Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

78,137cataloged exploits

35,961CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,458Referência 22,657GitHub PoC 14,424VulnCheck XDB 8,773Nuclei 4,340Metasploit 3,485✓ verified onlyrecent popular risk

78,056 exploits

GitHub PoC★ 85

Log4j 漏洞本地检测脚本。 Scan all java processes on your host to check whether it's affected by log4j2 remote code execution vulnerability (CVE-2021-45046)

CVE-2021-45046CRITICALunder attackransomware20 Dec 2021

Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack

100RISK

VulnCheck XDB

initial-access

CVE-2019-0708CRITICALunder attackransomware20 Dec 2021

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau

100RISK

GitHub PoC

offensity/CVE-2019-0708

CVE-2019-0708CRITICALunder attackransomware20 Dec 2021

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau

100RISK

VulnCheck XDB

initial-access

CVE-2021-44228CRITICALunder attackransomware20 Dec 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

GitHub PoC★ 38

log4j2 RCE漏洞（CVE-2021-44228)内网扫描器，可用于在不出网的条件下进行漏洞扫描，帮助企业内部快速发现Log4jShell漏洞。

CVE-2021-44228CRITICALunder attackransomware20 Dec 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

GitHub PoC

intel-xeon/CVE-2021-44228---detection-with-PowerShell

CVE-2021-44228CRITICALunder attackransomware20 Dec 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

GitHub PoC★ 2

Windows Batch Scrip to Fix the log4j-issue-CVE-2021-44228

CVE-2021-44228CRITICALunder attackransomware20 Dec 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

GitHub PoC

bumheehan/cve-2021-44228-log4j-test

CVE-2021-44228CRITICALunder attackransomware20 Dec 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

GitHub PoC

a project written in go and java i abandoned for CVE-2021-44228 try to fix it if you can XD

CVE-2021-44228CRITICALunder attackransomware20 Dec 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

GitHub PoC★ 2

Script en bash que permite identificar la vulnerabilidad Log4j CVE-2021-44228 de forma remota.

CVE-2021-44228CRITICALunder attackransomware20 Dec 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

GitHub PoC★ 5

Vulnerable web application to test CVE-2021-44228 / log4shell and forensic artifacts from an example attack

CVE-2021-44228CRITICALunder attackransomware20 Dec 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

GitHub PoC★ 2

log4j2 Log4Shell CVE-2021-44228 proof of concept

CVE-2021-44228CRITICALunder attackransomware20 Dec 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

GitHub PoC★ 1

Bash que instala los sploit CVE-2017-0781 y CVE-2017-0785 y lo necesario para su usos.

CVE-2017-0781—20 Dec 2021

A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1

28RISK

VulnCheck XDB

local

CVE-2018-3639MEDIUM20 Dec 2021

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addres

45RISK

VulnCheck XDB

local

CVE-2021-3156HIGHunder attack20 Dec 2021

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RISK

VulnCheck XDB

client-side

CVE-2021-40444HIGHunder attackransomware19 Dec 2021

Microsoft MSHTML Remote Code Execution Vulnerability

100RISK

GitHub PoC★ 103

Exploiting CVE-2021-44228 in vCenter for remote code execution and more.

CVE-2021-44228CRITICALunder attackransomware19 Dec 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

GitHub PoC★ 8

A Proof of Concept of the Log4j vulnerabilities (CVE-2021-44228) over Java-RMI

CVE-2021-44228CRITICALunder attackransomware19 Dec 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

GitHub PoC

kkyehit/log4j_CVE-2021-44228

CVE-2021-44228CRITICALunder attackransomware19 Dec 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

GitHub PoC★ 65

CVE-2021-40444

CVE-2021-40444HIGHunder attackransomware19 Dec 2021

Microsoft MSHTML Remote Code Execution Vulnerability

100RISK

GitHub PoC★ 1

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

CVE-2021-44228CRITICALunder attackransomware19 Dec 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

GitHub PoC★ 7

Demo to show how Log4Shell / CVE-2021-44228 vulnerability works

CVE-2021-44228CRITICALunder attackransomware19 Dec 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

GitHub PoC★ 5

Identifying all log4j components across on local windows servers. CVE-2021-44228

CVE-2021-44228CRITICALunder attackransomware19 Dec 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

GitHub PoC★ 4

Vulnerability analysis, patch management and exploitation tool forCVE-2021-44228 / CVE-2021-45046 / CVE-2021-4104

CVE-2021-44228CRITICALunder attackransomware19 Dec 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

GitHub PoC★ 1

An Inspec profile to check for Log4j CVE-2021-44228 and CVE-2021-45046

CVE-2021-44228CRITICALunder attackransomware19 Dec 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

VulnCheck XDB

initial-access

CVE-2020-5902CRITICALunder attackransomware19 Dec 2021

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

VulnCheck XDB

initial-access

CVE-2021-44228CRITICALunder attackransomware19 Dec 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

GitHub PoC★ 194

shmilylty/cve-2021-22005-exp

CVE-2021-22005CRITICALunder attackransomware18 Dec 2021

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with netw

100RISK

GitHub PoC

Log4Shell (CVE-2021-44228) docker lab

CVE-2021-44228CRITICALunder attackransomware18 Dec 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

VulnCheck XDB

initial-access

CVE-2021-22005CRITICALunder attackransomware18 Dec 2021

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with netw

100RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.