Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,542cataloged exploits

34,971CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,443Referência 21,899GitHub PoC 13,947VulnCheck XDB 8,542Nuclei 4,243Metasploit 3,468✓ verified onlyrecent popular risk

13,947 exploits

GitHub PoC★ 9

Full unauthenticated RCE proof of concept for Rocket.Chat 3.12.1 CVE-2021-22911

CVE-2021-22911—30 Jul 2021

A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthenti

60RISK

open ↗

GitHub PoC★ 9

Polkit D-Bus Authentication Bypass Exploit

CVE-2021-3560HIGHunder attack30 Jul 2021

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile

91RISK

open ↗

GitHub PoC★ 10

WordPress Backup Guard Authenticated Remote Code Execution Exploit

CVE-2021-24155—30 Jul 2021

Backup Guard < 1.6.0 - Authenticated Arbitrary File Upload

60RISK

open ↗

GitHub PoC★ 1

Exploit for CVE-2018-3810

CVE-2018-3810—30 Jul 2021

Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unau

60RISK

open ↗

GitHub PoC★ 15

Shellshock exploit aka CVE-2014-6271

CVE-2014-6271CRITICALunder attack29 Jul 2021

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISK

open ↗

GitHub PoC

CVE-2018-9276 PRTG < 18.2.39 Reverse Shell (Python3 support)

CVE-2018-9276HIGHunder attack29 Jul 2021

An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administra

100RISK

open ↗

GitHub PoC★ 1

CVE-2021-36934 HiveNightmare vulnerability checker and workaround

CVE-2021-36934HIGHunder attack29 Jul 2021

Windows Elevation of Privilege Vulnerability

98RISK

open ↗

GitHub PoC★ 1

Exploit for CVE-2019-10149

CVE-2019-10149CRITICALunder attack29 Jul 2021

A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message(

100RISK

open ↗

GitHub PoC★ 3

To fight against Windows security breach PrintNightmare! (CVE-2021-34527, CVE-2021-1675)

CVE-2021-34527HIGHunder attackransomware28 Jul 2021

Windows Print Spooler Remote Code Execution Vulnerability

100RISK

open ↗

GitHub PoC★ 1

Exploit for CVE-2018-12636

CVE-2018-12636—28 Jul 2021

The iThemes Security (better-wp-security) plugin before 7.0.3 for WordPress allows SQL Injection (by attackers with Admi

35RISK

open ↗

GitHub PoC★ 1

Local Privilege Escalation via snapd (CVE-2019-7304) Remastered PoC exploit

CVE-2019-7304HIGH28 Jul 2021

Local privilege escalation via snapd socket

53RISK

open ↗

GitHub PoC★ 2

NYCY_homework_&_meeting

CVE-2021-3560HIGHunder attack28 Jul 2021

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile

91RISK

open ↗

GitHub PoC★ 7

HiveNightmare aka SeriousSAM

CVE-2021-36934HIGHunder attack27 Jul 2021

Windows Elevation of Privilege Vulnerability

98RISK

open ↗

GitHub PoC★ 1

An implementation of CVE-2017-12617

CVE-2017-12617HIGHunder attack27 Jul 2021

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTT

100RISK

open ↗

GitHub PoC★ 1

0x0D1n/CVE-2021-36934

CVE-2021-36934HIGHunder attack26 Jul 2021

Windows Elevation of Privilege Vulnerability

98RISK

open ↗

GitHub PoC

Exodusro/CVE-2021-3156

CVE-2021-3156HIGHunder attack26 Jul 2021

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RISK

open ↗

GitHub PoC★ 3

haidv35/CVE-2021-21972

CVE-2021-21972CRITICALunder attackransomware26 Jul 2021

The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor

100RISK

open ↗

GitHub PoC

This PowerShell script will take the mitigation measures for CVE-2021-36934 described by Microsoft and the US CERT team. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36934 https://kb.cert.org/vuls/id/506989 USE AT YOUR OWN RISK -- BACKUPS MAY BREAK.

CVE-2021-36934HIGHunder attack25 Jul 2021

Windows Elevation of Privilege Vulnerability

98RISK

open ↗

GitHub PoC★ 5

PoC for CVE-2021-36934 Aka HiveNightmare/SeriousSAM written in python3

CVE-2021-36934HIGHunder attack25 Jul 2021

Windows Elevation of Privilege Vulnerability

98RISK

open ↗

GitHub PoC★ 3

C# PoC for CVE-2021-36934/HiveNightmare/SeriousSAM

CVE-2021-36934HIGHunder attack24 Jul 2021

Windows Elevation of Privilege Vulnerability

98RISK

open ↗

GitHub PoC★ 1

This Repo is PoC environment of CVE-2014-6271(https://nvd.nist.gov/vuln/detail/cve-2014-6271).

CVE-2014-6271CRITICALunder attack24 Jul 2021

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISK

open ↗

GitHub PoC

3t4n/samba-3.0.24-CVE-2007-2447-vunerable-

CVE-2007-2447—23 Jul 2021

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands

50RISK

open ↗

GitHub PoC

Exploit Analysis of The WhatsApp Double-Free Vulnerability (CVE-2019-11932) Using the GEF-GDB Debugger

CVE-2019-11932—23 Jul 2021

A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version

35RISK

open ↗

GitHub PoC★ 3

see https://github.com/cube0x0/CVE-2021-1675

CVE-2021-1675HIGHunder attackransomware22 Jul 2021

Windows Print Spooler Remote Code Execution Vulnerability

100RISK

open ↗

GitHub PoC★ 1

A capability to identify and remediate CVE-2021-36934 (HiveNightmare)

CVE-2021-36934HIGHunder attack22 Jul 2021

Windows Elevation of Privilege Vulnerability

98RISK

open ↗

GitHub PoC★ 3

magichk/cve-2021-22146

CVE-2021-22146—22 Jul 2021

All versions of Elastic Cloud Enterprise has the Elasticsearch “anonymous” user enabled by default in deployed clusters.

28RISK

open ↗

GitHub PoC★ 2

Windows Elevation of Privilege Vulnerability (SeriousSAM)

CVE-2021-36934HIGHunder attack22 Jul 2021

Windows Elevation of Privilege Vulnerability

98RISK

open ↗

GitHub PoC★ 1

CVE-2021-36934 PowerShell Fix

CVE-2021-36934HIGHunder attack22 Jul 2021

Windows Elevation of Privilege Vulnerability

98RISK

open ↗

GitHub PoC★ 1

CVE-2021-36934 PowerShell scripts

CVE-2021-36934HIGHunder attack22 Jul 2021

Windows Elevation of Privilege Vulnerability

98RISK

open ↗

GitHub PoC★ 1

idea-oss/laravel-CVE-2021-3129-EXP

CVE-2021-3129CRITICALunder attackransomware22 Jul 2021

Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra

100RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.