Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

87,168cataloged exploits

40,553CVEs with public exploitation

24,696lab-tested

All Referência 26,327Exploit-DB 24,488GitHub PoC 18,080VulnCheck XDB 10,169Nuclei 4,567Metasploit 3,537✓ verified onlyrecent popular risk

18,044 exploits

GitHub PoC

Local Privilege Escalation is a way to take advantage of flaws in code or service administration that can manage regular or guest users for particular device activities or transfer root user privileges to master or client. User rights admin. The licenses or privileges may be violated by such undesired amendments, as the system may be disrupted by frequent users unless they have shell or root authorization. So, someone, someone, it may become dangerous and be used to obtain access to a higher level.

CVE-2019-13272HIGHunder attack20 May 2021

In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a proce

98RISK

GitHub PoC

CVE-2019-14287

CVE-2019-14287—20 May 2021

In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and se

35RISK

GitHub PoC★ 1

Docker image that lets me study the exploitation of the VIM exploit

CVE-2019-12735—20 May 2021

getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via th

28RISK

GitHub PoC★ 5

simple bash script for exploit CVE-2021-31166

CVE-2021-31166CRITICALunder attack19 May 2021

HTTP Protocol Stack Remote Code Execution Vulnerability

100RISK

GitHub PoC★ 54

PoC - Exploit Delivery via Steganography and Polyglots, CVE-2014-0282

CVE-2014-0282—17 May 2021

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service

35RISK

GitHub PoC★ 3

Different rules to detect if CVE-2021-31166 is being exploited

CVE-2021-31166CRITICALunder attack17 May 2021

HTTP Protocol Stack Remote Code Execution Vulnerability

100RISK

GitHub PoC★ 12

HTTP Protocol Stack CVE-2021-31166

CVE-2021-31166CRITICALunder attack17 May 2021

HTTP Protocol Stack Remote Code Execution Vulnerability

100RISK

GitHub PoC★ 8

PoC for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely. Although it was defined as remote command execution, it can only cause the system to crash.

CVE-2021-31166CRITICALunder attack17 May 2021

HTTP Protocol Stack Remote Code Execution Vulnerability

100RISK

GitHub PoC★ 1

Nmap NSE script to detect CVE-2019-14322 of Pallets Werkzeug path traversal via SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames

CVE-2019-14322—17 May 2021

In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames.

50RISK

GitHub PoC★ 1

0xm4ud/ProFTPD_CVE-2015-3306

CVE-2015-3306CRITICALunder attack16 May 2021

The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and

100RISK

GitHub PoC★ 60

RCE for Pega Infinity >= 8.2.1, Pega Infinity <= 8.5.2

CVE-2021-27651CRITICAL16 May 2021

In versions 8.2.1 through 8.5.2 of Pega Infinity, the password reset functionality for local accounts can be used to byp

75RISK

GitHub PoC★ 1

PoC of CVE-2019-14322: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVE-2019-14322—16 May 2021

In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames.

50RISK

GitHub PoC★ 827

Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.

CVE-2021-31166CRITICALunder attack16 May 2021

HTTP Protocol Stack Remote Code Execution Vulnerability

100RISK

GitHub PoC★ 2

Pega Infinity Password Reset

CVE-2021-27651CRITICAL16 May 2021

In versions 8.2.1 through 8.5.2 of Pega Infinity, the password reset functionality for local accounts can be used to byp

75RISK

GitHub PoC★ 4

Exploit CVE-2017-7494 for Net Security course final Assignment. This would reveal the vulnerability of services that run in administrative priority on Linux.

CVE-2017-7494CRITICALunder attackransomware15 May 2021

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allo

100RISK

GitHub PoC★ 1

This is modified code of 46635 exploit from python2 to python3.

CVE-2019-9053—14 May 2021

An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve

35RISK

GitHub PoC★ 258

Exploit to SYSTEM for CVE-2021-21551

CVE-2021-21551HIGHunder attack13 May 2021

Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privile

100RISK

GitHub PoC★ 5

CVE-2020-9496和CVE-2021-26295利用dnslog批量验证漏洞poc及exp

CVE-2020-9496—13 May 2021

XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03

60RISK

GitHub PoC★ 4

weblogic CVE-2021-2109批量验证poc

CVE-2021-2109HIGH13 May 2021

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions

63RISK

GitHub PoC★ 12

exiftool arbitrary code execution vulnerability

CVE-2021-22204MEDIUMunder attack12 May 2021

Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code exec

100RISK

GitHub PoC

fu2x2000/CVE-2017-17058-woo_exploit

CVE-2017-17058HIGH11 May 2021

The WooCommerce plugin through 3.x for WordPress has a Directory Traversal Vulnerability via a /wp-content/plugins/wooco

46RISK

GitHub PoC★ 98

Python exploit for the CVE-2021-22204 vulnerability in Exiftool

CVE-2021-22204MEDIUMunder attack11 May 2021

Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code exec

100RISK

GitHub PoC★ 1

0xm4ud/Cacti-CVE-2020-8813

CVE-2020-8813—11 May 2021

graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a

60RISK

GitHub PoC★ 3

POC Exploit written in Ruby

CVE-2019-5420—11 May 2021

A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess th

60RISK

GitHub PoC★ 3

Exploit for Node-jose < 0.11.0 written in Ruby

CVE-2018-0114—11 May 2021

A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker

35RISK

GitHub PoC★ 3

Check YouTube - https://youtu.be/O0ZnLXRY5Wo

CVE-2020-14882CRITICALunder attack10 May 2021

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions

100RISK

GitHub PoC★ 5

CVE-2017-7494 python exploit

CVE-2017-7494CRITICALunder attackransomware09 May 2021

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allo

100RISK

GitHub PoC

CVE-2020-9496 manual exploit

CVE-2020-9496—07 May 2021

XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03

60RISK

GitHub PoC★ 4

CVE-2019-2215

CVE-2019-2215HIGHunder attack07 May 2021

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

100RISK

GitHub PoC

exploit

CVE-2019-18634—05 May 2021

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the

28RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.