Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
89,287cataloged exploits
41,245CVEs with public exploitation
24,696lab-tested
AllReferência 26,769Exploit-DB 24,490GitHub PoC 18,551exploitation intelligence 11,309Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
89,287 exploits
GitHub PoC★ 56
Proof of concept for DoS exploit
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISK
open ↗GitHub PoC★ 56
Proof of concept for DoS exploit
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISK
open ↗initial-access
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
60RISK
GitHub PoC
Security Vulnerability - Kardex Mlog MCC
Kardex Mlog MCC 5.7.12+0-a203c2a213-master allows remote code execution. It spawns a web interface listening on port 808
53RISK
open ↗initial-access
Campcodes Coffee Shop POS System manage_user.php sql injection
33RISK
denial-of-service
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISK
GitHub PoC★ 5
CVE-2023-22515 - Broken Access Control Vulnerability in Confluence Data Center and Server
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISK
open ↗GitHub PoC★ 110
Confluence未授权添加管理员用户(CVE-2023-22515)漏洞利用工具
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISK
open ↗initial-access
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
60RISK
initial-access
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
60RISK
GitHub PoC★ 248
Basic vulnerability scanning to see if web servers may be vulnerable to CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISK
open ↗GitHub PoC
Openfire未授权到RCE(CVE-2023-32315)复现
Openfire administration console authentication bypass
100RISK
open ↗GitHub PoC★ 29
hadrian3689/looney-tunables-CVE-2023-4911
Glibc: buffer overflow in ld.so leading to privilege escalation
98RISK
open ↗GitHub PoC★ 2
Recreation of the SharePoint PoC for CVE-2023-29357 in C# from LuemmelSec
Microsoft SharePoint Server Elevation of Privilege Vulnerability
100RISK
open ↗initial-access
Apache ShenYu Admin bypass JWT authentication
50RISK
denial-of-service
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISK
local
Glibc: buffer overflow in ld.so leading to privilege escalation
98RISK
local
Glibc: buffer overflow in ld.so leading to privilege escalation
98RISK
GitHub PoC
Apache Superset 默认SECRET_KEY 漏洞(CVE-2023-27524)
Apache Superset: Session validation vulnerability when using provided default SECRET_KEY
100RISK
open ↗initial-access
Apache Superset: Session validation vulnerability when using provided default SECRET_KEY
100RISK
initial-access
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISK
initial-access
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISK
GitHub PoC★ 1
WebAccess远程命令执行漏洞(CVE-2017-16720)复现
A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier. An attacker has access to files within th
35RISK
open ↗GitHub PoC★ 153
CVE-2023-22515: Confluence Broken Access Control Exploit
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISK
open ↗GitHub PoC★ 8
Poc for CVE-2023-22515
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISK
open ↗Exploit-DB
BoidCMS v2.0.0 - authenticated file upload vulnerability
File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code by adding a GIF header t
60RISK
open ↗Exploit-DB
Media Library Assistant Wordpress Plugin - RCE and LFI
Media Library Assistant <= 3.09 - Unauthenticated Local/Remote File Inclusion & Remote Code Execution
85RISK
open ↗Exploit-DB
Splunk 9.0.5 - admin account take over
‘edit_user’ Capability Privilege Escalation
78RISK
open ↗Exploit-DB
Cacti 1.2.24 - Authenticated command injection when using SNMP options
Authenticated command injection in SNMP options of a Device
63RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and exploitation-intelligence sources. A public PoC existing does not mean the flaw is exploitable in your environment.