Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

75,526cataloged exploits

34,478CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,443Referência 21,534GitHub PoC 13,654VulnCheck XDB 8,213Nuclei 4,218Metasploit 3,464✓ verified onlyrecent popular risk

13,654 exploits

GitHub PoC★ 2

CVE-2024-0012批量检测脚本

CVE-2024-0012CRITICALunder attackransomware22 Nov 2024

PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)

100RISK

open ↗

GitHub PoC

My Geo Posts Free <= 1.2 - Unauthenticated PHP Object Injection

CVE-2024-52433CRITICAL22 Nov 2024

WordPress My Geo Posts Free plugin <= 1.2 - PHP Object Injection vulnerability

63RISK

open ↗

GitHub PoC

Broken Authentication in Wordpress plugin (Wawp Plugin < 3.0.18)

CVE-2024-52475CRITICAL22 Nov 2024

WordPress Wawp plugin < 3.0.18 - Account Takeover vulnerability

48RISK

open ↗

GitHub PoC★ 2

This tool scans WordPress websites for vulnerabilities in the WP Time Capsule plugin related to CVE-2024-8856. It identifies plugin versions below 1.22.22 as vulnerable and logs results to vuln.txt. Simple and efficient, it helps security researchers and admins detect and address risks quickly.

CVE-2024-8856CRITICAL21 Nov 2024

Backup and Staging by WP Time Capsule <= 1.22.21 - Unauthenticated Arbitrary File Upload

85RISK

open ↗

GitHub PoC★ 1

This is POC of CVE-2024-29671

CVE-2024-29671CRITICAL21 Nov 2024

Buffer Overflow vulnerability in NEXTU FLATA AX1500 Router v.1.0.2 allows a remote attacker to execute arbitrary code vi

53RISK

open ↗

GitHub PoC★ 1

This tool scans WordPress sites for vulnerabilities in the "RegistrationMagic" plugin (CVE-2024-10508). It checks for the presence of a specific version (`6.0.2.6`) and marks the site as vulnerable if found. The results are saved in a file (`vuln.txt`) for further analysis.

CVE-2024-10508CRITICAL21 Nov 2024

RegistrationMagic – User Registration Plugin with Custom Registration Forms <= 6.0.2.6 - Unauthenticated Privilege Escalation via Password Recovery

48RISK

open ↗

GitHub PoC

GEO my WordPress < 4.5.0.2 - Unauthenticated LFI to RCE/PHAR Deserialization

CVE-2024-6330CRITICAL20 Nov 2024

GEO my WordPress < 4.4.0.2 - Unauthenticated RCE via LFI

48RISK

open ↗

GitHub PoC

POC for CVE-2024-10924 written in Python

CVE-2024-10924CRITICAL20 Nov 2024

Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass

85RISK

open ↗

GitHub PoC

CVE-2023-28354

CVE-2023-28354CRITICAL20 Nov 2024

An issue was discovered in Opsview Monitor Agent 6.8. An unauthenticated remote attacker can call check_nrpe against aff

48RISK

open ↗

GitHub PoC

CVE-2024-52316 - Apache Tomcat Authentication Bypass Vulnerability

CVE-2024-52316CRITICAL20 Nov 2024

Apache Tomcat: Authentication bypass when using Jakarta Authentication API

48RISK

open ↗

GitHub PoC★ 3

Vulnerable docker container for Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 – 9.1.1.1 – Authentication Bypass CVE-2023-50164

CVE-2024-10924CRITICAL20 Nov 2024

Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass

85RISK

open ↗

GitHub PoC

PoC for PAN-OS Exploit

CVE-2024-9474MEDIUMunder attackransomware20 Nov 2024

PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface

100RISK

open ↗

GitHub PoC

FAFAF

CVE-2018-15473MEDIUM20 Nov 2024

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati

70RISK

open ↗

GitHub PoC★ 1

PANW NGFW CVE-2024-0012

CVE-2024-0012CRITICALunder attackransomware20 Nov 2024

PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)

100RISK

open ↗

GitHub PoC★ 143

WPTaskScheduler RPC Persistence & CVE-2024-49039 via Task Scheduler

CVE-2024-49039HIGHunder attackransomware19 Nov 2024

Windows Task Scheduler Elevation of Privilege Vulnerability

76RISK

open ↗

GitHub PoC★ 20

CVE-2024-0012 PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) RCE POC

CVE-2024-0012CRITICALunder attackransomware19 Nov 2024

PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)

100RISK

open ↗

GitHub PoC★ 24

watchtowrlabs/palo-alto-panos-cve-2024-0012

CVE-2024-0012CRITICALunder attackransomware19 Nov 2024

PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)

100RISK

open ↗

GitHub PoC★ 3

Unauthenticated Remote Code Execution via Angular-Base64-Upload Library (npm:bower)

CVE-2024-42640CRITICAL19 Nov 2024

angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php. Explo

75RISK

open ↗

GitHub PoC

Simple Python script

CVE-2024-10924CRITICAL19 Nov 2024

Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass

85RISK

open ↗

GitHub PoC

wudidwo/CVE-2017-12615-poc

CVE-2017-12615HIGHunder attackransomware19 Nov 2024

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisati

100RISK

open ↗

GitHub PoC★ 19

Exploits Really Simple Security < 9.1.2 authentication bypass (CVE-2024-10924).

CVE-2024-10924CRITICAL19 Nov 2024

Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass

85RISK

open ↗

GitHub PoC

ubaydev/CVE-2024-10508

CVE-2024-10508CRITICAL19 Nov 2024

RegistrationMagic – User Registration Plugin with Custom Registration Forms <= 6.0.2.6 - Unauthenticated Privilege Escalation via Password Recovery

48RISK

open ↗

GitHub PoC★ 45

PAN-OS auth bypass + RCE

CVE-2024-9474MEDIUMunder attackransomware19 Nov 2024

PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface

100RISK

open ↗

GitHub PoC★ 8

WARNING: This is a vulnerable application to test the exploit for the Really Simple Security < 9.1.2 authentication bypass (CVE-2024-10924). Run it at your own risk!

CVE-2024-10924CRITICAL18 Nov 2024

Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass

85RISK

open ↗

GitHub PoC

Porto <= 7.1.0 - Unauthenticated Local File Inclusion via porto_ajax_posts

CVE-2024-3806CRITICAL18 Nov 2024

Porto <= 7.1.0 - Unauthenticated Local File Inclusion via porto_ajax_posts

48RISK

open ↗

GitHub PoC

Andriod binder bug record

CVE-2019-2215HIGHunder attack18 Nov 2024

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

98RISK

open ↗

GitHub PoC★ 2

Vuln disclosure for XOne app

CVE-2024-54820CRITICAL17 Nov 2024

XOne Web Monitor v02.10.2024.530 framework 1.0.4.9 was discovered to contain a SQL injection vulnerability in the login

48RISK

open ↗

GitHub PoC★ 2

Relais 2FA <= 1.0 - Authentication Bypass

CVE-2024-10245CRITICAL17 Nov 2024

Relais 2FA <= 1.0 - Authentication Bypass

48RISK

open ↗

GitHub PoC★ 3

PoC for Windows' IPv6 CVE-2024-38063

CVE-2024-38063CRITICAL16 Nov 2024

Windows TCP/IP Remote Code Execution Vulnerability

70RISK

open ↗

GitHub PoC★ 2

WordPress WP Time Capsule Plugin Arbitrary File Upload Vulnerability

CVE-2024-8856CRITICAL16 Nov 2024

Backup and Staging by WP Time Capsule <= 1.22.21 - Unauthenticated Arbitrary File Upload

85RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.