Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
89,094cataloged exploits
41,119CVEs with public exploitation
24,696lab-tested
AllReferência 26,689Exploit-DB 24,490GitHub PoC 18,485VulnCheck XDB 11,277Nuclei 4,613Metasploit 3,540✓ verified onlyrecentpopularrisk
89,094 exploits
VulnCheck XDB
remote-with-credentials
OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and exe
83RISK
open ↗VulnCheck XDB
initial-access
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISK
open ↗GitHub PoC
maqeel-git/CVE-2020-0796
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISK
open ↗GitHub PoC★ 2
Checks if your Chrome version is vulnerable to CVE-2025-5419, from the browser
Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially expl
71RISK
open ↗GitHub PoC★ 1
grass341/CVE-2022-37969
Windows Common Log File System Driver Elevation of Privilege Vulnerability
76RISK
open ↗GitHub PoC
CVE-2014-6271(RCE) poc Exploit
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISK
open ↗VulnCheck XDB
initial-access
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISK
open ↗GitHub PoC★ 1
This Python script checks for the presence of CVE-2024-40898, a critical vulnerability in Apache HTTP Server that may allow SSL/TLS certificate verification bypass under certain misconfigurations. It initiates an SSL connection to the target server and sends a HEAD request.
Apache HTTP Server: SSRF with mod_rewrite in server/vhost context on Windows
48RISK
open ↗GitHub PoC★ 1
Stored XSS in Nagios Log Server 2024R1.3.1
Cross Site Scripting vulnerability in Nagios Log Server v.2024R1.3.1 allows a remote attacker to execute arbitrary code
41RISK
open ↗Exploit-DB
Windows File Explorer Windows 10 Pro x64 - TAR Extraction
Microsoft Windows File Explorer Spoofing Vulnerability
38RISK
open ↗GitHub PoC
Privilege Escalation on HTB "Poison" using PwnKit (CVE-2021-4034)
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗Exploit-DB
Roundcube 1.6.10 - Remote Code Execution (RCE)
Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the
100RISK
open ↗Exploit-DB
Freefloat FTP Server 1.0 - Remote Buffer Overflow
FreeFloat FTP Server NOOP Command buffer overflow
38RISK
open ↗VulnCheck XDB
initial-access
Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion
100RISK
open ↗VulnCheck XDB
remote-with-credentials
Windows SMB Client Elevation of Privilege Vulnerability
93RISK
open ↗GitHub PoC★ 720
PoC Exploit for the NTLM reflection SMB flaw.
Windows SMB Client Elevation of Privilege Vulnerability
93RISK
open ↗VulnCheck XDB
initial-access
D-Tale allows Remote Code Execution through the Custom Filter Input
48RISK
open ↗GitHub PoC
CVE-2017-8291 CTF with docker and examples
Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion
100RISK
open ↗GitHub PoC★ 1
CVE-2025-24071: NTLMv2 Hash Disclosure via .library-ms File
Microsoft Windows File Explorer Spoofing Vulnerability
38RISK
open ↗GitHub PoC
Gigamon Unauth RCE (CVE-2026-36848)
Gigamon GVOS v5.16.1 and below is vulnerable to Directory Traversal in the GVOS H-VUE subsystem.
41RISK
open ↗VulnCheck XDB
initial-access
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera
100RISK
open ↗GitHub PoC★ 64
CVE-2025-33053 Proof Of Concept (PoC)
Internet Shortcut Files Remote Code Execution Vulnerability
100RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.