Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
89,277cataloged exploits
41,245CVEs with public exploitation
24,696lab-tested
AllReferência 26,769Exploit-DB 24,490GitHub PoC 18,551exploitation intelligence 11,299Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
89,277 exploits
GitHub PoC
h1n4mx0z/Research-CVE-2016-5195
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RISK
open ↗infoleak
Grafana path traversal
100RISK
GitHub PoC★ 28
CVE-2023-46604
Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack
100RISK
open ↗GitHub PoC★ 3
PoC and Writeup for CVE-2023-46404.
PCRS <= 3.11 (d0de1e) “Questions” page and “Code editor” page are vulnerable to remote code execution (RCE) by escaping
48RISK
open ↗GitHub PoC★ 4
This script exploits CVE-2023-23397, a Zero-Day vulnerability in Microsoft Outlook, allowing the generation of malicious emails for testing and educational purposes.
Microsoft Outlook Elevation of Privilege Vulnerability
100RISK
open ↗GitHub PoC
h1n4mx0/Research-CVE-2016-5195
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RISK
open ↗Metasploit600
Vinchin Backup and Recovery Command Injection
VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain hardcoded credentials.
18RISK
open ↗GitHub PoC★ 13
phankz/Worpress-CVE-2023-5360
Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload
60RISK
open ↗initial-access
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
60RISK
Metasploit600
Vinchin Backup and Recovery Command Injection
VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain a command injection vulnerability
68RISK
open ↗Metasploit600
F5 BIG-IP TMUI AJP Smuggling RCE
BIG-IP Configuration utility unauthenticated remote code execution vulnerability
100RISK
open ↗local
Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack
100RISK
infoleak
[20230201] - Core - Improper access check in webservice endpoints
100RISK
GitHub PoC
CVE-2023-5360
Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload
60RISK
open ↗initial-access
Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload
60RISK
initial-access
Microsoft Outlook Elevation of Privilege Vulnerability
100RISK
initial-access
A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message(
100RISK
initial-access
[20230201] - Core - Improper access check in webservice endpoints
100RISK
initial-access
Weaver E-Office unrestricted upload
53RISK
GitHub PoC★ 2
mr-r3b00t/CVE-2023-20198-IOS-XE-Scanner
Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS
100RISK
open ↗Metasploit300
Citrix ADC (NetScaler) Bleed Scanner
Unauthenticated sensitive information disclosure
100RISK
open ↗GitHub PoC
ohlawd/CVE-2023-20198
Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS
100RISK
open ↗Metasploit600
Mirth Connect Deserialization RCE
A remote command execution (RCE) vulnerability in NextGen Mirth Connect v4.3.0 allows attackers to execute arbitrary com
60RISK
open ↗Metasploit600
Mirth Connect Deserialization RCE
NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that
100RISK
open ↗GitHub PoC★ 1
IceBreakerCode/CVE-2023-20198
Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS
100RISK
open ↗initial-access
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
60RISK
local
Glibc: buffer overflow in ld.so leading to privilege escalation
98RISK
infoleak
Unauthenticated sensitive information disclosure
100RISK
GitHub PoC
Docs on the Vulnerability CVE-2019-1663 (Cisco Routers)
Cisco RV110W, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability
85RISK
open ↗initial-access
Unauthenticated sensitive information disclosure
100RISK
We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and exploitation-intelligence sources. A public PoC existing does not mean the flaw is exploitable in your environment.