Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,231cataloged exploits

35,420CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,451Referência 22,266GitHub PoC 14,131VulnCheck XDB 8,635Nuclei 4,274Metasploit 3,474✓ verified onlyrecent popular risk

14,096 exploits

GitHub PoC★ 1

linux kernel exploit

CVE-2017-5123—31 Oct 2017

Insufficient data validation in waitid allowed an user to escape sandboxes on Linux.

23RISK

open ↗

GitHub PoC

skyformat99/dnsmasq-2.4.1-fix-CVE-2017-14491

CVE-2017-14491—30 Oct 2017

Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execut

45RISK

open ↗

GitHub PoC

This is the Apache Struts CVE-2017-5638 struts 2 vulnerability. The same CVE that resulted in the equifax database breach.

CVE-2017-5638CRITICALunder attackransomware30 Oct 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISK

open ↗

GitHub PoC★ 2

This exploit was written to study some concepts, enjoy!

CVE-2010-4221—28 Oct 2017

Multiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in ProFTPD before 1.3.3c allow rem

60RISK

open ↗

GitHub PoC★ 1

dewankpant/CVE-2017-16567

CVE-2017-16567—24 Oct 2017

Persistent Cross-Site Scripting (XSS) vulnerability in Logitech Media Server 7.9.0, affecting the "Favorites" feature. T

23RISK

open ↗

GitHub PoC

Wordpress Username Enumeration /CVE-2017-5487,WordPress < 4.7.1 -

CVE-2017-5487—22 Oct 2017

wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before

45RISK

open ↗

GitHub PoC★ 1

Dirty COW (CVE-2016-5195) Testing

CVE-2016-5195HIGHunder attack19 Oct 2017

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISK

open ↗

GitHub PoC

An exploit for Apache Struts CVE-2017-5638

CVE-2017-5638CRITICALunder attackransomware19 Oct 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISK

open ↗

GitHub PoC

A simple python shell-like exploit for the Shellschok CVE-2014-6271 bug.

CVE-2014-6271CRITICALunder attack17 Oct 2017

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISK

open ↗

GitHub PoC

PHPMailer < 5.2.18 Remote Code Execution

CVE-2016-10034—17 Oct 2017

The setFrom function in the Sendmail adapter in the zend-mail component before 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.

35RISK

open ↗

GitHub PoC★ 1

Exploit Safari CVE-2017-7089

CVE-2017-7089—11 Oct 2017

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud befor

23RISK

open ↗

GitHub PoC★ 1

Apache HTTP Server 2.4.23 vulnerability study (CVE-2016-8740)

CVE-2016-8740—11 Oct 2017

The mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols configuration includes h2 or h2

45RISK

open ↗

GitHub PoC★ 1

Ready to use, weaponized dirtycow (CVE-2016-5195)

CVE-2016-5195HIGHunder attack11 Oct 2017

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISK

open ↗

GitHub PoC

CVE-2010-3332 Oracle Padding Vulnerability in Microsoft ASP.NET

CVE-2010-3332—11 Oct 2017

Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Intern

35RISK

open ↗

GitHub PoC★ 138

Blueborne CVE-2017-0781 Android heap overflow vulnerability

CVE-2017-0781—09 Oct 2017

A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1

28RISK

open ↗

GitHub PoC★ 27

CVE-2017-13868: Information leak of uninitialized kernel heap data in XNU.

CVE-2017-13868—07 Oct 2017

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS b

23RISK

open ↗

GitHub PoC★ 53

Exploits for the win32kfull!bFill vulnerability on Win10 x64 RS2 using Bitmap or Palette techniques

CVE-2016-3309HIGHunder attackransomware06 Oct 2017

The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1;

76RISK

open ↗

GitHub PoC★ 5

CVE-2017-12617 and CVE-2017-12615 for tomcat server

CVE-2017-12615HIGHunder attackransomware06 Oct 2017

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisati

100RISK

open ↗

GitHub PoC★ 399

Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution

CVE-2017-12617HIGHunder attack05 Oct 2017

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTT

100RISK

open ↗

GitHub PoC★ 31

Scan/Exploit Blueborne CVE-2017-0785

CVE-2017-0785—04 Oct 2017

A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.

28RISK

open ↗

GitHub PoC

Usbhijacking | CVE-2017-8464

CVE-2017-8464HIGHunder attack03 Oct 2017

Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201

100RISK

open ↗

GitHub PoC★ 63

Webkit uxss exploit (CVE-2017-7089)

CVE-2017-7089—03 Oct 2017

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud befor

23RISK

open ↗

GitHub PoC★ 3

this script is used for hack bluetooth devices CVE 2017 0785 which was done by ARMIS This File is password protected for password contact atusha@gmail.comr

CVE-2017-0785—02 Oct 2017

A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.

28RISK

open ↗

GitHub PoC★ 2

SPRING DATA REST CVE-2017-8046 DEMO

CVE-2017-8046—01 Oct 2017

Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions pri

60RISK

open ↗

GitHub PoC★ 5

own2pwn/blueborne-CVE-2017-1000251-POC

CVE-2017-1000251—01 Oct 2017

The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and includ

28RISK

open ↗

GitHub PoC★ 3

First script, pgp-cgi-cve-2012-1823 BASH script

CVE-2012-1823CRITICALunder attack01 Oct 2017

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not

100RISK

open ↗

GitHub PoC

billa3283/CVE-2017-0213

CVE-2017-0213HIGHunder attackransomware01 Oct 2017

Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Ser

93RISK

open ↗

GitHub PoC

CVE-2017-12943

CVE-2017-12943—29 Sep 2017

D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers to read passwords via a model/__show_info.php?RE

35RISK

open ↗

GitHub PoC

clone

CVE-2017-1000251—28 Sep 2017

The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and includ

28RISK

open ↗

GitHub PoC★ 19

OptionsBleed (CVE-2017-9798) PoC / Scanner

CVE-2017-9798—27 Sep 2017

Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user

60RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.