Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,991cataloged exploits
40,452CVEs with public exploitation
24,696lab-tested
18,044 exploits
GitHub PoC★ 2
Follina POC by John Hammond
CVE-2022-30190HIGHunder attackransomware03 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗
GitHub PoC
This is to patch CVE-2022-30190. Use at your own risk.
CVE-2022-30190HIGHunder attackransomware03 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗
GitHub PoC★ 5
VMware Workspace ONE Access and Identity Manager RCE via SSTI. CVE-2022-22954 - PoC SSTI * exploit+payload+shodan (ну набором)
CVE-2022-22954CRITICALunder attackransomware03 Jun 2022
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISK
open ↗
GitHub PoC★ 31
CVE-2022-26134 - Confluence Pre-Auth RCE | OGNL injection
CVE-2022-26134CRITICALunder attackransomware03 Jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISK
open ↗
GitHub PoC★ 8
Information and scripts for the confluence CVE-2022-26134
CVE-2022-26134CRITICALunder attackransomware03 Jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISK
open ↗
GitHub PoC★ 8
orwagodfather/CVE-2022-22954
CVE-2022-22954CRITICALunder attackransomware03 Jun 2022
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISK
open ↗
GitHub PoC★ 174
CVE-2022-26134 Proof of Concept
CVE-2022-26134CRITICALunder attackransomware03 Jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISK
open ↗
GitHub PoC
TanmoyG1800/CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware03 Jun 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 5
Generate SSRF payloads
CVE-2021-22054HIGHunder attack03 Jun 2022
VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and
100RISK
open ↗
GitHub PoC★ 1
This repository contains Yara rule and the method that a security investigator may want to use for CVE-2022-26134 threat hunting on their Linux confluence servers.
CVE-2022-26134CRITICALunder attackransomware03 Jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISK
open ↗
GitHub PoC
lalkaltest/CVE-2021-43798
CVE-2021-43798HIGHunder attack02 Jun 2022
Grafana path traversal
100RISK
open ↗
GitHub PoC★ 1
CVE-2020-2551 Exploiter
CVE-2020-2551CRITICALunder attack02 Jun 2022
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppor
100RISK
open ↗
GitHub PoC★ 20
CVE-2022-30190 | MS-MSDT Follina One Click
CVE-2022-30190HIGHunder attackransomware02 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗
GitHub PoC★ 2
MSDT protocol disabler (CVE-2022-30190 patch tool)
CVE-2022-30190HIGHunder attackransomware02 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗
GitHub PoC★ 23
A tool written in Go that scans files & directories for the Follina exploit (CVE-2022-30190)
CVE-2022-30190HIGHunder attackransomware02 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗
GitHub PoC★ 1
ITMarcin2211/CVE-2022-30190
CVE-2022-30190HIGHunder attackransomware02 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗
GitHub PoC★ 1
Mitigates the "Folina"-ZeroDay (CVE-2022-30190)
CVE-2022-30190HIGHunder attackransomware02 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗
GitHub PoC★ 390
CVE-2022-30190-follina.py-修改版,可以自定义word模板,方便实战中钓鱼使用。
CVE-2022-30190HIGHunder attackransomware02 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗
GitHub PoC★ 2
gyaansastra/CVE-2022-30190
CVE-2022-30190HIGHunder attackransomware02 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗
GitHub PoC★ 2
swaiist/CVE-2022-30190-Fix
CVE-2022-30190HIGHunder attackransomware02 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗
GitHub PoC★ 2
The CVE-2022-30190-follina Workarounds Patch
CVE-2022-30190HIGHunder attackransomware02 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗
GitHub PoC
PDQ Package I created for CVE-2022-30190
CVE-2022-30190HIGHunder attackransomware02 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗
GitHub PoC
Simple Follina poc exploit
CVE-2022-30190HIGHunder attackransomware02 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗
GitHub PoC★ 2
A very simple MSDT "Follina" exploit **patched**
CVE-2022-30190HIGHunder attackransomware02 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗
GitHub PoC★ 3
Python script to exploit CVE-2021-35064 and CVE-2021-36356
CVE-2021-35064—02 Jun 2022
KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo. Sudoers permits runn
60RISK
open ↗
GitHub PoC
Python script to exploit CVE-2022-22954 and then exploit CVE-2022-22960
CVE-2022-22954CRITICALunder attackransomware01 Jun 2022
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISK
open ↗
GitHub PoC★ 4
Python script to exploit CVE-2022-22954 and then exploit CVE-2022-22960
CVE-2022-22954CRITICALunder attackransomware01 Jun 2022
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISK
open ↗
GitHub PoC★ 2
A proof of concept of an SEH overflow with arbitrary dll injection
CVE-2010-5301—01 Jun 2022
Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a HEAD re
28RISK
open ↗
GitHub PoC
Proof of Concept zu MSDT-Follina - CVE-2022-30190. ÜBERPRÜFUNG DER WIRKSAMKEIT VON MICROSOFT DEFNEDER IN DER JEWEILS AKTUELLSTEN WINDOWS 10 VERSION.
CVE-2022-30190HIGHunder attackransomware01 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗
GitHub PoC
CVE-2022-30190 or "Follina" 0day proof of concept
CVE-2022-30190HIGHunder attackransomware01 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗
← previouspage 445 / 602next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.