Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
89,426cataloged exploits
41,291CVEs with public exploitation
24,696lab-tested
AllReferência 26,792Exploit-DB 24,491GitHub PoC 18,666exploitation intelligence 11,309Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
89,426 exploits
GitHub PoC★ 7
Script to handle CVE 2022-42889
Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults
60RISK
open ↗initial-access
Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults
60RISK
GitHub PoC★ 1
b-abderrahmane/CVE-2021-29447-POC
WordPress Authenticated XXE attack when installation is running PHP 8
63RISK
open ↗GitHub PoC★ 7
This repo contains payload for the CVE-2022-36067
vm2 vulnerable to Sandbox Escape before v3.9.11
60RISK
open ↗GitHub PoC★ 15
Proof of Concept for CVE-2022-42889 (Text4Shell Vulnerability)
Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults
60RISK
open ↗initial-access
Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults
60RISK
GitHub PoC★ 35
A project demonstrating an app that is vulnerable to Spring Security authorization bypass CVE-2022-31692
Spring Security, versions 5.7 prior to 5.7.5 and 5.6 prior to 5.6.9 could be susceptible to authorization rules bypass v
48RISK
open ↗local
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RISK
GitHub PoC★ 30
利用sudo提权，只针对cnetos7
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RISK
open ↗initial-access
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
Metasploit600
Authenticated RCE in Splunk (SimpleXML dashboard PDF generation)
Remote Code Execution through dashboard PDF generation component in Splunk Enterprise
41RISK
open ↗GitHub PoC★ 2
CVE-2022-42889 Blind-RCE Nuclei Template
Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults
60RISK
open ↗GitHub PoC
POCsuite与goland实现华为HG532路由器命令注入CVE-2017-17215 POC
Huawei HG532 with some customized versions has a remote code execution vulnerability. An authenticated attacker could se
45RISK
open ↗local
Windows Win32k Elevation of Privilege Vulnerability
100RISK
GitHub PoC★ 7
python编写的apache路径穿越poc&exp
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
open ↗GitHub PoC★ 9
apache路径穿越漏洞poc&exp
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
open ↗initial-access
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
initial-access
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
GitHub PoC★ 7
SambaCry (CVE-2017-7494) exploit for Samba | bind shell without Metasploit
Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allo
100RISK
open ↗GitHub PoC★ 15
CVE-2021-1732 Microsoft Windows 10 本地提权漏 研究及Poc/Exploit开发
Windows Win32k Elevation of Privilege Vulnerability
100RISK
open ↗initial-access
Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allo
100RISK
initial-access
MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated
100RISK
GitHub PoC★ 4
By the Way is an exploit that enables a root shell on Mikrotik devices running RouterOS versions:
MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated
100RISK
open ↗Metasploit600
Clinic's Patient Management System 1.0 - Unauthenticated RCE
Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via p
68RISK
open ↗GitHub PoC★ 1
jehovah2002/CVE-2021-4034-pwnkit
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗GitHub PoC★ 3
This vulnerability allows an attacker to gain unauthorized access to the firewall management space by bypassing authentication
An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sopho
100RISK
open ↗initial-access
An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sopho
100RISK
initial-access
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe
100RISK
GitHub PoC★ 17
POC for CVE-2022-21907: HTTP Protocol Stack Remote Code Execution Vulnerability.
HTTP Protocol Stack Remote Code Execution Vulnerability
70RISK
open ↗denial-of-service
HTTP Protocol Stack Remote Code Execution Vulnerability
70RISK
We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and exploitation-intelligence sources. A public PoC existing does not mean the flaw is exploitable in your environment.