

Exploit for GitLab CVE-2021-22205 Unauthenticated Remote Code Execution

CVE-2021-22205CRITICALunder attackransomware05 Nov 2021

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati

100RISK

open ↗

GitHub PoC

CVE-2021-22205& GitLab CE/EE RCE

CVE-2021-22205CRITICALunder attackransomware04 Nov 2021

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati

100RISK

open ↗

GitHub PoC

zkhalidul/GrabberWP-CVE-2017-5487

CVE-2017-5487—04 Nov 2021

wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before

45RISK

open ↗

GitHub PoC★ 6

Some docker images to play with CVE-2021-41773 and CVE-2021-42013

CVE-2021-41773HIGHunder attackransomware04 Nov 2021

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISK

open ↗

GitHub PoC★ 2

Modification of gitlab exploit anything under 13.10

CVE-2021-22204MEDIUMunder attack04 Nov 2021

Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code exec

100RISK

open ↗

GitHub PoC★ 6

POC for CVE-2021-34429 - Eclipse Jetty 11.0.5 Sensitive File Disclosure

CVE-2021-34429MEDIUM03 Nov 2021

For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characte

70RISK

open ↗

GitHub PoC★ 20

the metasploit script(POC) about CVE-2021-36260

CVE-2021-36260CRITICALunder attack03 Nov 2021

A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation,

100RISK

open ↗

GitHub PoC★ 1

Test vulnerability of CVE-2020-3452

CVE-2020-3452HIGHunder attack03 Nov 2021

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

100RISK

open ↗

GitHub PoC★ 4

Proof-of-Concept tool for CVE-2021-29156, an LDAP injection vulnerability in ForgeRock OpenAM v13.0.0.

CVE-2021-29156—03 Nov 2021

ForgeRock OpenAM before 13.5.1 allows LDAP injection via the Webfinger protocol. For example, an unauthenticated attacke

60RISK

open ↗

GitHub PoC★ 1

Exploit Apache 2.4.50(CVE-2021-42013)

CVE-2021-42013CRITICALunder attackransomware03 Nov 2021

Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

100RISK

open ↗

GitHub PoC

It is a simple tool to exploit local file include . vulnerabilities

CVE-2006-3392—03 Nov 2021

Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote

60RISK

open ↗

GitHub PoC

It is a simple tool to exploit local file include . vulnerabilities

CVE-2006-3392—03 Nov 2021

Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote

60RISK

open ↗

GitHub PoC★ 5

Fuel CMS 1.4.1 - Remote Code Execution

CVE-2018-16763—03 Nov 2021

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca

60RISK

open ↗

GitHub PoC★ 48

Exploitation code for CVE-2021-40539

CVE-2021-40539CRITICALunder attackransomware03 Nov 2021

Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API authentication bypass with resulta

100RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.