Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
89,426cataloged exploits
41,291CVEs with public exploitation
24,696lab-tested
AllReferência 26,792Exploit-DB 24,491GitHub PoC 18,666exploitation intelligence 11,309Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
89,426 exploits
GitHub PoC
h1bAna/CVE-2017-5123
Insufficient data validation in waitid allowed an user to escape sandboxes on Linux.
23RISK
open ↗local
Secure Boot Security Feature Bypass Vulnerability
33RISK
initial-access
Unauthenticated Command Injection
100RISK
GitHub PoC★ 1
Laravel RCE CVE-2021-3129
Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra
100RISK
open ↗GitHub PoC★ 1
python 2.7
[20230201] - Core - Improper access check in webservice endpoints
100RISK
open ↗infoleak
[20230201] - Core - Improper access check in webservice endpoints
100RISK
initial-access
Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra
100RISK
GitHub PoC★ 26
CVE-2023-21839工具
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t
100RISK
open ↗GitHub PoC★ 15
This is poc of CVE-2022-46169 authentication bypass and remote code execution
Unauthenticated Command Injection
100RISK
open ↗local
An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This
86RISK
GitHub PoC
FortiRecorder Denial of Service Exploit (CVE-2022-41333)
An uncontrolled resource consumption vulnerability [CWE-400] in FortiRecorder version 6.4.3 and below, 6.0.11 and below
33RISK
open ↗denial-of-service
Microsoft Word Remote Code Execution Vulnerability
70RISK
local
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
68RISK
GitHub PoC★ 11
Tomcat PUT方法任意文件写入（CVE-2017-12615）exp
When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisati
100RISK
open ↗initial-access
When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisati
100RISK
GitHub PoC★ 8
Bulk scanner + get config from CVE-2023-23752
[20230201] - Core - Improper access check in webservice endpoints
100RISK
open ↗GitHub PoC★ 4
Open Web Analytics 1.7.3 - Remote Code Execution
Open Web Analytics (OWA) before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, wh
60RISK
open ↗GitHub PoC
sei-fish/CVE-2021-22205
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati
100RISK
open ↗GitHub PoC★ 7
Mass Auto Exploit CVE-2022-4395 Unauthenticated Arbitrary File Upload
Membership For WooCommerce < 2.1.7 - Unauthenticated Arbitrary File Upload
53RISK
open ↗GitHub PoC★ 1
CVE-2022-47986: Python, Ruby, NMAP and Metasploit modules to exploit the vulnerability.
IBM Aspera Faspex code execution
100RISK
open ↗GitHub PoC★ 135
Windows LPE exploit for CVE-2022-37969
Windows Common Log File System Driver Elevation of Privilege Vulnerability
76RISK
open ↗GitHub PoC★ 3
开源，go多并发批量探测poc，准确率高
[20230201] - Core - Improper access check in webservice endpoints
100RISK
open ↗initial-access
IBM Aspera Faspex code execution
100RISK
infoleak
[20230201] - Core - Improper access check in webservice endpoints
100RISK
infoleak
[20230201] - Core - Improper access check in webservice endpoints
100RISK
local
Windows Common Log File System Driver Elevation of Privilege Vulnerability
76RISK
infoleak
Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_pas
60RISK
GitHub PoC★ 2
Tenda f3 Malformed HTTP Request Header Processing Vulnerability.
Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_pas
60RISK
open ↗local
Windows Win32k Elevation of Privilege Vulnerability
100RISK
We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and exploitation-intelligence sources. A public PoC existing does not mean the flaw is exploitable in your environment.