Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,957cataloged exploits

32,195CVEs with public exploitation

1,932lab-tested

All Exploit-DB 22,786Referência 20,003GitHub PoC 13,307VulnCheck XDB 8,182Nuclei 4,217Metasploit 3,462✓ verified onlyrecent popular risk

13,307 exploits

GitHub PoC★ 1

This repository contains a proof-of-concept exploit for CVE-2025-48827, a critical authentication bypass vulnerability affecting vBulletin 5.0.0–5.7.5 and 6.0.0–6.0.3 when running on PHP 8.1 or later. The vulnerability allows unauthenticated attackers to invoke protected API methods remotely.

CVE-2025-48827CRITICAL14 Jul 2025

vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to invoke protected API controllers'

85RISK

GitHub PoC

Armand2002/Exploit-CVE-2025-1974-Lab

CVE-2025-1974CRITICAL14 Jul 2025

ingress-nginx admission controller RCE escalation

85RISK

GitHub PoC★ 2

Royal Elementor Addons - Unauthenticated Remote Code Execution

CVE-2023-5360—14 Jul 2025

Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload

60RISK

GitHub PoC★ 7

HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload

CVE-2025-7340CRITICAL14 Jul 2025

HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload

48RISK

GitHub PoC★ 48

Privilege escalation to root using sudo chroot, NO NEED for gcc installed.

CVE-2025-32463CRITICALunder attack14 Jul 2025

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

100RISK

GitHub PoC

This is a security assessment report regarding the EthernalBlue vulnerability (CVE-2017-0143).

CVE-2017-0143HIGHunder attackransomware13 Jul 2025

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISK

GitHub PoC★ 8

Wazuh 8.4 CVE-2025-24016

CVE-2025-24016CRITICALunder attack13 Jul 2025

Remote code execution in Wazuh server

100RISK

GitHub PoC★ 2

🚀 Exploit for Moodle 4.4.0 Authenticated RCE (CVE-2024-43425) — run commands remotely ⚡

CVE-2024-43425HIGH13 Jul 2025

Moodle: remote code execution via calculated question types

78RISK

GitHub PoC★ 14

A detailed walkthrough of TryHackMe's Billing room exploiting CVE-2023-30258 and escalating via fail2ban misconfig

CVE-2023-30258CRITICAL13 Jul 2025

Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary com

85RISK

GitHub PoC

CVE-2020-35848 impacts Cockpit-CMS v1.7 due to unsafe handling of user inputs in authentication mechanisms, leading to remote code execution. This lab is built for CTF players and bug bounty learners to simulate real-world exploitation workflows including token extraction, password reset, and flag capture.

CVE-2020-35848—13 Jul 2025

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function.

60RISK

GitHub PoC

Vite is a frontend tooling framework for javascript. Vite exposes content of non-allowed files using ?inline&import or ?raw?import. Only apps explicitly exposing the Vite dev server to the network (using --host or server.host config option) are affected. This vulnerability is fixed in 6.2.4, 6.1.3, 6.0.13, 5.4.16, and 4.5.11.

CVE-2025-31125MEDIUMunder attack13 Jul 2025

Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query

90RISK

GitHub PoC

JayVillain/Scan-CVE-2025-6058

CVE-2025-6058CRITICAL13 Jul 2025

WPBookit <= 1.0.4 - Unauthenticated Arbitrary File Upload

63RISK

GitHub PoC

CVE-2025-32023

CVE-2025-32023HIGH13 Jul 2025

Redis allows out of bounds writes in hyperloglog commands leading to RCE

41RISK

GitHub PoC

r0otk3r/CVE-2022-1388

CVE-2022-1388CRITICALunder attackransomware12 Jul 2025

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISK

GitHub PoC

WPBookit <= 1.0.4 - Unauthenticated Arbitrary File Upload

CVE-2025-6058CRITICAL12 Jul 2025

WPBookit <= 1.0.4 - Unauthenticated Arbitrary File Upload

63RISK

GitHub PoC

Tool for detecting and exploiting CVE-2025-25257 in Fortinet FortiWeb.

CVE-2025-25257CRITICALunder attack12 Jul 2025

An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerabi

100RISK

GitHub PoC★ 1

imbas007/CVE-2025-25257

CVE-2025-25257CRITICALunder attack12 Jul 2025

An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerabi

100RISK

GitHub PoC

Proof of Concept for CVE-2025-24813, a Remote Code Execution vulnerability in Apache Tomcat. This PoC exploits unsafe deserialization via crafted session files uploaded through HTTP PUT requests, allowing attackers to execute arbitrary code remotely on vulnerable Tomcat servers.

CVE-2025-24813CRITICALunder attack12 Jul 2025

Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

100RISK

GitHub PoC

MacUchegit/Detecting-and-Analyzing-CVE-2024-24919-Exploitation

CVE-2024-24919HIGHunder attackransomware12 Jul 2025

Information disclosure

100RISK

GitHub PoC★ 1

Python exploit for vsftpd 2.3.4 - Backdoor Command Execution

CVE-2011-2523—12 Jul 2025

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

60RISK

GitHub PoC

r0otk3r/CVE-2024-1212

CVE-2024-1212CRITICALunder attack12 Jul 2025

LoadMaster Pre-Authenticated OS Command Injection

100RISK

GitHub PoC

pkblanks/Remediating-CVE-2013-3900-EnableCertPaddingCheck-

CVE-2013-3900MEDIUMunder attack12 Jul 2025

WinVerifyTrust Signature Validation Vulnerability

75RISK

GitHub PoC★ 1

Exploiting the CVE-2025-25257 vulnerability in FortiWeb. This repository demonstrates secure pre-authenticated SQL injection.

CVE-2025-25257CRITICALunder attack12 Jul 2025

An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerabi

100RISK

GitHub PoC

hackmelocal/CVE-2025-49113-Simulation

CVE-2025-49113CRITICALunder attack11 Jul 2025

Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the

100RISK

GitHub PoC

cuijiung/log4j-CVE-2021-44228

CVE-2021-44228CRITICALunder attackransomware11 Jul 2025

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

GitHub PoC

r0otk3r/CVE-2024-10915

CVE-2024-10915CRITICAL11 Jul 2025

D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L account_mgr.cgi cgi_user_add os command injection

85RISK

GitHub PoC

Rust PoC for CVE-2025-32463 (sudo chroot "chwoot" Local PrivEsc)

CVE-2025-32463CRITICALunder attack11 Jul 2025

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

100RISK

GitHub PoC

Critical Sudo Vulnerabilities Let Local Users Gain Root Access on Linux, Impacting Major Distros

CVE-2025-32462LOW11 Jul 2025

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allo

28RISK

GitHub PoC

Metasploit module for MailEnable CVE-2022-36934 authentication bypass RCE

CVE-2022-36934CRITICAL11 Jul 2025

An integer overflow in WhatsApp could result in remote code execution in an established video call.

48RISK

GitHub PoC

This repository contains Detailed explanation and working poc for Rejetto HTTP File Server (HFS) 2.3.x - Remote Command Execution.

CVE-2014-6287CRITICALunder attack11 Jul 2025

The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c a

100RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.