Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

78,958cataloged exploits
36,206CVEs with public exploitation
24,695lab-tested
78,324 exploits
GitHub PoC
JBoss CVE-2017-12149 (Insecure Deserialization - RCE) Exploitation Lab.
CVE-2017-12149CRITICALunder attackransomware30 May 2021
In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter
100RISK
open
VulnCheck XDB
initial-access
CVE-2021-21985CRITICALunder attackransomware29 May 2021
The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual
100RISK
open
GitHub PoC213
alt3kx/CVE-2021-21985_PoC
CVE-2021-21985CRITICALunder attackransomware29 May 2021
The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual
100RISK
open
GitHub PoC1
Script to patch your domain computers about the CVE-2021-21551. Privesc on machines that have the driver dbutil_2_3.sys, installed by some DELL tools (BIOS updater, SupportAssist...)
CVE-2021-21551HIGHunder attack28 May 2021
Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privile
100RISK
open
GitHub PoC3
My notes for CVE-2004-1561 IceCast exploitation
CVE-2004-156128 May 2021
Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with
60RISK
open
Exploit-DBVexDay Proof
PHPFusion 9.03.50 - Remote Code Execution
CVE-2020-24949webappsphp28 May 2021
Privilege escalation in PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user (not admin) to send a cr
50RISK
open
VulnCheck XDB
remote-with-credentials
CVE-2020-881328 May 2021
graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a
60RISK
open
Exploit-DB
WordPress Plugin LifterLMS 4.21.0 - Stored Cross-Site Scripting (XSS)
CVE-2021-24308webappsphp28 May 2021
LifterLMS < 4.21.1 - Authenticated Stored XSS in Edit Profile
23RISK
open
Exploit-DB
Trixbox 2.8.0.4 - 'lang' Path Traversal
CVE-2017-14537webappsphp28 May 2021
trixbox 2.8.0.4 has path traversal via the xajaxargs array parameter to /maint/index.php?packages or the lang parameter
50RISK
open
Exploit-DB
Trixbox 2.8.0.4 - 'lang' Remote Code Execution (Unauthenticated)
CVE-2017-14535webappsphp28 May 2021
trixbox 2.8.0.4 has OS command injection via shell metacharacters in the lang parameter to /maint/modules/home/index.php
50RISK
open
GitHub PoC
Proof of Concept for CVE-2020-14295.
CVE-2020-1429528 May 2021
A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead
60RISK
open
GitHub PoC1
Cacti v1.2.8 Unauthenticated Remote Code Execution
CVE-2020-881328 May 2021
graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a
60RISK
open
GitHub PoC
Detect vulns liferay CVE-2020-7961 by Nattroc (EOG Team)
CVE-2020-7961CRITICALunder attack27 May 2021
Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary c
100RISK
open
Metasploit300
Squid Proxy Range Header DoS
CVE-2021-3180727 May 2021
An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. An integer overflow problem allows a remote server to
23RISK
open
Metasploit300
Squid Proxy Range Header DoS
CVE-2021-3180627 May 2021
An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a memory-management bug, it is vulnerable to a
40RISK
open
GitHub PoC1
Multiple vulnerabilities in the vSphere Client (HTML5) were privately reported to VMware. Updates and workarounds are available to address these vulnerabilities in affected VMware products.
CVE-2021-21985CRITICALunder attackransomware27 May 2021
The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual
100RISK
open
GitHub PoC
ykg88/OHTS_IE6052-CVE-2020-17087
CVE-2020-17087HIGHunder attack27 May 2021
Windows Kernel Local Elevation of Privilege Vulnerability
71RISK
open
VulnCheck XDB
initial-access
CVE-2021-3356427 May 2021
An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to read and write
60RISK
open
Exploit-DB
Codiad 2.8.4 - Remote Code Execution (Authenticated) (3)
CVE-2018-19423webappsmultiple26 May 2021
Codiad 2.8.4 allows remote authenticated administrators to execute arbitrary code by uploading an executable file.
28RISK
open
Exploit-DBVexDay Proof
Pluck CMS 4.7.13 - File Upload Remote Code Execution (Authenticated)
CVE-2020-29607webappsphp26 May 2021
A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows an admin privileged user to gain access
35RISK
open
GitHub PoC
POC-CVE-2020-7961-Token-iterate
CVE-2020-7961CRITICALunder attack26 May 2021
Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary c
100RISK
open
Exploit-DBVexDay Proof
ProFTPd 1.3.5 - 'mod_copy' Remote Command Execution (2)
CVE-2015-3306remotelinux26 May 2021
The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and
60RISK
open
GitHub PoC
qianniaoge/CVE-2020-14882_Exploit_Gui
CVE-2020-14882CRITICALunder attack25 May 2021
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISK
open
Metasploit600
VMware vCenter Server Virtual SAN Health Check Plugin RCE
CVE-2021-21985CRITICALunder attackransomware25 May 2021
The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual
100RISK
open
VulnCheck XDB
initial-access
CVE-2021-21974HIGH25 May 2021
OpenSLP as used in ESXi (7.0 before ESXi70U1c-17325551, 6.7 before ESXi670-202102401-SG, 6.5 before ESXi650-202102101-SG
53RISK
open
VulnCheck XDB
infoleak
CVE-2021-3355825 May 2021
Boa 0.94.13 allows remote attackers to obtain sensitive information via a misconfiguration involving backup.html, previe
43RISK
open
GitHub PoC
DarkFlameMaster-bit/CVE-2018-8174_EXP
CVE-2018-8174HIGHunder attackransomware25 May 2021
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows
93RISK
open
VulnCheck XDB
initial-access
CVE-2021-3356425 May 2021
An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to read and write
60RISK
open
VulnCheck XDB
local
CVE-2021-3156HIGHunder attack25 May 2021
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RISK
open
GitHub PoC
Exploit CVE-2017-9248 Telerik ReMix from Paul Taylor's script. Exploit Telerik lastest version fixed vuln. ReMix by TinoKa & Shaco JX
CVE-2017-9248CRITICALunder attack24 May 2021
Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not
100RISK
open
previouspage 686 / 2,611next

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.