Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,900cataloged exploits

35,840CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,458Referência 22,600GitHub PoC 14,323VulnCheck XDB 8,722Nuclei 4,320Metasploit 3,477✓ verified onlyrecent popular risk

77,772 exploits

GitHub PoC

LTiDi2000/CVE-2020-2551

CVE-2020-2551CRITICALunder attack21 Mar 2022

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppor

100RISK

open ↗

VulnCheck XDB

local

CVE-2016-5195HIGHunder attack21 Mar 2022

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISK

open ↗

GitHub PoC★ 18

Enokiy/cve-2022-22947-spring-cloud-gateway

CVE-2022-22947CRITICALunder attack21 Mar 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RISK

open ↗

GitHub PoC★ 1

SivaPriyaRanganatha/CVE-2020-6418

CVE-2020-6418HIGHunder attack21 Mar 2022

Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corru

100RISK

open ↗

VulnCheck XDB

initial-access

CVE-2022-22947CRITICALunder attack21 Mar 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RISK

open ↗

GitHub PoC

Anonymous-Family/CVE-2015-1701-download

CVE-2015-1701HIGHunder attackransomware21 Mar 2022

Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local

98RISK

open ↗

GitHub PoC

Unspecified vulnerability in Microsoft Windows before 8 allows local users to gain privileges via unknown vectors, as exploited in the wild in April 2015 (Base Score: 7.2 HIGH) Current Description Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka "Win32k Elevation of Privilege Vulnerability

CVE-2015-1701HIGHunder attackransomware21 Mar 2022

Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local

98RISK

open ↗

GitHub PoC

TheJoyOfHacking/saleemrashid-sudo-cve-2019-18634

CVE-2019-18634—20 Mar 2022

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the

28RISK

open ↗

GitHub PoC★ 4

pwncat module that automatically exploits CVE-2022-0847 (dirtypipe)

CVE-2022-0847HIGHunder attack20 Mar 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISK

open ↗

VulnCheck XDB

local

CVE-2022-0847HIGHunder attack20 Mar 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISK

open ↗

GitHub PoC★ 9

Apache APISIX < 2.12.1 Remote Code Execution and Docker Lab

CVE-2022-24112CRITICALunder attack20 Mar 2022

apisix/batch-requests plugin allows overwriting the X-REAL-IP header

100RISK

open ↗

VulnCheck XDB

initial-access

CVE-2022-24990CRITICALunder attackransomware20 Mar 2022

TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agen

100RISK

open ↗

GitHub PoC★ 38

CVE-2022-24990信息泄露+RCE 一条龙

CVE-2022-24990CRITICALunder attackransomware20 Mar 2022

TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agen

100RISK

open ↗

GitHub PoC★ 12

CVE-2022-24990 TerraMaster TOS unauthenticated RCE via PHP Object Instantiation

CVE-2022-24990CRITICALunder attackransomware20 Mar 2022

TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agen

100RISK

open ↗

VulnCheck XDB

initial-access

CVE-2022-24112CRITICALunder attack20 Mar 2022

apisix/batch-requests plugin allows overwriting the X-REAL-IP header

100RISK

open ↗

VulnCheck XDB

initial-access

CVE-2017-9841CRITICALunder attack20 Mar 2022

Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP c

100RISK

open ↗

GitHub PoC★ 3

RCE exploit for PHP Unit 5.6.2

CVE-2017-9841CRITICALunder attack20 Mar 2022

Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP c

100RISK

open ↗

GitHub PoC

PoC for Dirty COW (CVE-2016-5195)

CVE-2016-5195HIGHunder attack19 Mar 2022

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISK

open ↗

GitHub PoC

Local privilege escalation for OS X 10.10.5 via CVE-2016-1828.

CVE-2016-1828—18 Mar 2022

The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers

23RISK

open ↗

GitHub PoC★ 1

tzwlhack/CVE-2017-11882

CVE-2017-11882HIGHunder attackransomware18 Mar 2022

Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi

100RISK

open ↗

VulnCheck XDB

local

CVE-2021-3156HIGHunder attack18 Mar 2022

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RISK

open ↗

VulnCheck XDB

local

CVE-2022-0847HIGHunder attack18 Mar 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISK

open ↗

VulnCheck XDB

initial-access

CVE-2017-11882HIGHunder attackransomware18 Mar 2022

Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi

100RISK

open ↗

GitHub PoC★ 18

CVE-2022-22947 memshell

CVE-2022-22947CRITICALunder attack18 Mar 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RISK

open ↗

GitHub PoC★ 10

Hacked up Dirty Pipe (CVE-2022-0847) PoC that hijacks a SUID binary to spawn a root shell. (and attempts to restore the damaged binary as well)

CVE-2022-0847HIGHunder attack18 Mar 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISK

open ↗

GitHub PoC★ 1

CVE-2021-3156

CVE-2021-3156HIGHunder attack18 Mar 2022

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RISK

open ↗

Metasploit600

Open Web Analytics 1.7.3 - Remote Code Execution (RCE)

CVE-2022-24637—18 Mar 2022

Open Web Analytics (OWA) before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, wh

60RISK

open ↗

GitHub PoC★ 4

Kibana <6.6.0 RCE written in python3

CVE-2019-7609CRITICALunder attack17 Mar 2022

Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker

100RISK

open ↗

Metasploit600

User Profile Arbitrary Junction Creation Local Privilege Elevation

CVE-2022-26904HIGHunder attack17 Mar 2022

Windows User Profile Service Elevation of Privilege Vulnerability

66RISK

open ↗

VulnCheck XDB

initial-access

CVE-2019-7609CRITICALunder attack17 Mar 2022

Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker

100RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.