Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

89,220cataloged exploits
41,197CVEs with public exploitation
24,696lab-tested
AllReferência 26,738Exploit-DB 24,490GitHub PoC 18,525VulnCheck XDB 11,299Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
89,220 exploits
GitHub PoC★ 4
PIN-based Authentication Bypass vulnerability in Kaiten
CVE-2024-41276CRITICAL08 Jul 2024
A vulnerability in Kaiten version 57.131.12 and earlier allows attackers to bypass the PIN code authentication mechanism
48RISK
open ↗
GitHub PoC★ 11
Exploit for CVE-2024-4883
CVE-2024-4883CRITICAL08 Jul 2024
WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability
60RISK
open ↗
GitHub PoC
Chef Inspec profile for checking regreSSHion vulnerability CVE-2024-6387
CVE-2024-6387HIGH08 Jul 2024
Openssh: regresshion - race condition in ssh allows rce/dos
63RISK
open ↗
GitHub PoC★ 200
Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (CVE-2024-6387)
CVE-2024-6387HIGH08 Jul 2024
Openssh: regresshion - race condition in ssh allows rce/dos
63RISK
open ↗
VulnCheck XDB
initial-access
CVE-2024-4885CRITICALunder attack08 Jul 2024
WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability
100RISK
open ↗
VulnCheck XDB
info-leak
CVE-2024-27292HIGH08 Jul 2024
Docassemble unauthorized access through URL manipulation
68RISK
open ↗
GitHub PoC★ 17
Exploit for CVE-2024-4885
CVE-2024-4885CRITICALunder attack08 Jul 2024
WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability
100RISK
open ↗
GitHub PoC
poc for CVE-2024-34102
CVE-2024-34102CRITICALunder attack08 Jul 2024
XXE can expose crypt key and other secrets granting full admin access
100RISK
open ↗
GitHub PoC
CosmicSting (CVE-2024-34102) POC / Patch Validator
CVE-2024-34102CRITICALunder attack07 Jul 2024
XXE can expose crypt key and other secrets granting full admin access
100RISK
open ↗
GitHub PoC
sysonlai/CVE-2024-32002-hook
CVE-2024-32002CRITICAL07 Jul 2024
Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution
53RISK
open ↗
GitHub PoC★ 1
Chamilo LMS Unauthenticated Remote Code Execution
CVE-2023-4220HIGH07 Jul 2024
Chamilo LMS Unauthenticated Big Upload File Remote Code Execution
78RISK
open ↗
GitHub PoC
This is a script written in Python that allows the exploitation of the Chamilo's LMS software security flaw described in CVE-2023-4220
CVE-2023-4220HIGH07 Jul 2024
Chamilo LMS Unauthenticated Big Upload File Remote Code Execution
78RISK
open ↗
GitHub PoC★ 1
Unrestricted file upload in big file upload functionality in `/main/inc/lib/javascript/bigupload/inc/bigUpload.php` in Chamilo LMS <= v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via uploading of web shell.
CVE-2023-4220HIGH07 Jul 2024
Chamilo LMS Unauthenticated Big Upload File Remote Code Execution
78RISK
open ↗
GitHub PoC★ 5
This is a script written in Python that allows the exploitation of the Chamilo's LMS software security flaw described in CVE-2023-4220
CVE-2023-4220HIGH07 Jul 2024
Chamilo LMS Unauthenticated Big Upload File Remote Code Execution
78RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-4220HIGH07 Jul 2024
Chamilo LMS Unauthenticated Big Upload File Remote Code Execution
78RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-4220HIGH07 Jul 2024
Chamilo LMS Unauthenticated Big Upload File Remote Code Execution
78RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-4220HIGH07 Jul 2024
Chamilo LMS Unauthenticated Big Upload File Remote Code Execution
78RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-4220HIGH07 Jul 2024
Chamilo LMS Unauthenticated Big Upload File Remote Code Execution
78RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-4220HIGH07 Jul 2024
Chamilo LMS Unauthenticated Big Upload File Remote Code Execution
78RISK
open ↗
GitHub PoC
RCE Chamilo 1.11.24
CVE-2023-4220HIGH07 Jul 2024
Chamilo LMS Unauthenticated Big Upload File Remote Code Execution
78RISK
open ↗
VulnCheck XDB
infoleak
CVE-2024-34102CRITICALunder attack07 Jul 2024
XXE can expose crypt key and other secrets granting full admin access
100RISK
open ↗
GitHub PoC
YISF 2024 CTF-Web (Directory Traversal via ".tar" file, CVE-2007-4559), easy
CVE-2007-4559CRITICAL07 Jul 2024
Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows
53RISK
open ↗
VulnCheck XDB
initial-access
CVE-2024-4577CRITICALunder attackransomware06 Jul 2024
Argument Injection in PHP-CGI
100RISK
open ↗
GitHub PoC★ 56
Remote Code Execution (RCE) Vulnerability In Evaluating Property Name Expressions with multies ways to exploit
CVE-2024-36401CRITICALunder attack06 Jul 2024
Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver
100RISK
open ↗
GitHub PoC★ 7
PoC - PHP CGI Argument Injection CVE-2024-4577 (Scanner and Exploit)
CVE-2024-4577CRITICALunder attackransomware06 Jul 2024
Argument Injection in PHP-CGI
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2024-36401CRITICALunder attack06 Jul 2024
Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2024-36991HIGH06 Jul 2024
Path Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows
61RISK
open ↗
VulnCheck XDB
infoleak
CVE-2024-36991HIGH06 Jul 2024
Path Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows
61RISK
open ↗
VulnCheck XDB
infoleak
CVE-2024-36991HIGH06 Jul 2024
Path Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows
61RISK
open ↗
VulnCheck XDB
infoleak
CVE-2024-36991HIGH06 Jul 2024
Path Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows
61RISK
open ↗
← previouspage 582 / 2,974next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.