Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
87,168cataloged exploits
40,553CVEs with public exploitation
24,696lab-tested
AllReferência 26,327Exploit-DB 24,488GitHub PoC 18,080VulnCheck XDB 10,169Nuclei 4,567Metasploit 3,537✓ verified onlyrecentpopularrisk
18,044 exploits
GitHub PoC★ 115
PoC exploits for CVE-2020-17382
The MSI AmbientLink MsIo64 driver 1.0.0.8 has a Buffer Overflow (0x80102040, 0x80102044, 0x80102050,and 0x80102054).
23RISK
open ↗GitHub PoC★ 1
pwn3z/CVE-2019-11510-PulseVPN
In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthent
100RISK
open ↗GitHub PoC★ 70
rsmudge/CVE-2020-0796-BOF
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISK
open ↗GitHub PoC★ 1
pwn3z/CVE-2018-13379-FortinetVPN
An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.
100RISK
open ↗GitHub PoC★ 3
Fa1c0n35/SecuraBV-CVE-2020-1472
Netlogon Elevation of Privilege Vulnerability
100RISK
open ↗GitHub PoC★ 1
Zabbix Template to monitor for Windows Event Viewer event's related to Netlogon Elevation of Privilege Vulnerability - CVE-2020-1472. Monitors event ID's 5827, 5828 & 5829. See: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1472
Netlogon Elevation of Privilege Vulnerability
100RISK
open ↗GitHub PoC★ 1
[CVE-2020-1472] Netlogon Remote Protocol Call (MS-NRPC) Privilege Escalation (Zerologon)
Netlogon Elevation of Privilege Vulnerability
100RISK
open ↗GitHub PoC★ 2
cve-2020-1472_Tool collection
Netlogon Elevation of Privilege Vulnerability
100RISK
open ↗GitHub PoC★ 2
CVE-2020-1472 - Zero Logon vulnerability Python implementation
Netlogon Elevation of Privilege Vulnerability
100RISK
open ↗GitHub PoC★ 1
https://github.com/dirkjanm/CVE-2020-1472
Netlogon Elevation of Privilege Vulnerability
100RISK
open ↗GitHub PoC★ 7
PoC for Zerologon (CVE-2020-1472) - Exploit
Netlogon Elevation of Privilege Vulnerability
100RISK
open ↗GitHub PoC★ 58
Ladon Moudle CVE-2020-1472 Exploit 域控提权神器
Netlogon Elevation of Privilege Vulnerability
100RISK
open ↗GitHub PoC★ 1
Serie de scripts para enumerar nombres de usuarios de JIRA a partir de vulnerabilidades conocidas (CVE-2020-14181, CVE-2019-3403, CVE-2019-8449...)
Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Infor
60RISK
open ↗GitHub PoC★ 709
Exploit for zerologon cve-2020-1472
Netlogon Elevation of Privilege Vulnerability
100RISK
open ↗GitHub PoC★ 399
Exploit Code for CVE-2020-1472 aka Zerologon
Netlogon Elevation of Privilege Vulnerability
100RISK
open ↗GitHub PoC★ 179
Abuse CVE-2020-1472 (Zerologon) to take over a domain and then repair the local stored machine account password.
Netlogon Elevation of Privilege Vulnerability
100RISK
open ↗GitHub PoC★ 1,333
PoC for Zerologon - all research credits go to Tom Tervoort of Secura
Netlogon Elevation of Privilege Vulnerability
100RISK
open ↗GitHub PoC★ 6
(CVE-2017-9841) PHPUnit_eval-stdin_php Remote Code Execution
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP c
100RISK
open ↗GitHub PoC★ 1
H0j3n/CVE-2020-23934
An issue was discovered in RiteCMS 2.2.1. An authenticated user can directly execute system commands by uploading a php
28RISK
open ↗GitHub PoC★ 7
CVE-2019-15107 exploit
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera
100RISK
open ↗GitHub PoC
primebeast/CVE-2019-11932
A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version
35RISK
open ↗GitHub PoC
1337in/CVE-2020-3187
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Path Traversal Vulnerability
85RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.