Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
89,220cataloged exploits
41,197CVEs with public exploitation
24,696lab-tested
AllReferência 26,738Exploit-DB 24,490GitHub PoC 18,525exploitation intelligence 11,299Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
89,220 exploits
initial-access
Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution
100RISK
initial-access
Apache Struts: File upload component had a directory traversal vulnerability
45RISK
GitHub PoC
ZhiQiAnSecFork/DirtyCOW_CVE-2016-5195
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RISK
open ↗GitHub PoC
Remote Code Execution exploit for PrimeFaces 5.x - EL Injection (CVE-2017-1000486)
Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution
100RISK
open ↗GitHub PoC★ 13
A PoC exploit for CVE-2023-32315 - Openfire Authentication Bypass
Openfire administration console authentication bypass
100RISK
open ↗initial-access
Pre-auth RCE in Apache Ofbiz 18.12.09 due to XML-RPC still present
60RISK
GitHub PoC
CVE-2022-4047 poc
Return Refund and Exchange For WooCommerce < 4.0.9 - Unauthenticated Arbitrary File Upload
48RISK
open ↗GitHub PoC★ 5
Exihibitor Web Ui 1.7.1 RCE, CVE-2019-5029
An exploitable command injection vulnerability exists in the Config editor of the Exhibitor Web UI versions 1.0.9 to 1.7
60RISK
open ↗GitHub PoC★ 2
SQL Injection in 3CX CRM Integration
The CRM Integration in 3CX before 18.0.9.23 and 20 before 20.0.0.1494 allows SQL Injection via a first name, search stri
48RISK
open ↗GitHub PoC★ 1
imperva/CVE-2023-22524
Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An att
53RISK
open ↗GitHub PoC★ 25
Atlassian Companion RCE Vulnerability Proof of Concept
Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An att
53RISK
open ↗initial-access
[20230201] - Core - Improper access check in webservice endpoints
100RISK
local
Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks
56RISK
GitHub PoC★ 87
Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution
Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution
85RISK
open ↗local
On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlay
61RISK
GitHub PoC
CVE-2023-23752 Joomla Unauthenticated Information Disclosure
[20230201] - Core - Improper access check in webservice endpoints
100RISK
open ↗GitHub PoC
mareks1007/cve-2017-16995
The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial
50RISK
open ↗initial-access
Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution
85RISK
initial-access
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera
100RISK
GitHub PoC
RCE for Webmin CVE-2019-15107
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera
100RISK
open ↗local
Netlogon Elevation of Privilege Vulnerability
100RISK
GitHub PoC★ 1
CVE-2023-38831 Proof-of-concept code
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RISK
open ↗infoleak
mod_proxy SSRF
100RISK
client-side
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RISK
GitHub PoC
hadrian3689/CVE-2023-23752_Joomla
[20230201] - Core - Improper access check in webservice endpoints
100RISK
open ↗initial-access
Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS
100RISK
Metasploit600
WordPress Backup Migration Plugin PHP Filter Chain RCE
Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution
85RISK
open ↗GitHub PoC★ 2
Cisco CVE-2023-20198
Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS
100RISK
open ↗local
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RISK
We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and exploitation-intelligence sources. A public PoC existing does not mean the flaw is exploitable in your environment.