Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

89,426cataloged exploits
41,291CVEs with public exploitation
24,696lab-tested
AllReferência 26,792Exploit-DB 24,491GitHub PoC 18,666exploitation intelligence 11,309Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
89,426 exploits
GitHub PoC★ 1
Repo for CVE-2022-46169
CVE-2022-46169CRITICALunder attack20 Mar 2023
Unauthenticated Command Injection
100RISK
open ↗
infoleak
CVE-2022-24716HIGH19 Mar 2023
Path traversal in Icinga Web 2
78RISK
GitHub PoC★ 1
Custom exploit written for enumerating usernames as per CVE-2016-6210
CVE-2016-6210MEDIUM19 Mar 2023
sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static
70RISK
open ↗
client-side
CVE-2023-23397CRITICALunder attack19 Mar 2023
Microsoft Outlook Elevation of Privilege Vulnerability
100RISK
local
CVE-2023-22809HIGH19 Mar 2023
In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environmen
68RISK
GitHub PoC★ 2
ahmedkhlief/CVE-2023-23397-POC-Using-Interop-Outlook
CVE-2023-23397CRITICALunder attack19 Mar 2023
Microsoft Outlook Elevation of Privilege Vulnerability
100RISK
open ↗
GitHub PoC★ 1
CVE-2023-23397 C# PoC
CVE-2023-23397CRITICALunder attack18 Mar 2023
Microsoft Outlook Elevation of Privilege Vulnerability
100RISK
open ↗
GitHub PoC★ 9
djackreuter/CVE-2023-23397-PoC
CVE-2023-23397CRITICALunder attack18 Mar 2023
Microsoft Outlook Elevation of Privilege Vulnerability
100RISK
open ↗
GitHub PoC★ 73
POC for Veeam Backup and Replication CVE-2023-27532
CVE-2023-27532HIGHunder attackransomware18 Mar 2023
Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database
93RISK
open ↗
initial-access
CVE-2021-25094—18 Mar 2023
Tatsu < 3.3.12 - Unauthenticated RCE
60RISK
infoleak
CVE-2023-27532HIGHunder attackransomware18 Mar 2023
Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database
93RISK
info-leak
CVE-2021-31602MEDIUM18 Mar 2023
An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. The
60RISK
client-side
CVE-2023-23397CRITICALunder attack18 Mar 2023
Microsoft Outlook Elevation of Privilege Vulnerability
100RISK
initial-access
CVE-2022-22963CRITICALunder attack18 Mar 2023
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po
100RISK
GitHub PoC★ 24
CVE-2022-22963 is a vulnerability in the Spring Cloud Function Framework for Java that allows remote code execution. This python script will verify if the vulnerability exists, and if it does, will give you a reverse shell.
CVE-2022-22963CRITICALunder attack18 Mar 2023
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po
100RISK
open ↗
Metasploit600
pfSense Restore RRD Data Command Injection
CVE-2023-27253—18 Mar 2023
A command injection vulnerability in the function restore_rrddata() of Netgate pfSense v2.7.0 allows authenticated attac
60RISK
open ↗
GitHub PoC★ 1
This script exploits a vulnerability (CVE-2021-25094) in the TypeHub WordPress plugin.
CVE-2021-25094—18 Mar 2023
Tatsu < 3.3.12 - Unauthenticated RCE
60RISK
open ↗
client-side
CVE-2023-23397CRITICALunder attack17 Mar 2023
Microsoft Outlook Elevation of Privilege Vulnerability
100RISK
infoleak
CVE-2023-23397CRITICALunder attack17 Mar 2023
Microsoft Outlook Elevation of Privilege Vulnerability
100RISK
local
CVE-2021-22555HIGHunder attack17 Mar 2023
Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE
100RISK
client-side
CVE-2023-23397CRITICALunder attack17 Mar 2023
Microsoft Outlook Elevation of Privilege Vulnerability
100RISK
GitHub PoC★ 6
Exploit POC for CVE-2023-23397
CVE-2023-23397CRITICALunder attack17 Mar 2023
Microsoft Outlook Elevation of Privilege Vulnerability
100RISK
open ↗
GitHub PoC★ 7
Generates meeting requests taking advantage of CVE-2023-23397. This requires the outlook thick client to send.
CVE-2023-23397CRITICALunder attack17 Mar 2023
Microsoft Outlook Elevation of Privilege Vulnerability
100RISK
open ↗
GitHub PoC
CVE-2023-23397 Remediation Script (Powershell)
CVE-2023-23397CRITICALunder attack17 Mar 2023
Microsoft Outlook Elevation of Privilege Vulnerability
100RISK
open ↗
GitHub PoC
h3x0v3rl0rd/CVE-2016-1531
CVE-2016-1531—17 Mar 2023
Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perl_startup argument.
38RISK
open ↗
GitHub PoC★ 3
CVE-2023-23397 - Microsoft Outlook Vulnerability
CVE-2023-23397CRITICALunder attack16 Mar 2023
Microsoft Outlook Elevation of Privilege Vulnerability
100RISK
open ↗
GitHub PoC★ 1
j0eyv/CVE-2023-23397
CVE-2023-23397CRITICALunder attack16 Mar 2023
Microsoft Outlook Elevation of Privilege Vulnerability
100RISK
open ↗
GitHub PoC★ 346
api0cradle/CVE-2023-23397-POC-Powershell
CVE-2023-23397CRITICALunder attack16 Mar 2023
Microsoft Outlook Elevation of Privilege Vulnerability
100RISK
open ↗
GitHub PoC★ 39
Simple PoC in PowerShell for CVE-2023-23397
CVE-2023-23397CRITICALunder attack16 Mar 2023
Microsoft Outlook Elevation of Privilege Vulnerability
100RISK
open ↗
GitHub PoC★ 4
Python script to create a message with the vulenrability properties set
CVE-2023-23397CRITICALunder attack16 Mar 2023
Microsoft Outlook Elevation of Privilege Vulnerability
100RISK
open ↗
← previouspage 732 / 2,981next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and exploitation-intelligence sources. A public PoC existing does not mean the flaw is exploitable in your environment.