Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

89,340cataloged exploits
41,245CVEs with public exploitation
24,696lab-tested
AllReferência 26,769Exploit-DB 24,491GitHub PoC 18,603exploitation intelligence 11,309Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
89,340 exploits
GitHub PoC★ 5
Proof of concept script to check if the site is vulnerable to CVE-2023-35078
CVE-2023-35078CRITICALunder attackransomware29 Jul 2023
An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or re
100RISK
open ↗
infoleak
CVE-2023-35078CRITICALunder attackransomware29 Jul 2023
An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or re
100RISK
Exploit-DB
mooDating 1.2 - Reflected Cross-site scripting (XSS)
CVE-2023-3844LOWwebappsphp28 Jul 2023
mooSocial mooDating URL friends cross site scripting
43RISK
open ↗
Exploit-DB
mooDating 1.2 - Reflected Cross-site scripting (XSS)
CVE-2023-3845LOWwebappsphp28 Jul 2023
mooSocial mooDating URL ajax_invite cross site scripting
43RISK
open ↗
Exploit-DB
mooDating 1.2 - Reflected Cross-site scripting (XSS)
CVE-2023-3849LOWwebappsphp28 Jul 2023
mooSocial mooDating URL find-a-match cross site scripting
43RISK
open ↗
Exploit-DB
Keeper Security desktop 16.10.2 & Browser Extension 16.5.4 - Password Dumping
CVE-2023-36266—localmultiple28 Jul 2023
An issue was discovered in Keeper Password Manager for Desktop version 16.10.2 (fixed in 17.2), and the KeeperFill Brows
23RISK
open ↗
local
CVE-2021-4034HIGHunder attackransomware28 Jul 2023
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
Exploit-DB
mooDating 1.2 - Reflected Cross-site scripting (XSS)
CVE-2023-3843LOWwebappsphp28 Jul 2023
mooSocial mooDating URL question cross site scripting
43RISK
open ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin AN_Gradebook 5.0.1 - SQLi
CVE-2023-2636—webappsphp28 Jul 2023
AN_GradeBook <= 5.0.1 - Subscriber+ SQLi
23RISK
open ↗
initial-access
CVE-2023-38646—28 Jul 2023
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
60RISK
Exploit-DB✓ VexDay Proof
copyparty v1.8.6 - Reflected Cross Site Scripting (XSS)
CVE-2023-38501MEDIUMwebappspython28 Jul 2023
copyparty vulnerable to reflected cross-site scripting via k304 parameter
48RISK
open ↗
Exploit-DB
mooDating 1.2 - Reflected Cross-site scripting (XSS)
CVE-2023-3847LOWwebappsphp28 Jul 2023
mooSocial mooDating URL users cross site scripting
43RISK
open ↗
Exploit-DB
mooDating 1.2 - Reflected Cross-site scripting (XSS)
CVE-2023-3848LOWwebappsphp28 Jul 2023
mooSocial mooDating URL view cross site scripting
43RISK
open ↗
Exploit-DB✓ VexDay Proof
RosarioSIS 10.8.4 - CSV Injection
CVE-2023-29918MEDIUMwebappsphp28 Jul 2023
RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module.
33RISK
open ↗
GitHub PoC
JohnGilbert57/CVE-2021-4034-Capture-the-flag
CVE-2021-4034HIGHunder attackransomware28 Jul 2023
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 2
ridsoliveira/Fix-CVE-2023-36884
CVE-2023-36884HIGHunder attackransomware28 Jul 2023
Windows Search Remote Code Execution Vulnerability
93RISK
open ↗
GitHub PoC★ 18
Voyag3r-Security/CVE-2023-1389
CVE-2023-1389HIGHunder attack28 Jul 2023
TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability i
100RISK
open ↗
Exploit-DB
mooDating 1.2 - Reflected Cross-site scripting (XSS)
CVE-2023-3846LOWwebappsphp28 Jul 2023
mooSocial mooDating URL pages cross site scripting
43RISK
open ↗
GitHub PoC★ 1
Exploit for the vulnerability of Ultimate Member Plugin.
CVE-2023-3460—27 Jul 2023
Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation
60RISK
open ↗
initial-access
CVE-2021-3129CRITICALunder attackransomware27 Jul 2023
Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra
100RISK
GitHub PoC★ 2
CVE-2021-3129 | Laravel Debug Mode Vulnerability
CVE-2021-3129CRITICALunder attackransomware27 Jul 2023
Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra
100RISK
open ↗
initial-access
CVE-2023-3460—27 Jul 2023
Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation
60RISK
infoleak
CVE-2023-37474HIGH27 Jul 2023
Path traversal in copyparty
68RISK
initial-access
CVE-2023-46747CRITICALunder attackransomware27 Jul 2023
BIG-IP Configuration utility unauthenticated remote code execution vulnerability
100RISK
client-side
CVE-2023-27163MEDIUM26 Jul 2023
request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baske
48RISK
client-side
CVE-2023-27163MEDIUM26 Jul 2023
request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baske
48RISK
GitHub PoC
simple program for joomla scanner CVE-2023-23752 with target list
CVE-2023-23752MEDIUMunder attack26 Jul 2023
[20230201] - Core - Improper access check in webservice endpoints
100RISK
open ↗
GitHub PoC
Laravel RCE (CVE-2021-3129)
CVE-2021-3129CRITICALunder attackransomware26 Jul 2023
Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra
100RISK
open ↗
Metasploit300
GameOver(lay) Privilege Escalation and Container Escape
CVE-2023-32629HIGH26 Jul 2023
Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks
56RISK
open ↗
Metasploit300
GameOver(lay) Privilege Escalation and Container Escape
CVE-2023-2640HIGH26 Jul 2023
On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlay
61RISK
open ↗
← previouspage 693 / 2,978next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and exploitation-intelligence sources. A public PoC existing does not mean the flaw is exploitable in your environment.