Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

79,386cataloged exploits

36,533CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,466Referência 23,104GitHub PoC 15,075VulnCheck XDB 8,883Nuclei 4,365Metasploit 3,493✓ verified onlyrecent popular risk

79,305 exploits

GitHub PoC

Perl version of recently published scripts to build ECC certificates with specific parameters re CVE-2020-0601

CVE-2020-0601HIGHunder attack18 Jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISK

open ↗

GitHub PoC

MarkusZehnle/CVE-2020-0601

CVE-2020-0601HIGHunder attack17 Jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISK

open ↗

GitHub PoC★ 1

Powershell to patch CVE-2020-0601 . Complete security rollup for Windows 10 1507-1909

CVE-2020-0601HIGHunder attack17 Jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISK

open ↗

GitHub PoC★ 2

CurveBall CVE exploitation

CVE-2020-0601HIGHunder attack17 Jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISK

open ↗

GitHub PoC

C++ based utility to check if certificates are trying to exploit CVE-2020-0601

CVE-2020-0601HIGHunder attack17 Jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISK

open ↗

GitHub PoC★ 1

CVE-2019-19781 Attack Triage Script

CVE-2019-19781CRITICALunder attackransomware17 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

Exploit-DB✓ VexDay Proof

Plantronics Hub 3.13.2 - SpokesUpdateService Privilege Escalation (Metasploit)

CVE-2019-15742—localwindows17 Jan 2020

A local privilege-escalation vulnerability exists in the Poly Plantronics Hub before 3.14 for Windows client application

38RISK

open ↗

GitHub PoC

批量概念驗證用

CVE-2019-19781CRITICALunder attackransomware17 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

GitHub PoC

A fast multi threaded scanner for Citrix ADC (NetScaler) CVE-2019-19781 - Citrixmash

CVE-2019-19781CRITICALunder attackransomware17 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

VulnCheck XDB

remote-with-credentials

CVE-2019-19781CRITICALunder attackransomware17 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

Exploit-DB

WordPress Plugin Postie 1.9.40 - Persistent Cross-Site Scripting

CVE-2019-20204—webappsphp16 Jan 2020

The Postie plugin 1.9.40 for WordPress allows XSS, as demonstrated by a certain payload with jaVasCript:/* at the beginn

23RISK

open ↗

VulnCheck XDB

client-side

CVE-2020-0601HIGHunder attack16 Jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISK

open ↗

GitHub PoC★ 1

Curated list of CVE-2020-0601 resources

CVE-2020-0601HIGHunder attack16 Jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISK

open ↗

GitHub PoC★ 5

😂An awesome curated list of repos for CVE-2020-0601.

CVE-2020-0601HIGHunder attack16 Jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISK

open ↗

GitHub PoC★ 66

Proof of Concept for CVE-2020-0601

CVE-2020-0601HIGHunder attack16 Jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISK

open ↗

Exploit-DB

Jenkins Gitlab Hook Plugin 1.4.2 - Reflected Cross-Site Scripting

CVE-2020-2096—webappsjava16 Jan 2020

Jenkins Gitlab Hook Plugin 1.4.2 and earlier does not escape project names in the build_now endpoint, resulting in a ref

60RISK

open ↗

Exploit-DB

Citrix Application Delivery Controller (ADC) and Gateway 13.0 - Path Traversal

CVE-2019-19781CRITICALunder attackransomwarewebappsmultiple16 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

GitHub PoC★ 2

This script checks the Citrix Netscaler if it has been compromised by CVE-2019-19781 attacks and collects all file system information

CVE-2019-19781CRITICALunder attackransomware16 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

GitHub PoC

Castaldio86/Detect-CVE-2019-19781

CVE-2019-19781CRITICALunder attackransomware16 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

GitHub PoC★ 3

Check ADC for CVE-2019-19781

CVE-2019-19781CRITICALunder attackransomware16 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

Exploit-DB✓ VexDay Proof

Barco WePresent - file_transfer.cgi Command Injection (Metasploit)

CVE-2019-3929CRITICALunder attackremotelinux15 Jan 2020

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Ba

100RISK

open ↗

GitHub PoC★ 2,071

weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883

CVE-2020-2551CRITICALunder attack15 Jan 2020

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppor

100RISK

open ↗

GitHub PoC★ 3

Automated forensic script hunting for cve-2019-19781

CVE-2019-19781CRITICALunder attackransomware15 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

GitHub PoC

IOCs for CVE-2019-19781

CVE-2019-19781CRITICALunder attackransomware15 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

Metasploit300

WebLogic Server Deserialization RCE - BadAttributeValueExpException

CVE-2020-2555CRITICALunder attack15 Jan 2020

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Su

100RISK

open ↗

GitHub PoC

Check your website for CVE-2019-19781 Vulnerable

CVE-2019-19781CRITICALunder attackransomware15 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

GitHub PoC★ 2,073

CVE-2017-3248—15 Jan 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Core Components). Suppo

60RISK

open ↗

GitHub PoC★ 2,073

CVE-2018-2628CRITICALunder attack15 Jan 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISK

open ↗

Exploit-DB

Microsoft Windows - CryptoAPI (Crypt32.dll) Elliptic Curve Cryptography (ECC) Spoof Code-Signing Certificate

CVE-2020-0601HIGHunder attacklocalwindows15 Jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISK

open ↗

VulnCheck XDB

initial-access

CVE-2019-2725HIGHunder attackransomware15 Jan 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte

100RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.