Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
86,991cataloged exploits
40,452CVEs with public exploitation
24,696lab-tested
AllReferência 26,240Exploit-DB 24,488GitHub PoC 18,044VulnCheck XDB 10,121Nuclei 4,561Metasploit 3,537✓ verified onlyrecentpopularrisk
18,044 exploits
GitHub PoC
0xF331-D3AD/CVE-2012-2982
file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid
50RISK
open ↗GitHub PoC
notherealhazard/follina-CVE-2022-30190
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗GitHub PoC
follina zero day vulnerability to help Microsoft to mitigate the attack
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗GitHub PoC★ 31
Extract payload URLs from Follina (CVE-2022-30190) docx and rtf files
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗GitHub PoC
This repository is developed to understand CVE-2019-6447
The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary fi
50RISK
open ↗GitHub PoC
p4tq/hikvision_CVE-2017-7921_auth_bypass_config_decryptor
An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16
100RISK
open ↗GitHub PoC★ 1
CVE-2022-22620: Use-after-free in Safari
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS
76RISK
open ↗GitHub PoC
WebLogic CNVD-C-2019_48814 CVE-2017-10271 Scan By 7kbstorm
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte
100RISK
open ↗GitHub PoC★ 1
I wrote a blog post about Apache CouchDB CVE-2022-24706 RCE Exploits
Remote Code Execution Vulnerability in Packaging
100RISK
open ↗GitHub PoC
ernestak/CVE-2022-30190
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗GitHub PoC
ernestak/Sigma-Rule-for-CVE-2022-30190
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗GitHub PoC★ 4
CVE-2022-26134 - Pre-Auth Remote Code Execution via OGNL Injection
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISK
open ↗GitHub PoC★ 2
An Unofficial Patch Follina CVE-2022-30190 (patch) by micrisoft Guidelines.
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗GitHub PoC
CVE-2022-30190 : CVE 0-day MS Offic RCE aka msdt follina
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗GitHub PoC★ 106
PoC for CVE-2022-26809, analisys and considerations are shown in the github.io.
Remote Procedure Call Runtime Remote Code Execution Vulnerability
70RISK
open ↗GitHub PoC★ 1
CVE-2022-30525 POC
A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat
100RISK
open ↗GitHub PoC★ 1
A OS Command Injection Vulnerability in the CGI Program of Zyxel
A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat
100RISK
open ↗GitHub PoC★ 2
seymanurmutlu/CVE-2022-24086-CVE-2022-24087
Adobe Commerce checkout improper input validation leads to remote code execution
100RISK
open ↗GitHub PoC
ahmetfurkans/CVE-2022-22718
Windows Print Spooler Elevation of Privilege Vulnerability
76RISK
open ↗GitHub PoC
Log4Shell CVE-2021-44228 Demo
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
open ↗GitHub PoC
These are the source codes of the Python scripts to apply the temporary protection against the CVE-2022-30190 vulnerability (Follina)
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗GitHub PoC
These are two Python scripts compiled to easily and quickly apply temporary protection against the CVE-2022-30190 vulnerability (Follina)
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗GitHub PoC
Practising technical writing with researching CVE-2022-22954 VMware Workspace ONE Access RCE vulnerability.
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISK
open ↗GitHub PoC★ 7
PoC for Sourcegraph Gitserver < 3.37.0 RCE (CVE-2022-23642)
Code Injection in Sourcegraph
78RISK
open ↗GitHub PoC★ 3
NEW EXPLOIT FOR TP LINK
In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote
35RISK
open ↗GitHub PoC★ 2
proof of concept to CVE-2022-30190 (follina)
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗GitHub PoC★ 3
To determine if an APK is vulnerable to CVE-2017-13156
An elevation of privilege vulnerability in the Android system (art). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0,
43RISK
open ↗GitHub PoC
CVE-2022-26134, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. This is CVE-2022-26134 expoitation script
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISK
open ↗GitHub PoC
Mitigation for CVE-2022-30190
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.