Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
89,287cataloged exploits
41,245CVEs with public exploitation
24,696lab-tested
AllReferência 26,769Exploit-DB 24,490GitHub PoC 18,551exploitation intelligence 11,309Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
89,287 exploits
infoleak
Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a
60RISK
initial-access
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
100RISK
GitHub PoC
whoamins/CVE-2023-42793
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
100RISK
open ↗Metasploit600
Atlassian Confluence Unauthenticated Remote Code Execution
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISK
open ↗Metasploit300
Atlassian Confluence Data Center and Server Authentication Bypass via Broken Access Control
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISK
open ↗GitHub PoC★ 15
https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt
Glibc: buffer overflow in ld.so leading to privilege escalation
98RISK
open ↗GitHub PoC★ 167
CVE-2023-4911 proof of concept
Glibc: buffer overflow in ld.so leading to privilege escalation
98RISK
open ↗GitHub PoC★ 393
PoC for CVE-2023-4911
Glibc: buffer overflow in ld.so leading to privilege escalation
98RISK
open ↗local
Glibc: buffer overflow in ld.so leading to privilege escalation
98RISK
local
Glibc: buffer overflow in ld.so leading to privilege escalation
98RISK
local
Glibc: buffer overflow in ld.so leading to privilege escalation
98RISK
infoleak
MasterStudy LMS < 2.7.6 - Unauthenticated Admin Account Creation
60RISK
GitHub PoC
Checker for CVE-2022-0441
MasterStudy LMS < 2.7.6 - Unauthenticated Admin Account Creation
60RISK
open ↗Metasploit600
PyTorch Model Server Registration and Deserialization RCE
Remote Code execution in SnakeYAML
78RISK
open ↗Metasploit600
PyTorch Model Server Registration and Deserialization RCE
TorchServe Server-Side Request Forgery
75RISK
open ↗Metasploit600
Glibc Tunables Privilege Escalation CVE-2023-4911 (aka Looney Tunables)
Glibc: buffer overflow in ld.so leading to privilege escalation
98RISK
open ↗GitHub PoC★ 4
CVE-2023-36845 PoC script automates the PoC for CVE-2023-36845 targeting Juniper Networks Junos OS's J-Web component on EX and SRX Series devices. It exploits a PHP flaw, allowing remote modification of the PHPRC variable. Successful exploitation can lead to code injection and execution.
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RISK
open ↗GitHub PoC★ 1
Analysis of WS_FTP CVE
WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability
100RISK
open ↗local
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
68RISK
remote-with-credentials
Zoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the host machine.
46RISK
GitHub PoC★ 39
A tool that checks if a TorchServe instance is vulnerable to CVE-2023-43654
TorchServe Server-Side Request Forgery
75RISK
open ↗infoleak
TorchServe Server-Side Request Forgery
75RISK
initial-access
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RISK
infoleak
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RISK
GitHub PoC★ 1
simrotion13/CVE-2023-36845
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RISK
open ↗local
Hangzhou Shunwang Rentdrv2 before 2024-12-24 allows local users to terminate EDR processes and possibly have unspecified
28RISK
GitHub PoC★ 54
LuemmelSec/CVE-2023-29357
Microsoft SharePoint Server Elevation of Privilege Vulnerability
100RISK
open ↗GitHub PoC★ 6
Find Electron Apps Vulnerable to CVE-2023-4863 / CVE-2023-5129
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to
93RISK
open ↗initial-access
ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation
75RISK
GitHub PoC★ 6
navreet1425/CVE-2021-34621
ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation
75RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and exploitation-intelligence sources. A public PoC existing does not mean the flaw is exploitable in your environment.