Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

79,107cataloged exploits
36,322CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,464Referência 22,936GitHub PoC 15,010VulnCheck XDB 8,846Nuclei 4,361Metasploit 3,490✓ verified onlyrecentpopularrisk
79,107 exploits
GitHub PoC
datntsec/CVE-2019-13272
CVE-2019-13272HIGHunder attack19 Oct 2020
In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a proce
98RISK
open ↗
Exploit-DB
HiSilicon Video Encoders - RCE via unauthenticated command injection
CVE-2020-24217—webappshardware19 Oct 2020
An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. The file-upload endpo
35RISK
open ↗
GitHub PoC
Exploits CuteNews 2.1.2 via poor file upload checks used when uploading an avatar image leading to RCE.
CVE-2019-11447—18 Oct 2020
An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload proce
35RISK
open ↗
VulnCheck XDB
remote-with-credentials
CVE-2019-11447—18 Oct 2020
An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload proce
35RISK
open ↗
GitHub PoC
stealth-ronin/CVE-2017-0199-PY-KIT
CVE-2017-0199HIGHunder attackransomware18 Oct 2020
Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Window
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2020-1472MEDIUMunder attackransomware17 Oct 2020
Netlogon Elevation of Privilege Vulnerability
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-7961CRITICALunder attack17 Oct 2020
Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary c
100RISK
open ↗
GitHub PoC★ 5
C# Vulnerability Checker for CVE-2020-1472 Aka Zerologon
CVE-2020-1472MEDIUMunder attackransomware17 Oct 2020
Netlogon Elevation of Privilege Vulnerability
100RISK
open ↗
Exploit-DB
Seat Reservation System 1.0 - Unauthenticated SQL Injection
CVE-2020-25762—webappsphp16 Oct 2020
An issue was discovered in SourceCodester Seat Reservation System 1.0. The file admin_class.php does not perform input v
28RISK
open ↗
GitHub PoC★ 1
Converted with tweaks from a metasploit module as an exercise for OSCP studying and exploit development
CVE-2015-3306—16 Oct 2020
The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and
60RISK
open ↗
VulnCheck XDB
infoleak
CVE-2020-1938CRITICALunder attack16 Oct 2020
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2015-1635CRITICALunder attack16 Oct 2020
HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold an
100RISK
open ↗
GitHub PoC
Check for events that indicate non compatible devices -> CVE-2020-1472
CVE-2020-1472MEDIUMunder attackransomware15 Oct 2020
Netlogon Elevation of Privilege Vulnerability
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2019-15107CRITICALunder attackransomware15 Oct 2020
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera
100RISK
open ↗
GitHub PoC★ 3
CVE-2019–15107 - Unauthenticated RCE Webmin <=1.920
CVE-2019-15107CRITICALunder attackransomware15 Oct 2020
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera
100RISK
open ↗
GitHub PoC★ 2
FancyDoesSecurity/CVE-2020-2883
CVE-2020-2883CRITICALunder attack14 Oct 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2020-3452HIGHunder attack14 Oct 2020
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2020-5902CRITICALunder attackransomware14 Oct 2020
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic
100RISK
open ↗
VulnCheck XDB
remote-with-credentials
CVE-2020-2883CRITICALunder attack14 Oct 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th
100RISK
open ↗
Metasploit600
Microsoft SharePoint Server-Side Include and ViewState RCE
CVE-2020-16952HIGH13 Oct 2020
Microsoft SharePoint Remote Code Execution Vulnerability
58RISK
open ↗
GitHub PoC★ 10
BlueBorne Exploits & Framework This repository contains a PoC code of various exploits for the BlueBorne vulnerabilities. Under 'android' exploits for the Android RCE vulnerability (CVE-2017-0781), and the SDP Information leak vulnerability (CVE-2017-0785) can be found. Under 'linux-bluez' exploits for the Linux-RCE vulnerability (CVE-2017-1000251) can be found (for Amazon Echo, and Samsung Gear S3). Under 'l2cap_infra' a general testing framework to send and receive raw l2cap messages (using scapy) can be found. Under 'nRF24_BDADDR_Sniffer' a tool to capture bluetooth mac addresses (BDADDR) over the air, using a nRF24L01 chip For more details on BlueBorne, you may read the full technical white paper available here: https://www.armis.com/blueborne/ In addition a several detailed blog posts on the exploitation of these vulnerability can be found here: https://www.armis.com/blog/ =============== Dependencies:
CVE-2017-0781—12 Oct 2020
A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1
28RISK
open ↗
Exploit-DB
Cisco ASA and FTD 9.6.4.42 - Path Traversal
CVE-2020-3452HIGHunder attackwebappshardware12 Oct 2020
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability
100RISK
open ↗
GitHub PoC★ 58
https://medium.com/@mansoorr/exploiting-cve-2020-25213-wp-file-manager-wordpress-plugin-6-9-3f79241f0cd8
CVE-2020-25213CRITICALunder attack10 Oct 2020
The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitra
100RISK
open ↗
VulnCheck XDB
local
CVE-2020-0796CRITICALunder attackransomware10 Oct 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISK
open ↗
VulnCheck XDB
remote-with-credentials
CVE-2020-0688HIGHunder attackransomware10 Oct 2020
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle o
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-1472MEDIUMunder attackransomware10 Oct 2020
Netlogon Elevation of Privilege Vulnerability
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-25213CRITICALunder attack10 Oct 2020
The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitra
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-15227HIGH10 Oct 2020
Remote Code Execution vulnerability
68RISK
open ↗
GitHub PoC★ 4
n3m1sys/CVE-2018-16763-Exploit-Python3
CVE-2018-16763—10 Oct 2020
FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca
60RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-1472MEDIUMunder attackransomware10 Oct 2020
Netlogon Elevation of Privilege Vulnerability
100RISK
open ↗
← previouspage 746 / 2,637next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.