Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
89,220cataloged exploits
41,197CVEs with public exploitation
24,696lab-tested
AllReferência 26,738Exploit-DB 24,490GitHub PoC 18,525exploitation intelligence 11,299Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
89,220 exploits
exploitation intelligence
local
The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4
78RISK
exploitation intelligence
initial-access
Registration Authentication Bypass Vulnerability
100RISK
exploitation intelligence
initial-access
Apache OFBiz: Path traversal leading to RCE
100RISK
GitHub PoC★ 26
Apache OFBIZ Path traversal leading to RCE POC[CVE-2024-32113 & CVE-2024-36104]
Apache OFBiz: Path traversal leading to RCE
100RISK
open ↗GitHub PoC★ 1
adyanamul/Remote-Code-Execution-RCE-Exploit-BlueKeep-CVE-2019-0708-PoC
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RISK
open ↗GitHub PoC★ 3
CVE-2024-24919 Sniper - A powerful tool for scanning Check Point Security Gateway CVE-2024-24919 vulnerability. Supports single & bulk scanning, multithreading, and generates detailed CSV reports. Ideal for penetration testers and security researchers.
Information disclosure
100RISK
open ↗GitHub PoC★ 1
phpMyAdmin <4.9.0 - Cross-Site Request Forgery
An issue was discovered in phpMyAdmin before 4.9.0. A vulnerability was found that allows an attacker to trigger a CSRF
28RISK
open ↗GitHub PoC
CVE-2021-41773.py
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
open ↗exploitation intelligence
infoleak
Information disclosure
100RISK
exploitation intelligence
infoleak
Information disclosure
100RISK
exploitation intelligence
infoleak
Information disclosure
100RISK
exploitation intelligence
infoleak
Information disclosure
100RISK
exploitation intelligence
infoleak
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
exploitation intelligence
infoleak
Information disclosure
100RISK
exploitation intelligence
infoleak
Information disclosure
100RISK
exploitation intelligence
infoleak
Information disclosure
100RISK
exploitation intelligence
infoleak
Information disclosure
100RISK
exploitation intelligence
infoleak
Information disclosure
100RISK
exploitation intelligence
infoleak
Information disclosure
100RISK
exploitation intelligence
infoleak
Information disclosure
100RISK
exploitation intelligence
infoleak
Information disclosure
100RISK
exploitation intelligence
infoleak
Information disclosure
100RISK
GitHub PoC★ 1
Exploit for CVE-2019-7609 in python
Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker
100RISK
open ↗exploitation intelligence
initial-access
Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker
100RISK
GitHub PoC
https://www.cve.org/CVERecord?id=CVE-2024-32002
Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution
53RISK
open ↗GitHub PoC★ 2
none
Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution
53RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.