Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

87,168cataloged exploits

40,553CVEs with public exploitation

24,696lab-tested

All Referência 26,327Exploit-DB 24,488GitHub PoC 18,080VulnCheck XDB 10,169Nuclei 4,567Metasploit 3,537✓ verified onlyrecent popular risk

18,078 exploits

GitHub PoC★ 15

xyzAsian/Janus-CVE-2017-13156

CVE-2017-13156—29 Dec 2017

An elevation of privilege vulnerability in the Android system (art). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0,

43RISK

open ↗

GitHub PoC★ 29

CVE-2017-10271 POC

CVE-2017-10271HIGHunder attackransomware28 Dec 2017

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte

100RISK

open ↗

GitHub PoC★ 140

WebLogic Exploit

CVE-2017-10271HIGHunder attackransomware28 Dec 2017

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte

100RISK

open ↗

GitHub PoC★ 1

CVE-2017-17562 GOAHEAD RCE (Author: Daniel Hodson)

CVE-2017-17562HIGHunder attack27 Dec 2017

Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. T

100RISK

open ↗

GitHub PoC★ 4

CVE-2017-12615 Tomcat RCE (TESTED)

CVE-2017-12615HIGHunder attackransomware26 Dec 2017

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisati

100RISK

open ↗

GitHub PoC★ 22

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server.

CVE-2017-10271HIGHunder attackransomware25 Dec 2017

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte

100RISK

open ↗

GitHub PoC★ 3

Simplified PoC for Weblogic-CVE-2017-10271

CVE-2017-10271HIGHunder attackransomware25 Dec 2017

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte

100RISK

open ↗

GitHub PoC★ 26

CVE-2017-17215 HuaWei Router RCE (NOT TESTED)

CVE-2017-17215—25 Dec 2017

Huawei HG532 with some customized versions has a remote code execution vulnerability. An authenticated attacker could se

45RISK

open ↗

GitHub PoC★ 39

CVE-2017-10271 WEBLOGIC RCE (TESTED)

CVE-2017-10271HIGHunder attackransomware23 Dec 2017

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte

100RISK

open ↗

GitHub PoC★ 15

CVE-2017-12149 JBOSS RCE (TESTED)

CVE-2017-12149CRITICALunder attackransomware22 Dec 2017

In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter

100RISK

open ↗

GitHub PoC★ 2

CVE-2017-15944 Palo Alto Networks firewalls remote root code execution POC

CVE-2017-15944CRITICALunder attack19 Dec 2017

Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote

100RISK

open ↗

GitHub PoC★ 15

Sudo <= 1.8.14 Local Privilege Escalation and vulnerable container

CVE-2015-5602—16 Dec 2017

sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is d

23RISK

open ↗

GitHub PoC★ 3

RTF Cleaner, tries to extract URL from malicious RTF samples using CVE-2017-0199 & CVE-2017-8759

CVE-2017-0199HIGHunder attackransomware08 Dec 2017

Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Window

100RISK

open ↗

GitHub PoC

acidburnmi/CVE-2016-5195-master

CVE-2016-5195HIGHunder attack06 Dec 2017

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISK

open ↗

GitHub PoC★ 21

Better Exploit Code For CVE 2017 9805 apache struts

CVE-2017-9805HIGHunder attack04 Dec 2017

The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with a

100RISK

open ↗

GitHub PoC

chu1337/CVE-2017-1000117

CVE-2017-1000117—03 Dec 2017

A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL ca

60RISK

open ↗

GitHub PoC

giovannidispoto/CVE-2017-13872-Patch

CVE-2017-13872—30 Nov 2017

An issue was discovered in certain Apple products. macOS High Sierra before Security Update 2017-001 is affected. The is

50RISK

open ↗

GitHub PoC★ 200

A POC for the Huge Dirty Cow vulnerability (CVE-2017-1000405)

CVE-2017-1000405—29 Nov 2017

The Linux Kernel versions 2.6.38 through 4.14 have a problematic use of pmd_mkdirty() in the touch_pmd() function inside

23RISK

open ↗

GitHub PoC★ 210

CVE-2017-12149 jboss反序列化可回显

CVE-2017-12149CRITICALunder attackransomware28 Nov 2017

In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter

100RISK

open ↗

GitHub PoC★ 1

CVE-2017-9805 - Exploit

CVE-2017-9805HIGHunder attack28 Nov 2017

The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with a

100RISK

open ↗

GitHub PoC★ 1

Tomcat 远程代码执行漏洞 Exploit

CVE-2017-12615HIGHunder attackransomware28 Nov 2017

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisati

100RISK

open ↗

GitHub PoC★ 2

Shadowshusky/CVE-2017-11882-

CVE-2017-11882HIGHunder attackransomware27 Nov 2017

Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi

100RISK

open ↗

GitHub PoC★ 2

CVE-2015-4852 Oracle WebLogic Scanner

CVE-2015-4852CRITICALunder attack25 Nov 2017

The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers

100RISK

open ↗

GitHub PoC

CSC-pentest/cve-2017-11882

CVE-2017-11882HIGHunder attackransomware24 Nov 2017

Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi

100RISK

open ↗

GitHub PoC★ 15

Exploit script for Apache Struts2 REST Plugin XStream RCE (‎CVE-2017-9805)

CVE-2017-9805HIGHunder attack24 Nov 2017

The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with a

100RISK

open ↗

GitHub PoC

# CVE-2017-11882-metasploit This is a Metasploit module which exploits CVE-2017-11882 using the POC below: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about. ## Installation 1) Copy the cve_2017_11882.rb to /usr/share/metasploit-framework/modules/exploits/windows/local/ 2) Copy the cve-2017-11882.rtf to /usr/share/metasploit-framework/data/exploits/ This module is a quick port to Metasploit and uses mshta.exe to execute the payload. There are better ways to implement this module and exploit but will update it as soon as I have the time.

CVE-2017-11882HIGHunder attackransomware24 Nov 2017

Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi

100RISK

open ↗

GitHub PoC★ 3

Shellshock exploitation script that is able to upload and RCE using any vector due to its versatility.

CVE-2014-6271CRITICALunder attack23 Nov 2017

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISK

open ↗

GitHub PoC

CVE-2017-9430 Fix

CVE-2017-9430—22 Nov 2017

Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service (application crash) o

28RISK

open ↗

GitHub PoC

Grey-Li/CVE-2017-11882

CVE-2017-11882HIGHunder attackransomware22 Nov 2017

Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi

100RISK

open ↗

GitHub PoC★ 44

CVE-2017-11882 exploitation

CVE-2017-11882HIGHunder attackransomware22 Nov 2017

Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi

100RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.