Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
89,426cataloged exploits
41,291CVEs with public exploitation
24,696lab-tested
AllReferência 26,792Exploit-DB 24,491GitHub PoC 18,666exploitation intelligence 11,309Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
89,426 exploits
initial-access
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati
100RISK
GitHub PoC
sz-guanx/CVE-2021-32305
WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search paramet
60RISK
open ↗GitHub PoC★ 16
nmap detection scripts for CVE-2022-45477, CVE-2022-45479, CVE-2022-45482, CVE-2022-45481
Telepad allows remote unauthenticated users to send instructions to the server to execute arbitrary code without any pre
48RISK
open ↗GitHub PoC★ 3
PoC for CVE-2022-39952 affecting Fortinet FortiNAC.
A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8
85RISK
open ↗GitHub PoC★ 7
CVE analysis for CVE-2023-0669
Fortra GoAnywhere MFT License Response Servlet Command Injection
100RISK
open ↗initial-access
A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8
85RISK
local
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RISK
GitHub PoC
orsuprasad/CVE-2022-0847-DirtyPipe-Exploits
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RISK
open ↗local
KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configuration file,
23RISK
GitHub PoC★ 2
yilin1203/CVE-2022-40881
SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php
75RISK
open ↗initial-access
SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php
75RISK
GitHub PoC
JonPichel/CVE-2017-7358
In LightDM through 1.22.0, a directory traversal issue in debian/guest-account.sh allows local attackers to own arbitrar
23RISK
open ↗infoleak
[20230201] - Core - Improper access check in webservice endpoints
100RISK
GitHub PoC★ 37
Joomla! Core 1.5.0 - 3.9.4 - Directory Traversal / Authenticated Arbitrary File Deletion in Python3
An issue was discovered in Joomla! before 3.9.5. The Media Manager component does not properly sanitize the folder param
35RISK
open ↗GitHub PoC★ 19
simple program for joomla CVE-2023-23752 scanner for pentesting and educational purpose
[20230201] - Core - Improper access check in webservice endpoints
100RISK
open ↗GitHub PoC★ 115
Weblogic CVE-2023-21839 RCE (无需Java依赖一键RCE)
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t
100RISK
open ↗Metasploit600
ZoneMinder Snapshots Command Injection
ZoneMinder vulnerable to Missing Authorization
58RISK
open ↗GitHub PoC
3ndorph1n/CVE-2021-42756
Multiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5.x all versions, 6.0.7 a
60RISK
open ↗GitHub PoC★ 1
CVE-2023-23752 poc
[20230201] - Core - Improper access check in webservice endpoints
100RISK
open ↗infoleak
[20230201] - Core - Improper access check in webservice endpoints
100RISK
infoleak
[20230201] - Core - Improper access check in webservice endpoints
100RISK
denial-of-service
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0
100RISK
infoleak
[20230201] - Core - Improper access check in webservice endpoints
100RISK
GitHub PoC★ 4
CVE-2023-23752 Joomla 未授权访问漏洞 poc
[20230201] - Core - Improper access check in webservice endpoints
100RISK
open ↗GitHub PoC★ 109
POC code to exploit the Heap overflow in Fortinet's SSLVPN daemon
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0
100RISK
open ↗initial-access
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
GitHub PoC★ 2
Oracle E-BS CVE-2022-21587 Exploit
Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload).
100RISK
open ↗GitHub PoC
Sumitpathania03/Drupal-cve-2019-6340
Drupal core - Highly critical - Remote Code Execution
100RISK
open ↗initial-access
A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8
85RISK
We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and exploitation-intelligence sources. A public PoC existing does not mean the flaw is exploitable in your environment.