Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,302cataloged exploits

35,469CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,451Referência 22,301GitHub PoC 14,141VulnCheck XDB 8,646Nuclei 4,289Metasploit 3,474✓ verified onlyrecent popular risk

77,151 exploits

GitHub PoC

letsr00t/CVE-2022-0847

CVE-2022-0847HIGHunder attack15 Feb 2024

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISK

open ↗

VulnCheck XDB

initial-access

CVE-2023-46604CRITICALunder attackransomware14 Feb 2024

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISK

open ↗

VulnCheck XDB

initial-access

CVE-2023-36845CRITICALunder attack14 Feb 2024

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RISK

open ↗

GitHub PoC★ 1

This Python script automates the Proof of Concept (PoC) for CVE-2023-36845, a vulnerability impacting Juniper Networks Junos OS on EX and SRX Series devices. The vulnerability resides in the J-Web component, allowing remote manipulation of the PHPRC variable, potentially leading to code injection.

CVE-2023-36845CRITICALunder attack14 Feb 2024

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RISK

open ↗

GitHub PoC★ 1

Tool for exploring CVE-2023-30547

CVE-2023-30547CRITICAL14 Feb 2024

Sandbox Escape in vm2

70RISK

open ↗

GitHub PoC★ 1

stegano5/ExploitScript-CVE-2023-46604

CVE-2023-46604CRITICALunder attackransomware14 Feb 2024

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISK

open ↗

GitHub PoC★ 5

CVES

CVE-2023-36845CRITICALunder attack13 Feb 2024

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RISK

open ↗

GitHub PoC

CVE-2023-36845 и CVE-2023-36846 Juniper Junos OS J-Web RCE

CVE-2023-36845CRITICALunder attack13 Feb 2024

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RISK

open ↗

VulnCheck XDB

initial-access

CVE-2023-36845CRITICALunder attack13 Feb 2024

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RISK

open ↗

GitHub PoC

CVE-2024-23897

CVE-2024-23897CRITICALunder attackransomware13 Feb 2024

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an

100RISK

open ↗

VulnCheck XDB

initial-access

CVE-2023-36845CRITICALunder attack13 Feb 2024

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RISK

open ↗

VulnCheck XDB

initial-access

CVE-2017-1000486CRITICALunder attack13 Feb 2024

Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution

100RISK

open ↗

VulnCheck XDB

initial-access

CVE-2023-36846MEDIUMunder attack13 Feb 2024

Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files

85RISK

open ↗

Metasploit600

QNAP QTS and QuTS Hero Unauthenticated Remote Code Execution in quick.cgi

CVE-2023-47218MEDIUM13 Feb 2024

QTS, QuTS hero, QuTScloud

70RISK

open ↗

GitHub PoC

Explotación CVE-2017-1000486

CVE-2017-1000486CRITICALunder attack13 Feb 2024

Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution

100RISK

open ↗

VulnCheck XDB

local

CVE-2021-1675HIGHunder attackransomware12 Feb 2024

Windows Print Spooler Remote Code Execution Vulnerability

100RISK

open ↗

VulnCheck XDB

local

CVE-2021-1675HIGHunder attackransomware12 Feb 2024

Windows Print Spooler Remote Code Execution Vulnerability

100RISK

open ↗

VulnCheck XDB

initial-access

CVE-2020-1472MEDIUMunder attackransomware12 Feb 2024

Netlogon Elevation of Privilege Vulnerability

100RISK

open ↗

VulnCheck XDB

local

CVE-2021-34527HIGHunder attackransomware12 Feb 2024

Windows Print Spooler Remote Code Execution Vulnerability

100RISK

open ↗

VulnCheck XDB

initial-access

CVE-2024-1781MEDIUM12 Feb 2024

Totolink X6000R AX3000 shttpd cstecgi.cgi setWizardCfg command injection

38RISK

open ↗

GitHub PoC

Lab introduction to ZeroLogon

CVE-2020-1472MEDIUMunder attackransomware12 Feb 2024

Netlogon Elevation of Privilege Vulnerability

100RISK

open ↗

GitHub PoC

whoami-chmod777/CVE-2021-1675---PrintNightmare-LPE-PowerShell-

CVE-2021-1675HIGHunder attackransomware12 Feb 2024

Windows Print Spooler Remote Code Execution Vulnerability

100RISK

open ↗

GitHub PoC★ 1

whoami-chmod777/CVE-2021-1675-CVE-2021-34527

CVE-2021-1675HIGHunder attackransomware12 Feb 2024

Windows Print Spooler Remote Code Execution Vulnerability

100RISK

open ↗

GitHub PoC★ 76

CVE-2023-22527 内存马注入工具

CVE-2023-22527CRITICALunder attackransomware11 Feb 2024

A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta

100RISK

open ↗

GitHub PoC★ 2

vidura2/cve-2023-46747

CVE-2023-46747CRITICALunder attackransomware11 Feb 2024

BIG-IP Configuration utility unauthenticated remote code execution vulnerability

100RISK

open ↗

VulnCheck XDB

initial-access

CVE-2023-22527CRITICALunder attackransomware11 Feb 2024

A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta

100RISK

open ↗

VulnCheck XDB

initial-access

CVE-2023-46747CRITICALunder attackransomware11 Feb 2024

BIG-IP Configuration utility unauthenticated remote code execution vulnerability

100RISK

open ↗

VulnCheck XDB

client-side

CVE-2022-4262HIGHunder attack11 Feb 2024

Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corru

76RISK

open ↗

GitHub PoC

quangnh89/CVE-2022-4262

CVE-2022-4262HIGHunder attack11 Feb 2024

Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corru

76RISK

open ↗

GitHub PoC★ 1

CuteNews 2.1.2 - CVE-2019-11447 Proof-Of-Concept

CVE-2019-11447—11 Feb 2024

An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload proce

35RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.