Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
89,426cataloged exploits
41,291CVEs with public exploitation
24,696lab-tested
AllReferência 26,792Exploit-DB 24,491GitHub PoC 18,666exploitation intelligence 11,309Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
89,426 exploits
GitHub PoC★ 3
CVE-2023-23397 - Microsoft Outlook Vulnerability
Microsoft Outlook Elevation of Privilege Vulnerability
100RISK
open ↗GitHub PoC
Automate JWT Exploit (CVE-2018-0114)
A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker
35RISK
open ↗infoleak
Microsoft Outlook Elevation of Privilege Vulnerability
100RISK
GitHub PoC★ 39
Simple PoC in PowerShell for CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
100RISK
open ↗initial-access
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0
100RISK
GitHub PoC★ 7
FortiOS buffer overflow vulnerability
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0
100RISK
open ↗GitHub PoC★ 2
Proof of concept exploit code for CVE-2020-7388, an unauthenticated RCE as SYSTEM on Sage X3's AdxDSrv Service
Sage X3 AdxAdmin Unauthenticated Command Execution Bypass by Spoofing
75RISK
open ↗initial-access
Windows Network File System Remote Code Execution Vulnerability
70RISK
GitHub PoC★ 15
Windows Network File System Remote exploit for CVE-2022-30136
Windows Network File System Remote Code Execution Vulnerability
70RISK
open ↗initial-access
Kyocera Net View Address Book Exposure
61RISK
GitHub PoC★ 159
Exploit for the CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
100RISK
open ↗infoleak
Microsoft Outlook Elevation of Privilege Vulnerability
100RISK
initial-access
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
GitHub PoC
Batch scanning site.
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Path Traversal Vulnerability
85RISK
open ↗initial-access
Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults
60RISK
infoleak
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Path Traversal Vulnerability
85RISK
local
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
GitHub PoC★ 1
Implementation of FOLLINA-CVE-2022-30190
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗Metasploit600
Adobe ColdFusion Unauthenticated Remote Code Execution
Adobe ColdFusion Improper Access Control Arbitrary code execution
100RISK
open ↗Metasploit300
Dolibarr 16 pre-auth contact database dump
An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's
23RISK
open ↗GitHub PoC★ 3
An educational Proof of Concept for the Log4j Vulnerability (CVE-2021-44228) in Minecraft
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
open ↗Metasploit600
Lexmark Device Embedded Web Server RCE
Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4).
68RISK
open ↗GitHub PoC★ 1
Syd-SydneyJr/CVE-2021-45010
A path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager before 2.4.7
45RISK
open ↗Metasploit600
PaperCut PaperCutNG Authentication Bypass
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Bui
100RISK
open ↗initial-access
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po
100RISK
GitHub PoC★ 4
CVE-2022-22963 RCE PoC in python
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po
100RISK
open ↗initial-access
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP c
100RISK
GitHub PoC★ 4
A Tool for scanning CVE-2017-9841 with multithread
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP c
100RISK
open ↗GitHub PoC★ 1
Demonstrable Proof of Concept Exploit for Spring4Shell Vulnerability (CVE-2022-22965)
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISK
open ↗GitHub PoC★ 26
CVE-2023-21839工具
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t
100RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and exploitation-intelligence sources. A public PoC existing does not mean the flaw is exploitable in your environment.