Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

87,464cataloged exploits

40,695CVEs with public exploitation

24,696lab-tested

All Referência 26,426Exploit-DB 24,489GitHub PoC 18,182VulnCheck XDB 10,251Nuclei 4,577Metasploit 3,539✓ verified onlyrecent popular risk

18,080 exploits

GitHub PoC★ 23

Script to extract malicious payload and decoy document from CVE-2015-1641 exploit documents

CVE-2015-1641HIGHunder attack27 Oct 2015

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Comp

93RISK

open ↗

GitHub PoC

Dockerfile for testing CVE-2014-0160 Heartbleed exploitation.

CVE-2014-0160HIGHunder attack23 Oct 2015

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISK

open ↗

GitHub PoC

Quick and dirty .py for checking (CVE-2015-1635) MS15-034 + DoS attack option

CVE-2015-1635CRITICALunder attack14 Oct 2015

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold an

100RISK

open ↗

GitHub PoC

gina-alaska/bash-cve-2014-7169-cookbook

CVE-2014-7169CRITICALunder attack30 Sep 2015

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of

100RISK

open ↗

GitHub PoC★ 11

CVE-2015-3073 PoC

CVE-2015-3073—27 Sep 2015

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass inten

28RISK

open ↗

GitHub PoC★ 11

Network Scanner for OpenSSL Memory Leak (CVE-2014-0160)

CVE-2014-0160HIGHunder attack24 Sep 2015

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISK

open ↗

GitHub PoC★ 12

Archive from the article CVE-2015-5119 Flash ByteArray UaF: A beginner's walkthrough

CVE-2015-5119HIGHunder attack10 Sep 2015

Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.

100RISK

open ↗

GitHub PoC★ 1

An exploit for CVE-2015-1538-1 - Google Stagefright ‘stsc’ MP4 Atom Integer Overflow Remote Code Execution

CVE-2015-1538—10 Sep 2015

Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android bef

45RISK

open ↗

GitHub PoC★ 205

An exploit for CVE-2015-1538-1 - Google Stagefright ‘stsc’ MP4 Atom Integer Overflow Remote Code Execution

CVE-2015-1538—10 Sep 2015

Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android bef

45RISK

open ↗

GitHub PoC★ 3

An exploit for CVE-2015-1538-1 - Google Stagefright ‘stsc’ MP4 Atom Integer Overflow Remote Code Execution

CVE-2015-1538—09 Sep 2015

Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android bef

45RISK

open ↗

GitHub PoC★ 1

drone789/CVE-2012-1823

CVE-2012-1823CRITICALunder attack08 Sep 2015

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not

100RISK

open ↗

GitHub PoC★ 1

Just an attempt to adapt for Note 4, I do not know what I am doing.

CVE-2014-4322—04 Sep 2015

drivers/misc/qseecom.c in the QSEECOM driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Andr

23RISK

open ↗

GitHub PoC★ 2

An implementation of the CVE-2015-2153 exploit.

CVE-2015-2153—27 Aug 2015

The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers t

28RISK

open ↗

GitHub PoC

Windows 2k3 tcpip.sys Privilege Escalation

CVE-2014-4076—20 Aug 2015

Microsoft Windows Server 2003 SP2 allows local users to gain privileges via a crafted IOCTL call to (1) tcpip.sys or (2)

43RISK

open ↗

GitHub PoC★ 1

PoC exploit for CVE-2015-5477 in php

CVE-2015-5477HIGHunder attack19 Aug 2015

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (

100RISK

open ↗

GitHub PoC★ 3

PoC - Binary patches for CVE-2015-3864 (NOT for production, use at your own risk)

CVE-2015-3864—18 Aug 2015

Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in A

60RISK

open ↗

GitHub PoC★ 24

CVE-2014-4322 Exploit

CVE-2014-4322—16 Aug 2015

drivers/misc/qseecom.c in the QSEECOM driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Andr

23RISK

open ↗

GitHub PoC★ 1

Exploit for CVE-2015-4495 / mfsa2015-78

CVE-2015-4495HIGHunder attack10 Aug 2015

The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote

98RISK

open ↗

GitHub PoC★ 1

PoC for BIND9 TKEY assert DoS (CVE-2015-5477)

CVE-2015-5477HIGHunder attack09 Aug 2015

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (

100RISK

open ↗

GitHub PoC★ 1

Vulnerability as a service: showcasing CVS-2015-5447, a DDoS condition in the bind9 software

CVE-2015-5477HIGHunder attack04 Aug 2015

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (

100RISK

open ↗

GitHub PoC★ 14

PoC exploit code for CVE-2015-5477 BIND9 TKEY remote DoS vulnerability

CVE-2015-5477HIGHunder attack01 Aug 2015

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (

100RISK

open ↗

GitHub PoC★ 64

PoC exploit for CVE-2015-5477 BIND9 TKEY assertion failure

CVE-2015-5477HIGHunder attack31 Jul 2015

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (

100RISK

open ↗

GitHub PoC★ 3

A little Python tool for exploiting CVE-2015-1560 and CVE-2015-1561. Quick'n'dirty. Real dirty.

CVE-2015-1560—31 Jul 2015

SQL injection vulnerability in the isUserAdmin function in include/common/common-Func.php in Centreon (formerly Merethis

23RISK

open ↗

GitHub PoC★ 11

jvazquez-r7/CVE-2015-5119

CVE-2015-5119HIGHunder attack29 Jul 2015

Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.

100RISK

open ↗

GitHub PoC★ 15

Vulnerability as a service: showcasing CVS-2014-0160, a.k.a. Heartbleed

CVE-2014-0160HIGHunder attack12 Jul 2015

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISK

open ↗

GitHub PoC★ 22

Vulnerability as a service: showcasing CVS-2014-6271, a.k.a. Shellshock

CVE-2014-6271CRITICALunder attack11 Jul 2015

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISK

open ↗

GitHub PoC★ 6

A script, in C, to check if CGI scripts are vulnerable to CVE-2014-6271 (The Bash Bug).

CVE-2014-6271CRITICALunder attack26 Jun 2015

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISK

open ↗

GitHub PoC★ 1

This is an Android Application that helps you detect if your machine that run bash is vulnerable by CVE-2014-6271

CVE-2014-6271CRITICALunder attack17 Jun 2015

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISK

open ↗

GitHub PoC

reading course

CVE-2014-6271CRITICALunder attack10 Jun 2015

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISK

open ↗

GitHub PoC

marstornado/cve-2014-0160-Yunfeng-Jiang

CVE-2014-0160HIGHunder attack09 Jun 2015

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.