Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,231cataloged exploits

35,420CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,451Referência 22,266GitHub PoC 14,131VulnCheck XDB 8,635Nuclei 4,274Metasploit 3,474✓ verified onlyrecent popular risk

14,119 exploits

GitHub PoC

NSE plugin for Nmap that scans a DotNetNuke (DNN) web application for an Administration Authentication Bypass vulnerability (CVE-2015-2794, EDB-ID: 39777).

CVE-2015-2794—07 May 2016

The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the application and gain S

60RISK

GitHub PoC★ 69

ImaegMagick Code Execution (CVE-2016-3714)

CVE-2016-3714HIGHunder attack07 May 2016

The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.

100RISK

GitHub PoC

Blind SQL injection brute force.

CVE-2008-6970—05 May 2016

SQL injection vulnerability in dosearch.inc.php in UBB.threads 7.3.1 and earlier allows remote attackers to execute arbi

23RISK

GitHub PoC★ 18

jpeanut/ImageTragick-CVE-2016-3714-RShell

CVE-2016-3714HIGHunder attack05 May 2016

The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.

100RISK

GitHub PoC★ 1

Fix ImageMagick Command Injection (CVE-2016-3714) with Ansible.

CVE-2016-3714HIGHunder attack05 May 2016

The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.

100RISK

GitHub PoC

a puppet module in response to CVE-2016-3714

CVE-2016-3714HIGHunder attack04 May 2016

The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.

100RISK

GitHub PoC

tommiionfire/CVE-2016-3714

CVE-2016-3714HIGHunder attack04 May 2016

The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.

100RISK

GitHub PoC★ 193

Simple test for the May 2016 OpenSSL padding oracle (CVE-2016-2107)

CVE-2016-2107—03 May 2016

The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a

45RISK

GitHub PoC★ 125

QSEE Privilege Escalation Exploit using PRDiag* commands (CVE-2015-6639)

CVE-2015-6639—02 May 2016

The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to

23RISK

GitHub PoC★ 85

Exploit code for CVE-2016-1757

CVE-2016-1757—27 Apr 2016

Race condition in the kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code

28RISK

GitHub PoC★ 1

b0b0505/CVE-2016-0846-PoC

CVE-2016-0846—19 Apr 2016

libs/binder/IMemory.cpp in the IMemory Native Interface in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.

23RISK

GitHub PoC★ 3

这个代码包含了CVE-2015-8660漏洞的利用代码，还有注释，出现问题的源代码，打了补丁后的代码

CVE-2015-8660—14 Apr 2016

The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr op

43RISK

GitHub PoC★ 36

arbitrary memory read/write by IMemroy OOB

CVE-2016-0846—08 Apr 2016

libs/binder/IMemory.cpp in the IMemory Native Interface in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.

23RISK

GitHub PoC★ 10

PoC attack server for CVE-2015-7547 buffer overflow vulnerability in glibc DNS stub resolver (public version)

CVE-2015-7547—05 Apr 2016

Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C

45RISK

GitHub PoC★ 55

Exploitation Training -- CVE-2013-2028: Nginx Stack Based Buffer Overflow

CVE-2013-2028—23 Mar 2016

The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cau

60RISK

GitHub PoC

must run this native binary with system privilege

CVE-2014-4322—23 Mar 2016

drivers/misc/qseecom.c in the QSEECOM driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Andr

23RISK

GitHub PoC

Cve-2015-1538-1

CVE-2015-1538—20 Mar 2016

Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android bef

45RISK

GitHub PoC

dachidahu/CVE-2016-0752

CVE-2016-0752HIGHunder attack18 Mar 2016

Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.

100RISK

GitHub PoC★ 7

a exploit for cve-2016-0728

CVE-2016-0728—15 Mar 2016

The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object ref

23RISK

GitHub PoC★ 8

PoC exploit server for CVE-2015-7547

CVE-2015-7547—10 Mar 2016

Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C

45RISK

GitHub PoC

JBoss Autopwn as featured at BlackHat Europe 2010 - this version incorporates CVE-2010-0738 the JBoss authentication bypass VERB manipulation vulnerability as discovered by Minded Security

CVE-2010-0738MEDIUMunder attackransomware08 Mar 2016

The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2

100RISK

GitHub PoC

Script to test vulnarability for CVE-2015-0235

CVE-2015-0235—07 Mar 2016

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18,

60RISK

GitHub PoC★ 31

Python script to exploit CVE-2015-4852.

CVE-2015-4852CRITICALunder attack03 Mar 2016

The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers

100RISK

GitHub PoC★ 3

Proof of concept showing how CVE-2016-2098 leads to remote code execution

CVE-2016-2098—01 Mar 2016

Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to e

60RISK

GitHub PoC★ 45

Exploiting CVE-2016-0040 uninitialized pointer

CVE-2016-0040HIGHunder attack26 Feb 2016

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to g

91RISK

GitHub PoC

CVE-2015-0235

CVE-2015-0235—25 Feb 2016

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18,

60RISK

GitHub PoC★ 1

Elm0D/CVE-2017-8464

CVE-2017-8464HIGHunder attack24 Feb 2016

Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201

100RISK

GitHub PoC

glibc getaddrinfo stack-based buffer overflow

CVE-2015-7547—21 Feb 2016

Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C

45RISK

GitHub PoC★ 51

Automated Exploit Toolkit for CVE-2015-6095 and CVE-2016-0049

CVE-2016-0049—18 Feb 2016

Kerberos in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server

28RISK

GitHub PoC

glibc check and update in light of CVE-2015-7547

CVE-2015-7547—18 Feb 2016

Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C

45RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.