Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
77,724cataloged exploits
35,724CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,455Referência 22,492GitHub PoC 14,286VulnCheck XDB 8,703Nuclei 4,314Metasploit 3,474✓ verified onlyrecentpopularrisk
77,533 exploits
VulnCheck XDB
local
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
68RISK
open ↗GitHub PoC
FortiRecorder Denial of Service Exploit (CVE-2022-41333)
An uncontrolled resource consumption vulnerability [CWE-400] in FortiRecorder version 6.4.3 and below, 6.0.11 and below
33RISK
open ↗GitHub PoC★ 11
Tomcat PUT方法任意文件写入（CVE-2017-12615）exp
When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisati
100RISK
open ↗VulnCheck XDB
initial-access
When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisati
100RISK
open ↗GitHub PoC★ 135
Windows LPE exploit for CVE-2022-37969
Windows Common Log File System Driver Elevation of Privilege Vulnerability
76RISK
open ↗GitHub PoC★ 2
CVE-2022-47986: Python, Ruby, NMAP and Metasploit modules to exploit the vulnerability.
IBM Aspera Faspex code execution
100RISK
open ↗GitHub PoC★ 4
CVE-2021-1732 Microsoft Windows 10 本地提权漏 研究及Poc/Exploit开发
Windows Win32k Elevation of Privilege Vulnerability
100RISK
open ↗GitHub PoC★ 7
Mass Auto Exploit CVE-2022-4395 Unauthenticated Arbitrary File Upload
Membership For WooCommerce < 2.1.7 - Unauthenticated Arbitrary File Upload
53RISK
open ↗GitHub PoC
sei-fish/CVE-2021-22205
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati
100RISK
open ↗GitHub PoC★ 2
Tenda f3 Malformed HTTP Request Header Processing Vulnerability.
Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_pas
60RISK
open ↗GitHub PoC★ 4
SSH User Enumerator in Python3, CVE-2018-15473, I updated the code of this exploit (https://www.exploit-db.com/exploits/45939) to work with python3 instead of python2.
OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati
70RISK
open ↗GitHub PoC★ 4
Open Web Analytics 1.7.3 - Remote Code Execution
Open Web Analytics (OWA) before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, wh
60RISK
open ↗GitHub PoC★ 2
CVE-2019-15107 图形化测试程序
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera
100RISK
open ↗VulnCheck XDB
infoleak
Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_pas
60RISK
open ↗GitHub PoC★ 7
Bulk scanner + get config from CVE-2023-23752
[20230201] - Core - Improper access check in webservice endpoints
100RISK
open ↗VulnCheck XDB
local
Windows Common Log File System Driver Elevation of Privilege Vulnerability
76RISK
open ↗GitHub PoC★ 2
开源，go多并发批量探测poc，准确率高
[20230201] - Core - Improper access check in webservice endpoints
100RISK
open ↗VulnCheck XDB
client-side
Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside a
83RISK
open ↗GitHub PoC★ 59
A vulnerability within Microsoft Office's wwlib allows attackers to achieve remote code execution with the privileges of the victim that opens a malicious RTF document. The attacker could deliver this file as an email attachment (or other means).
Microsoft Word Remote Code Execution Vulnerability
70RISK
open ↗GitHub PoC
Results of retrohunt for files matching YARA rules from https://github.com/AmgdGocha/Detection-Rules/blob/main/CVE-2023-21716.yar
Microsoft Word Remote Code Execution Vulnerability
70RISK
open ↗Metasploit600
Pretalx Limited File Write to Remote Code Execution
pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Organizers can trigger the over
28RISK
open ↗GitHub PoC★ 4
FeatherStark/CVE-2023-21716
Microsoft Word Remote Code Execution Vulnerability
70RISK
open ↗GitHub PoC★ 46
RTF Crash POC Python 3.11 Windows 10
Microsoft Word Remote Code Execution Vulnerability
70RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.