Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

87,168cataloged exploits

40,553CVEs with public exploitation

24,696lab-tested

All Referência 26,327Exploit-DB 24,488GitHub PoC 18,080VulnCheck XDB 10,169Nuclei 4,567Metasploit 3,537✓ verified onlyrecent popular risk

18,044 exploits

GitHub PoC★ 1

CVE-2020-17519; Apache Flink 任意文件读取; 批量检测

CVE-2020-17519CRITICALunder attack18 Jan 2021

Apache Flink directory traversal attack: reading remote files through the REST API

100RISK

open ↗

GitHub PoC

okanulkr/CurveBall-CVE-2020-0601-PoC

CVE-2020-0601HIGHunder attack17 Jan 2021

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISK

open ↗

GitHub PoC

1nteger-c/CVE-2019-8605

CVE-2019-8605HIGHunder attack15 Jan 2021

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.1

76RISK

open ↗

GitHub PoC

Rust implementation of CVE-2018-16763 with some extra features.

CVE-2018-16763—15 Jan 2021

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca

60RISK

open ↗

GitHub PoC

CVE-2020-17519 EXP

CVE-2020-17519CRITICALunder attack14 Jan 2021

Apache Flink directory traversal attack: reading remote files through the REST API

100RISK

open ↗

GitHub PoC★ 82

PoC for CVE-2020-6207 (Missing Authentication Check in SAP Solution Manager)

CVE-2020-6207CRITICALunder attack14 Jan 2021

SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform an

100RISK

open ↗

GitHub PoC★ 18

Exploit script for CVE-2020-7961

CVE-2020-7961CRITICALunder attack14 Jan 2021

Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary c

100RISK

open ↗

GitHub PoC★ 289

Exploit for CVE-2021-3129

CVE-2021-3129CRITICALunder attackransomware13 Jan 2021

Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra

100RISK

open ↗

GitHub PoC

Starry-lord/CVE-2018-0114

CVE-2018-0114—13 Jan 2021

A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker

35RISK

open ↗

GitHub PoC★ 1

CVE-2017-12615 任意文件写入exp，写入webshell

CVE-2017-12615HIGHunder attackransomware12 Jan 2021

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisati

100RISK

open ↗

GitHub PoC

AnasTaoutaou/CVE-2019-5420

CVE-2019-5420—11 Jan 2021

A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess th

60RISK

open ↗

GitHub PoC★ 8

[CVE-2020-17519] Apache Flink RESTful API Arbitrary File Read

CVE-2020-17519CRITICALunder attack10 Jan 2021

Apache Flink directory traversal attack: reading remote files through the REST API

100RISK

open ↗

GitHub PoC★ 5

ElmouradiAmine/CVE-2020-7048

CVE-2020-7048CRITICAL09 Jan 2021

The WordPress plugin, WP Database Reset through 3.1, contains a flaw that allowed any unauthenticated user to reset any

53RISK

open ↗

GitHub PoC

CVE-2020-17519

CVE-2020-17519CRITICALunder attack08 Jan 2021

Apache Flink directory traversal attack: reading remote files through the REST API

100RISK

open ↗

GitHub PoC★ 7

quick'n'dirty automated checks for potential exploitation of CVE-2020-1472 (aka ZeroLogon), using leading artifects in determining an actual exploitation of CVE-2020-1472. requires admin access to the DCs

CVE-2020-1472MEDIUMunder attackransomware07 Jan 2021

Netlogon Elevation of Privilege Vulnerability

100RISK

open ↗

GitHub PoC★ 5

uzzzval/CVE-2020-17530

CVE-2020-17530CRITICALunder attack07 Jan 2021

Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected

100RISK

open ↗

GitHub PoC★ 3

Python implementation of Roundcube LFI (CVE-2017-16651)

CVE-2017-16651HIGHunder attack06 Jan 2021

Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary file

98RISK

open ↗

GitHub PoC★ 1

QmF0c3UK/CVE-2020-17519

CVE-2020-17519CRITICALunder attack06 Jan 2021

Apache Flink directory traversal attack: reading remote files through the REST API

100RISK

open ↗

GitHub PoC★ 47

Apache Flink 目录遍历漏洞批量检测 (CVE-2020-17519)

CVE-2020-17519CRITICALunder attack06 Jan 2021

Apache Flink directory traversal attack: reading remote files through the REST API

100RISK

open ↗

GitHub PoC★ 3

Apache Flink Directory Traversal (CVE-2020-17519) Nmap NSE Script

CVE-2020-17519CRITICALunder attack06 Jan 2021

Apache Flink directory traversal attack: reading remote files through the REST API

100RISK

open ↗

GitHub PoC★ 1

andyfeili/CVE-2014-4688

CVE-2014-4688—05 Jan 2021

pfSense before 2.1.4 allows remote authenticated users to execute arbitrary commands via (1) the hostname value to diag_

23RISK

open ↗

GitHub PoC★ 98

CISCO CVE-2020-3452 Scanner & Exploiter

CVE-2020-3452HIGHunder attack05 Jan 2021

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

100RISK

open ↗

GitHub PoC★ 10

SolarWinds Orion API 远程代码执行漏洞批量检测脚本

CVE-2020-10148CRITICALunder attack05 Jan 2021

SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands

100RISK

open ↗

GitHub PoC★ 16

Scanner for Zyxel products which are potentially vulnerable due to an undocumented user account (CVE-2020-29583)

CVE-2020-29583CRITICALunder attack04 Jan 2021

Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. The p

100RISK

open ↗

GitHub PoC★ 22

Remote Code Execution on Microsoft Exchange Server through fixed cryptographic keys

CVE-2020-0688HIGHunder attackransomware04 Jan 2021

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle o

100RISK

open ↗

GitHub PoC★ 3

AzhariKun/CVE-2018-15133

CVE-2018-15133HIGHunder attack03 Jan 2021

In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unseri

100RISK

open ↗

GitHub PoC★ 2

python2.7 script for JWT generation

CVE-2018-0114—03 Jan 2021

A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker

35RISK

open ↗

GitHub PoC

andyfeili/CVE-2018-9276

CVE-2018-9276HIGHunder attack02 Jan 2021

An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administra

100RISK

open ↗

GitHub PoC★ 2

zerologon script to exploit CVE-2020-1472 CVSS 10/10

CVE-2020-1472MEDIUMunder attackransomware01 Jan 2021

Netlogon Elevation of Privilege Vulnerability

100RISK

open ↗

GitHub PoC★ 5

A2SV = Auto Scanning to SSL Vulnerability HeartBleed, CCS Injection, SSLv3 POODLE, FREAK... etc Support Vulnerability [CVE-2007-1858] Anonymous Cipher [CVE-2012-4929] CRIME(SPDY) [CVE-2014-0160] CCS Injection [CVE-2014-0224] HeartBleed [CVE-2014-3566] SSLv3 POODLE [CVE-2015-0204] FREAK Attack [CVE-2015-4000] LOGJAM Attack [CVE-2016-0800] SSLv2 DROWN Installation : $ apt update && apt upgrade $ apt install git $ apt install python2 $ apt install python $ git clone https://github.com/hahwul/ a2sv $ cd a2sv $ chmod +x * $ pip2 install -r requirements.txt usage : $ python2 a2sv.py -h It shows all commands how we can use this tool $ python a2sv.py -t 127.0.0.1 127.0.0.1 = target means here own device

CVE-2014-0160HIGHunder attack01 Jan 2021

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.