Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

87,168cataloged exploits

40,553CVEs with public exploitation

24,696lab-tested

All Referência 26,327Exploit-DB 24,488GitHub PoC 18,080VulnCheck XDB 10,169Nuclei 4,567Metasploit 3,537✓ verified onlyrecent popular risk

18,044 exploits

GitHub PoC★ 6

Exploit for CVE-2020-9283 based on Go

CVE-2020-9283—02 Jun 2020

golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the

28RISK

open ↗

GitHub PoC★ 89

PoC exploit for VMware Cloud Director RCE (CVE-2020-3956)

CVE-2020-3956—01 Jun 2020

VMware Cloud Director 10.0.x before 10.0.0.2, 9.7.0.x before 9.7.0.5, 9.5.0.x before 9.5.0.6, and 9.1.0.x before 9.1.0.4

28RISK

open ↗

GitHub PoC★ 3

nmurilo/CVE-2008-4687-exploit

CVE-2008-4687—30 May 2020

manage_proj_page.php in Mantis before 1.1.4 allows remote authenticated users to execute arbitrary code via a sort param

50RISK

open ↗

GitHub PoC★ 2

This project for CVE-2019-18935

CVE-2019-18935CRITICALunder attackransomware29 May 2020

Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUp

100RISK

open ↗

GitHub PoC★ 6

The reproduction code for CVE-2019-8641.

CVE-2019-8641—29 May 2020

An out-of-bounds read was addressed with improved input validation.

28RISK

open ↗

GitHub PoC

yukar1z0e/CVE-2017-15944

CVE-2017-15944CRITICALunder attack29 May 2020

Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote

100RISK

open ↗

GitHub PoC

halsten/CVE-2020-0796

CVE-2020-0796CRITICALunder attackransomware28 May 2020

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h

100RISK

open ↗

GitHub PoC★ 55

CVE-2016-4437-Shiro反序列化爆破模块和key,命令执行，反弹shell的脚本

CVE-2016-4437CRITICALunder attack27 May 2020

Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attack

100RISK

open ↗

GitHub PoC

gothburz/cve-2020-8617

CVE-2020-8617HIGH26 May 2020

A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c

78RISK

open ↗

GitHub PoC

yukar1z0e/CVE-2019-19781

CVE-2019-19781CRITICALunder attackransomware26 May 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

GitHub PoC★ 12

TelerikUI Vulnerability Scanner (CVE-2019-18935)

CVE-2019-18935CRITICALunder attackransomware25 May 2020

Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUp

100RISK

open ↗

GitHub PoC★ 22

CVE-2020-2551 POC to use in Internet

CVE-2020-2551CRITICALunder attack24 May 2020

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppor

100RISK

open ↗

GitHub PoC★ 87

QNAP pre-auth root RCE Exploit (CVE-2019-7192 ~ CVE-2019-7195)

CVE-2019-7192CRITICALunder attackransomware24 May 2020

This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix the

100RISK

open ↗

GitHub PoC★ 1

vulnerabilidad CVE-2019-0708 testing y explotacion

CVE-2019-0708CRITICALunder attackransomware23 May 2020

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau

100RISK

open ↗

GitHub PoC★ 5

Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services (JSONWS)

CVE-2020-7961CRITICALunder attack23 May 2020

Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary c

100RISK

open ↗

GitHub PoC

HKirito/phpmyadmin4.4_cve-2016-5734

CVE-2016-5734—22 May 2020

phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not properly choose delimiters to

60RISK

open ↗

GitHub PoC★ 2

CVE-2017-17485:Jackson-databind RCE

CVE-2017-17485CRITICAL22 May 2020

FasterXML jackson-databind through 2.8.10 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because o

60RISK

open ↗

GitHub PoC

saltstack CVE-2020-11652

CVE-2020-11652MEDIUMunder attack22 May 2020

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs cla

100RISK

open ↗

GitHub PoC★ 13

Checker for QNAP pre-auth root RCE (CVE-2019-7192 ~ CVE-2019-7195)

CVE-2019-7192CRITICALunder attackransomware21 May 2020

This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix the

100RISK

open ↗

GitHub PoC★ 45

PoC for CVE-2020-8617 (BIND)

CVE-2020-8617HIGH20 May 2020

A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c

78RISK

open ↗

GitHub PoC★ 105

Cisco AnyConnect < 4.8.02042 privilege escalation through path traversal

CVE-2020-3153MEDIUMunder attackransomware19 May 2020

Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

83RISK

open ↗

GitHub PoC★ 29

Tool to try multiple paths for PHPunit RCE CVE-2017-9841

CVE-2017-9841CRITICALunder attack18 May 2020

Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP c

100RISK

open ↗

GitHub PoC

yukar1z0e/CVE-2018-13379

CVE-2018-13379CRITICALunder attackransomware18 May 2020

An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.

100RISK

open ↗

GitHub PoC

TelerikUI Vulnerability Scanner (CVE-2019-18935)

CVE-2019-18935CRITICALunder attackransomware17 May 2020

Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUp

100RISK

open ↗

GitHub PoC★ 89

Weblogic Vuln POC EXP cve-2020-2551 cve-2020-2555 cve-2020-2883 ，。。。

CVE-2020-2551CRITICALunder attack16 May 2020

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppor

100RISK

open ↗

GitHub PoC★ 31

CVE-2020-10199 回显版本

CVE-2020-10199HIGHunder attack15 May 2020

Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2).

100RISK

open ↗

GitHub PoC

CVE-2018-10933_Scanner

CVE-2018-10933CRITICAL15 May 2020

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul

85RISK

open ↗

GitHub PoC

PoC for CVE-2020-3153 Cisco AnyConnect Secure Mobility Client EoP

CVE-2020-3153MEDIUMunder attackransomware15 May 2020

Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

83RISK

open ↗

GitHub PoC

cdedmondson/Modified-CVE-2015-3306-Exploit

CVE-2015-3306CRITICALunder attack15 May 2020

The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and

100RISK

open ↗

GitHub PoC

ES File Explorer Open Port Vulnerability - CVE-2019-6447

CVE-2019-6447—14 May 2020

The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary fi

50RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.