Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
89,220cataloged exploits
41,197CVEs with public exploitation
24,696lab-tested
AllReferência 26,738Exploit-DB 24,490GitHub PoC 18,525exploitation intelligence 11,299Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
89,220 exploits
exploitation intelligence
client-side
NTLM Hash Disclosure Spoofing Vulnerability
75RISK
Metasploit600
Telerik Report Server Auth Bypass and Deserialization RCE
Progress Telerik Report Server Deserialization
55RISK
open ↗Metasploit300
Telerik Report Server Auth Bypass
Registration Authentication Bypass Vulnerability
100RISK
open ↗Metasploit600
Telerik Report Server Auth Bypass and Deserialization RCE
Registration Authentication Bypass Vulnerability
100RISK
open ↗GitHub PoC★ 2
Precompiled binaries for Privilege Escalation in Oracle VM Virtual box prior to 7.0.16
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a
41RISK
open ↗exploitation intelligence
initial-access
This High severity RCE (Remote Code Execution) vulnerability was introduced in version 5.2 of Confluence Data Center and
78RISK
exploitation intelligence
infoleak
Information disclosure
100RISK
GitHub PoC★ 5
An Vulnerability detection and Exploitation tool for CVE-2024-4358
Registration Authentication Bypass Vulnerability
100RISK
open ↗exploitation intelligence
local
The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4
78RISK
GitHub PoC★ 3
Sonatype Nexus Repository Manager 3 (LFI)
Nexus Repository 3 - Path Traversal
61RISK
open ↗exploitation intelligence
local
The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4
78RISK
Metasploit0
macOS PackageKit ZSH Environment Privilege Escalation
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.5. An app may be able to
36RISK
open ↗exploitation intelligence
initial-access
Apache OFBiz: Path traversal leading to RCE
100RISK
GitHub PoC★ 3
CVE-2024-24919 Exploit and PoC - Critical LFI for Remote Access VPN or Mobile Access.
Information disclosure
100RISK
open ↗GitHub PoC★ 78
Progress Telerik Report Server pre-authenticated RCE chain (CVE-2024-4358/CVE-2024-1800)
Registration Authentication Bypass Vulnerability
100RISK
open ↗GitHub PoC★ 2
kevcooper/CVE-2024-1086-checker
Use-after-free in Linux kernel's netfilter: nf_tables component
76RISK
open ↗GitHub PoC★ 18
Apache HugeGraph Server Unauthenticated RCE - CVE-2024-27348 Proof of concept Exploit
Apache HugeGraph-Server: Command execution in gremlin
100RISK
open ↗GitHub PoC★ 1
CVE-2023-51518: Preauthenticated Java Deserialization via JMX in Apache James
Apache James server: Privilege escalation via JMX pre-authentication deserialisation
48RISK
open ↗exploitation intelligence
initial-access
Apache HugeGraph-Server: Command execution in gremlin
100RISK
exploitation intelligence
initial-access
Registration Authentication Bypass Vulnerability
100RISK
exploitation intelligence
infoleak
Information disclosure
100RISK
exploitation intelligence
infoleak
Information disclosure
100RISK
exploitation intelligence
infoleak
Information disclosure
100RISK
We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.