Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,151cataloged exploits

35,370CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,451Referência 22,233GitHub PoC 14,119VulnCheck XDB 8,617Nuclei 4,257Metasploit 3,474✓ verified onlyrecent popular risk

14,096 exploits

GitHub PoC★ 498

CVE-2018-8120 Windows LPE exploit

CVE-2018-8120HIGHunder attackransomware19 May 2018

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

100RISK

open ↗

GitHub PoC★ 12

CVE-2018-11311 | mySCADA myPRO 7 Hardcoded FTP Username and Password Vulnerability

CVE-2018-11311—19 May 2018

A hardcoded FTP username of myscada and password of Vikuk63 in 'myscadagate.exe' in mySCADA myPRO 7 allows remote attack

28RISK

open ↗

GitHub PoC★ 12

CVE-2018-1111 DynoRoot

CVE-2018-1111HIGH18 May 2018

DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in

78RISK

open ↗

GitHub PoC★ 13

Environment for DynoRoot (CVE-2018-1111)

CVE-2018-1111HIGH17 May 2018

DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in

78RISK

open ↗

GitHub PoC★ 2

Exploit loader for Remote Code Execution w/ Payload on GPON Home Gateway devices (CVE-2018-10562) written in Python.

CVE-2018-10562CRITICALunder attackransomware17 May 2018

An issue was discovered on Dasan GPON home routers. Command Injection can occur via the dest_host parameter in a diag_ac

100RISK

open ↗

GitHub PoC★ 163

bigric3/cve-2018-8120

CVE-2018-8120HIGHunder attackransomware17 May 2018

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

100RISK

open ↗

GitHub PoC★ 5

Windows: heap overflow in jscript.dll in Array.sort

CVE-2017-11907—16 May 2018

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Se

35RISK

open ↗

GitHub PoC★ 24

Exploit for Mass Remote Code Execution on GPON home routers (CVE-2018-10562) obtained from Shodan.

CVE-2018-10562CRITICALunder attackransomware15 May 2018

An issue was discovered on Dasan GPON home routers. Command Injection can occur via the dest_host parameter in a diag_ac

100RISK

open ↗

GitHub PoC

ISC INN 2.x - Command-Line Buffer Overflow

CVE-2001-1442—14 May 2018

Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privil

23RISK

open ↗

GitHub PoC★ 16

Apache Struts 2.3.5 < 2.3.31 / 2.5 < 2.5.10 - Remote Code Execution - Shell Script

CVE-2017-5638CRITICALunder attackransomware13 May 2018

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISK

open ↗

GitHub PoC★ 423

Arbitrary code execution with kernel privileges using CVE-2018-8897.

CVE-2018-8897—13 May 2018

A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) wa

43RISK

open ↗

GitHub PoC★ 4

The exploitation for CVE-2018-8897

CVE-2018-8897—13 May 2018

A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) wa

43RISK

open ↗

GitHub PoC

SLRNPull Spool Directory Command Line Parameter Buffer Overflow Vulnerability

CVE-2002-0740—11 May 2018

Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges

23RISK

open ↗

GitHub PoC

Buffer overflows in the cifslogin command for HP CIFS/9000 Client A.01.06 and earlier

CVE-2002-0991—11 May 2018

Buffer overflows in the cifslogin command for HP CIFS/9000 Client A.01.06 and earlier, based on the Sharity package, all

23RISK

open ↗

GitHub PoC★ 2

gwolfs/CVE-2018-9995-ModifiedByGwolfs

CVE-2018-9995—11 May 2018

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L

60RISK

open ↗

GitHub PoC

CVE-2017-7494 C poc

CVE-2017-7494CRITICALunder attackransomware10 May 2018

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allo

100RISK

open ↗

GitHub PoC★ 81

Implements the POP/MOV SS (CVE-2018-8897) vulnerability by bugchecking the machine (local DoS).

CVE-2018-8897—10 May 2018

A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) wa

43RISK

open ↗

GitHub PoC★ 2

DVR系列摄像头批量检测

CVE-2018-9995—09 May 2018

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L

60RISK

open ↗

GitHub PoC

CVE-2017-0411 PoC refered p0

CVE-2017-0411—08 May 2018

An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbi

23RISK

open ↗

GitHub PoC★ 4

CVE-2018-9995_Batch_scanning_exp

CVE-2018-9995—08 May 2018

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L

60RISK

open ↗

GitHub PoC

Python exploit for Remote Code Executuion on GPON home routers (CVE-2018-10562). Initially disclosed by VPNMentor (https://www.vpnmentor.com/blog/critical-vulnerability-gpon-router/), kudos for their work.

CVE-2018-10562CRITICALunder attackransomware07 May 2018

An issue was discovered on Dasan GPON home routers. Command Injection can occur via the dest_host parameter in a diag_ac

100RISK

open ↗

GitHub PoC

CS4238 Computer Security Practices

CVE-2014-6271CRITICALunder attack05 May 2018

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISK

open ↗

GitHub PoC★ 1

WP-DOS-Exploit-CVE-2018-6389

CVE-2018-6389—04 May 2018

In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the

45RISK

open ↗

GitHub PoC★ 2

Empire Port of CVE-2017-11882

CVE-2017-11882HIGHunder attackransomware04 May 2018

Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi

100RISK

open ↗

GitHub PoC★ 9

An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB connection embedded in a malicious file, as demonstrated by "xlink:href=file://192.168.0.2/test.jpg" within an "office:document-content" element in a ".odt XML document".

CVE-2018-10583—03 May 2018

An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically p

60RISK

open ↗

GitHub PoC★ 6

Ruby on Rails Web Console (v2) Whitelist Bypass Code Execution implementation in Python

CVE-2015-3224—03 May 2018

request.rb in Web Console before 2.1.3, as used with Ruby on Rails 3.x and 4.x, does not properly restrict the use of X-

50RISK

open ↗

GitHub PoC★ 114

Some codes for bypassing Oracle WebLogic CVE-2018-2628 patch

CVE-2018-2628CRITICALunder attack03 May 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISK

open ↗

GitHub PoC★ 31

PoC exploit for CVE-2018-5234

CVE-2018-5234—01 May 2018

The Norton Core router prior to v237 may be susceptible to a command injection exploit. This is a type of attack in whic

28RISK

open ↗

GitHub PoC★ 1

Vuln checker for Drupal v7.x + v8.x (CVE-2018-7600 / SA-CORE-2018-002)

CVE-2018-7600CRITICALunder attackransomware01 May 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISK

open ↗

GitHub PoC★ 557

(CVE-2018-9995) Get DVR Credentials

CVE-2018-9995—29 Apr 2018

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L

60RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.