Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

89,094cataloged exploits

41,119CVEs with public exploitation

24,696lab-tested

All Referência 26,689Exploit-DB 24,490GitHub PoC 18,485VulnCheck XDB 11,277Nuclei 4,613Metasploit 3,540✓ verified onlyrecent popular risk

89,094 exploits

GitHub PoC

CVE-2025-48703 là lỗ hổng mức độ nghiêm trọng trong CentOS Web Panel (CWP) cho phép kẻ tấn công không xác thực (unauthenticated) có thể thực thi mã từ xa (RCE) thông qua bỏ qua cơ chế xác thực và thực thi câu lệnh hệ thống. Lỗ hổng ảnh hưởng CWP từ phiên bản 0.9.8.1204 trở về trước, và đã được vá trên phiên bản mới nhất 0.9.8.1205.

CVE-2025-48703CRITICALunder attack01 Aug 2025

CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1205 allows unauthenticated remote code execution via shell

100RISK

GitHub PoC★ 2

PoC for CVE-2025-54589 – a reflected XSS vulnerability in Copyparty ≤ 1.18.6.

CVE-2025-54589MEDIUM31 Jul 2025

copyparty Reflected XSS via Filter Parameter

48RISK

VulnCheck XDB

initial-access

CVE-2023-23752MEDIUMunder attack31 Jul 2025

[20230201] - Core - Improper access check in webservice endpoints

100RISK

GitHub PoC

This rough PoC checker script tests targets for CVE-2025-33073 vulnerability by attempting to perform NTLM reflection attacks using NTLM auth coercion via samba RPC, to do this you need to have account with access to the samba.

CVE-2025-33073HIGHunder attack31 Jul 2025

Windows SMB Client Elevation of Privilege Vulnerability

93RISK

GitHub PoC★ 90

CVE-2025-30406 ViewState Exploit PoC

CVE-2025-30406CRITICALunder attack31 Jul 2025

Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the

100RISK

GitHub PoC

maxntv/CVE-2023-22894-PoC

CVE-2023-22894HIGHunder attack31 Jul 2025

Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting

71RISK

GitHub PoC★ 4

CVE‑2025‑5394 WP Alone ≤ 7.8.3

CVE-2025-5394CRITICAL31 Jul 2025

Alone – Charity Multipurpose Non-profit WordPress Theme <= 7.8.3 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation

75RISK

VulnCheck XDB

initial-access

CVE-2025-51482HIGH31 Jul 2025

Remote Code Execution in letta.server.rest_api.routers.v1.tools.run_tool_from_source in letta-ai Letta 0.7.12 allows rem

56RISK

GitHub PoC

mouftan/CVE-2022-44268

CVE-2022-44268MEDIUM31 Jul 2025

ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulti

55RISK

GitHub PoC

KiPhuong/challenge-cve-2024-3552

CVE-2024-3552CRITICAL31 Jul 2025

Web Directory Free < 1.7.0 - Unauthenticated SQL Injection

75RISK

VulnCheck XDB

info-leak

CVE-2023-22894HIGHunder attack31 Jul 2025

Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting

71RISK

VulnCheck XDB

initial-access

CVE-2025-5394CRITICAL31 Jul 2025

Alone – Charity Multipurpose Non-profit WordPress Theme <= 7.8.3 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation

75RISK

GitHub PoC

Educational PoC for Dirty COW (CVE-2016-5195) with logging, ptrace fallback, and binary payload support.

CVE-2016-5195HIGHunder attack31 Jul 2025

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISK

VulnCheck XDB

initial-access

CVE-2025-30406CRITICALunder attack31 Jul 2025

Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the

100RISK

GitHub PoC

rgvillanueva28/vulnbox-easy-CVE-2025-29927

CVE-2025-29927CRITICAL30 Jul 2025

Authorization Bypass in Next.js Middleware

85RISK

VulnCheck XDB

infoleak

CVE-2020-10220—30 Jul 2025

An issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection via the commands.inc.php

60RISK

GitHub PoC★ 1

🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.

CVE-2025-14847HIGHunder attack30 Jul 2025

Zlib compressed protocol header length confusion may allow memory read

100RISK

GitHub PoC★ 21

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2025-29824HIGHunder attackransomware30 Jul 2025

Windows Common Log File System Driver Elevation of Privilege Vulnerability

76RISK

GitHub PoC

Technical Details and Exploit for CVE-2025-50460

CVE-2025-50460CRITICAL30 Jul 2025

A remote code execution (RCE) vulnerability exists in the ms-swift project version 3.3.0 due to unsafe deserialization i

48RISK

GitHub PoC★ 4

本项目基于 Docker 搭建了一个用于复现和测试 sudo 本地权限提升漏洞 CVE-2025-32463 的实验环境。

CVE-2025-32463CRITICALunder attack30 Jul 2025

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

100RISK

GitHub PoC★ 2

A C‑based proof‑of‑concept exploit for CVE‑2025‑54769, automating the creation and upload of a malicious Perl CGI script to LPAR2RRD’s upgrade endpoint, leveraging directory traversal for remote code execution.

CVE-2025-54769HIGH30 Jul 2025

KL-001-2025-016: Xorux LPAR2RRD File Upload Directory Traversal

41RISK

GitHub PoC★ 1

Technical Details and Exploit for CVE-2025-50472

CVE-2025-50472CRITICAL30 Jul 2025

The modelscope/ms-swift library thru 2.6.1 is vulnerable to arbitrary code execution through deserialization of untruste

48RISK

VulnCheck XDB

info-leak

CVE-2025-14847HIGHunder attack30 Jul 2025

Zlib compressed protocol header length confusion may allow memory read

100RISK

GitHub PoC

Real-time anomaly detection system for Apache Struts CVE-2017-5638 exploit using streaming analytics, 3-gram byte analysis, and Count-Min Sketch. Detects RCE attacks without signatures, with <5ms latency and <0.1% false positives.

CVE-2017-5638CRITICALunder attackransomware30 Jul 2025

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISK

VulnCheck XDB

local

CVE-2025-32463CRITICALunder attack30 Jul 2025

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

100RISK

VulnCheck XDB

local

CVE-2023-22809HIGH30 Jul 2025

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environmen

68RISK

VulnCheck XDB

client-side

CVE-2023-2533HIGHunder attack30 Jul 2025

PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF

76RISK

GitHub PoC

CitrixBleed 2 NetScaler honeypot logs

CVE-2025-5777CRITICALunder attackransomware30 Jul 2025

NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread

100RISK

GitHub PoC★ 1

Automates vulnerability check for sudo versions and privilege escalation via sudoedit if exploitable, helping users test and gain root access.

CVE-2023-22809HIGH30 Jul 2025

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environmen

68RISK

GitHub PoC

Combined PoCs for rConfig: SQL Injection (CVE-2020-10220) & Command Injection (CVE-2020-10879)

CVE-2020-10220—30 Jul 2025

An issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection via the commands.inc.php

60RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.