Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
89,287cataloged exploits
41,245CVEs with public exploitation
24,696lab-tested
AllReferência 26,769Exploit-DB 24,490GitHub PoC 18,551exploitation intelligence 11,309Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
89,287 exploits
Exploit-DB
Splunk 9.0.5 - admin account take over
‘edit_user’ Capability Privilege Escalation
78RISK
open ↗GitHub PoC★ 164
LPE exploit for CVE-2023-36802
Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
76RISK
open ↗Exploit-DB
Minio 2022-07-29T19-40-48Z - Path traversal
Authenticated requests for server update admin API allows path traversal in minio
53RISK
open ↗Exploit-DB
Cacti 1.2.24 - Authenticated command injection when using SNMP options
Authenticated command injection in SNMP options of a Device
63RISK
open ↗initial-access
An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control.
60RISK
initial-access
A remote command-line injection vulnerability in the /cgi-bin/live_api.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.1
60RISK
local
Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
76RISK
initial-access
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
60RISK
Exploit-DB
Clcknshop 1.0.0 - SQL Injection
Infosoftbd Clcknshop GET Parameter all sql injection
45RISK
open ↗GitHub PoC★ 1
xiaoQ1z/CVE-2023-4911
Glibc: buffer overflow in ld.so leading to privilege escalation
98RISK
open ↗initial-access
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISK
local
Glibc: buffer overflow in ld.so leading to privilege escalation
98RISK
local
Glibc: buffer overflow in ld.so leading to privilege escalation
98RISK
initial-access
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
60RISK
initial-access
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
60RISK
denial-of-service
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISK
GitHub PoC★ 9
Utilize Tai-e to identify the Log4shell (a.k.a. CVE-2021-44228) Vulnerability
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
open ↗GitHub PoC★ 3
CVE-2023-41892 - Craft CMS Remote Code Execution (RCE)
Craft CMS Remote Code Execution vulnerability
85RISK
open ↗GitHub PoC★ 79
Scanner for CVE-2023-22515 - Broken Access Control Vulnerability in Atlassian Confluence
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISK
open ↗local
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RISK
client-side
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remo
83RISK
GitHub PoC
Trinadh465/platform_external_libvpx_v1.4.0_CVE-2023-5217
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remo
83RISK
open ↗initial-access
Craft CMS Remote Code Execution vulnerability
85RISK
GitHub PoC
Trinadh465/platform_external_libvpx_v1.8.0_CVE-2023-5217
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remo
83RISK
open ↗GitHub PoC★ 16
A PoC to trigger CVE-2023-5217 from the Browser WebCodecs or MediaRecorder interface.
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remo
83RISK
open ↗GitHub PoC
CVE-2021-3560 Bypass su - root
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RISK
open ↗GitHub PoC
whoamins/CVE-2023-42793
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
100RISK
open ↗initial-access
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
100RISK
GitHub PoC★ 21
A tool for finding vulnerable libwebp(CVE-2023-4863)
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to
93RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and exploitation-intelligence sources. A public PoC existing does not mean the flaw is exploitable in your environment.