Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

87,168cataloged exploits

40,553CVEs with public exploitation

24,696lab-tested

All Referência 26,327Exploit-DB 24,488GitHub PoC 18,080VulnCheck XDB 10,169Nuclei 4,567Metasploit 3,537✓ verified onlyrecent popular risk

18,078 exploits

GitHub PoC★ 15

Creating a vulnerable environment and the PoC

CVE-2018-11776HIGHunder attack23 Aug 2018

Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullN

100RISK

open ↗

GitHub PoC★ 110

PoC for Privilege Escalation in Windows 10 Diagnostics Hub Standard Collector Service

CVE-2018-0952—21 Aug 2018

An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary

23RISK

open ↗

GitHub PoC★ 3

dangokyo/CVE-2015-5119

CVE-2015-5119HIGHunder attack21 Aug 2018

Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.

100RISK

open ↗

GitHub PoC

a exp for cve-2018-9948/9958 , current shellcode called win-calc

CVE-2018-9948—21 Aug 2018

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader

50RISK

open ↗

GitHub PoC★ 534

Exploit written in Python for CVE-2018-15473 with threading and export formats

CVE-2018-15473MEDIUM21 Aug 2018

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati

70RISK

open ↗

GitHub PoC★ 3

CVE-2018-15473 - Opensshenum is an user enumerator exploiting an OpenSsh bug

CVE-2018-15473MEDIUM19 Aug 2018

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati

70RISK

open ↗

GitHub PoC★ 159

OpenSSH 2.3 up to 7.4 Mass Username Enumeration (CVE-2018-15473).

CVE-2018-15473MEDIUM17 Aug 2018

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati

70RISK

open ↗

GitHub PoC★ 1

CVE-2018-8120 Windows LPE exploit

CVE-2018-8120HIGHunder attackransomware16 Aug 2018

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

100RISK

open ↗

GitHub PoC★ 258

PoC for CVE-2018-15133 (Laravel unserialize vulnerability)

CVE-2018-15133HIGHunder attack14 Aug 2018

In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unseri

100RISK

open ↗

GitHub PoC

kaisaryousuf/CVE-2018-8208

CVE-2018-8208—13 Aug 2018

An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual regis

23RISK

open ↗

GitHub PoC★ 120

Implements the POP/MOV SS (CVE-2018-8897) vulnerability by leveraging SYSCALL to perform a local privilege escalation (LPE).

CVE-2018-8897—08 Aug 2018

A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) wa

43RISK

open ↗

GitHub PoC★ 178

Exploit for CVE-2018-4233, a WebKit JIT optimization bug used during Pwn2Own 2018

CVE-2018-4233HIGH08 Aug 2018

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud

68RISK

open ↗

GitHub PoC★ 7

Foxit Reader version 9.0.1.1049 Use After Free with ASLR and DEP bypass on heap

CVE-2018-9948—04 Aug 2018

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader

50RISK

open ↗

GitHub PoC★ 63

CVE-2007-2447 - Samba usermap script

CVE-2007-2447—03 Aug 2018

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands

50RISK

open ↗

GitHub PoC★ 96

A Burp extension to detect and exploit versions of Telerik Web UI vulnerable to CVE-2017-9248.

CVE-2017-9248CRITICALunder attack03 Aug 2018

Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not

100RISK

open ↗

GitHub PoC★ 2

Crestron AirMedia AM-100 Traversal and Hashdump Metasploit Modules

CVE-2016-5639—01 Aug 2018

Directory traversal vulnerability in cgi-bin/login.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13

28RISK

open ↗

GitHub PoC★ 21

on Mac 10.12.2

CVE-2017-2370—30 Jul 2018

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvOS

28RISK

open ↗

GitHub PoC★ 7

A demo exploit of CVE-2016-9079 on Ubuntu x64

CVE-2016-9079HIGHunder attack29 Jul 2018

A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been dis

100RISK

open ↗

GitHub PoC

PercussiveElbow/CVE-2004-2271-MiniShare-1.4.1-Buffer-Overflow

CVE-2004-2271—25 Jul 2018

Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET req

60RISK

open ↗

GitHub PoC★ 8

CVE-2013-6117

CVE-2013-6117—23 Jul 2018

Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive informatio

60RISK

open ↗

GitHub PoC★ 2

This Python 3 script is for uploading shell (and other files) to Windows Server / Linux via Oracle 11g R2 (CVE-2010-3600).

CVE-2010-3600—20 Jul 2018

Unspecified vulnerability in the Client System Analyzer component in Oracle Database Server 11.1.0.7 and 11.2.0.1 and En

60RISK

open ↗

GitHub PoC

likekabin/CVE-2018-4121

CVE-2018-4121—17 Jul 2018

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud b

28RISK

open ↗

GitHub PoC

likekabin/ShareDoc_cve-2015-5477

CVE-2015-5477HIGHunder attack17 Jul 2018

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (

100RISK

open ↗

GitHub PoC★ 50

Collection of exploits/POC for PrestaShop cookie vulnerabilities (CVE-2018-13784)

CVE-2018-13784—16 Jul 2018

PrestaShop before 1.6.1.20 and 1.7.x before 1.7.3.4 mishandles cookie encryption in Cookie.php, Rinjdael.php, and Blowfi

28RISK

open ↗

GitHub PoC

happynote3966/CVE-2018-7602

CVE-2018-7602HIGHunder attackransomware12 Jul 2018

Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004

100RISK

open ↗

GitHub PoC

happynote3966/CVE-2018-7600

CVE-2018-7600CRITICALunder attackransomware12 Jul 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISK

open ↗

GitHub PoC

Linux Null pointer dereference

CVE-2009-2692—12 Jul 2018

The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socke

43RISK

open ↗

GitHub PoC★ 1

happynote3966/CVE-2014-3704

CVE-2014-3704—11 Jul 2018

The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct

60RISK

open ↗

GitHub PoC★ 1

CVE-2018-8120HIGHunder attackransomware11 Jul 2018

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

100RISK

open ↗

GitHub PoC★ 30

Analysis of VBS exploit CVE-2018-8174

CVE-2018-8174HIGHunder attackransomware10 Jul 2018

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows

93RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.