Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
89,220cataloged exploits
41,197CVEs with public exploitation
24,696lab-tested
AllReferência 26,738Exploit-DB 24,490GitHub PoC 18,525exploitation intelligence 11,299Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
89,220 exploits
GitHub PoC
NMinhTrung/LIFERAY-CVE-2020-7961
Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary c
100RISK
open ↗GitHub PoC★ 1
Proof of Concept for CVE-2024-20767. Arbitrary file read from Adobe ColdFusion
ColdFusion | Improper Access Control (CWE-284)
100RISK
open ↗Metasploit500
Openfire Deleted Administrator Account Authentication Bypass RCE
An issue in Ignite Realtime Openfire before 4.8.1 allows a remote attacker to escalate privileges via the admin.authoriz
36RISK
open ↗initial-access
D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection
100RISK
initial-access
D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials
100RISK
GitHub PoC★ 1
404fu/CVE-2022-26134-POC
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISK
open ↗initial-access
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISK
infoleak
ColdFusion | Improper Access Control (CWE-284)
100RISK
GitHub PoC★ 34
Exploit for CVE-2024-20767 - Adobe ColdFusion
ColdFusion | Improper Access Control (CWE-284)
100RISK
open ↗GitHub PoC★ 3
Downloaded a packet capture (.pcapng) file from malware-traffic-analysis.net which was an example of an attempted attack against a webserver using the Log4J vulnerability (CVE-2021-44228). I examined teh amount of endpoints communicating with the server and knowing jnidi as a common in the vulnerbilty found it in clear text
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
open ↗infoleak
ColdFusion | Improper Access Control (CWE-284)
100RISK
infoleak
ColdFusion | Improper Access Control (CWE-284)
100RISK
GitHub PoC★ 10
Exploit Toolkit for Adobe ColdFusion CVE-2024-20767 Vulnerability
ColdFusion | Improper Access Control (CWE-284)
100RISK
open ↗GitHub PoC★ 9
evil-winrar,CVE-2023-38831漏洞利用和社会工程学攻击框架 (evil-winrar, CVE-2023-38831 Vulnerability Exploitation and Social Engineering Attack Framework)
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RISK
open ↗GitHub PoC
Madan301/CVE-2024-2054
Artica Proxy Unauthenticated PHP Deserialization Vulnerability
85RISK
open ↗client-side
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RISK
local
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RISK
GitHub PoC★ 2
Part of my cybersecurity thesis consists in exploring and exploiting this vulnerability.
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RISK
open ↗infoleak
SQL injection in WordPress
78RISK
initial-access
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
initial-access
Nagios XI before version 5.11.3 was discovered to contain a SQL injection vulnerability via the bulk modification tool.
50RISK
GitHub PoC★ 1
exploit CVE-2021-44228
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
open ↗GitHub PoC
Nhom6KTLT/CVE-2010-3124
Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possib
28RISK
open ↗GitHub PoC★ 1
sxyrxyy/CVE-2024-1709-ConnectWise-ScreenConnect-Authentication-Bypass
Authentication bypass using an alternate path or channel
100RISK
open ↗GitHub PoC★ 2
XenoM0rph97/CVE-2024-30896
InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows aut
48RISK
open ↗initial-access
Authentication bypass using an alternate path or channel
100RISK
GitHub PoC★ 130
Windows Kernel Pool (clfs.sys) Corruption Privilege Escalation
Windows Common Log File System Driver Elevation of Privilege Vulnerability
76RISK
open ↗GitHub PoC
Practice POC scripting in Tryhackme’s intro poc scripting room (For Linux)
file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid
50RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and exploitation-intelligence sources. A public PoC existing does not mean the flaw is exploitable in your environment.