Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

75,589cataloged exploits

34,508CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,443Referência 21,554GitHub PoC 13,689VulnCheck XDB 8,216Nuclei 4,223Metasploit 3,464✓ verified onlyrecent popular risk

13,689 exploits

GitHub PoC★ 5

This is a script written in Python that allows the exploitation of the Chamilo's LMS software security flaw described in CVE-2023-4220

CVE-2023-4220HIGH07 Jul 2024

Chamilo LMS Unauthenticated Big Upload File Remote Code Execution

78RISK

open ↗

GitHub PoC

sysonlai/CVE-2024-32002-hook

CVE-2024-32002CRITICAL07 Jul 2024

Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution

53RISK

open ↗

GitHub PoC

This is a script written in Python that allows the exploitation of the Chamilo's LMS software security flaw described in CVE-2023-4220

CVE-2023-4220HIGH07 Jul 2024

Chamilo LMS Unauthenticated Big Upload File Remote Code Execution

78RISK

open ↗

GitHub PoC★ 1

Chamilo LMS Unauthenticated Remote Code Execution

CVE-2023-4220HIGH07 Jul 2024

Chamilo LMS Unauthenticated Big Upload File Remote Code Execution

78RISK

open ↗

GitHub PoC★ 1

RCE Chamilo 1.11.24

CVE-2023-4220HIGH07 Jul 2024

Chamilo LMS Unauthenticated Big Upload File Remote Code Execution

78RISK

open ↗

GitHub PoC

YISF 2024 CTF-Web (Directory Traversal via ".tar" file, CVE-2007-4559), easy

CVE-2007-4559CRITICAL07 Jul 2024

Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows

53RISK

open ↗

GitHub PoC

CosmicSting (CVE-2024-34102) POC / Patch Validator

CVE-2024-34102CRITICALunder attack07 Jul 2024

XXE can expose crypt key and other secrets granting full admin access

100RISK

open ↗

GitHub PoC★ 56

Remote Code Execution (RCE) Vulnerability In Evaluating Property Name Expressions with multies ways to exploit

CVE-2024-36401CRITICALunder attack06 Jul 2024

Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver

100RISK

open ↗

GitHub PoC★ 7

PoC - PHP CGI Argument Injection CVE-2024-4577 (Scanner and Exploit)

CVE-2024-4577CRITICALunder attackransomware06 Jul 2024

Argument Injection in PHP-CGI

100RISK

open ↗

GitHub PoC★ 4

POC

CVE-2024-36401CRITICALunder attack05 Jul 2024

Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver

100RISK

open ↗

GitHub PoC★ 44

该漏洞存在于 NtQueryInformationToken 函数中，特别是在处理AuthzBasepCopyoutInternalSecurityAttributes 函数时，该漏洞源于内核在操作对象时对锁定机制的不当管理，这一失误可能导致恶意实体意外提升权限。

CVE-2024-30088HIGHunder attackransomware05 Jul 2024

Windows Kernel Elevation of Privilege Vulnerability

83RISK

open ↗

GitHub PoC★ 1

CVE-2024-37770

CVE-2024-37770CRITICAL05 Jul 2024

14Finger v1.1 was discovered to contain a remote command execution (RCE) vulnerability in the fingerprint function. This

48RISK

open ↗

GitHub PoC

CVE-2024-39943 rejetto HFS (aka HTTP File Server) 3 before 0.52.10 on Linux, UNIX, and macOS allows OS command execution by remote authenticated users (if they have Upload permissions). This occurs because a shell is used to execute df (i.e., with execSync instead of spawnSync in child_process in Node.js).

CVE-2024-39943CRITICAL05 Jul 2024

rejetto HFS (aka HTTP File Server) 3 before 0.52.10 on Linux, UNIX, and macOS allows OS command execution by remote auth

60RISK

open ↗

GitHub PoC★ 5

Vulnerability remediation and mitigationCVE-2024-6387

CVE-2024-6387HIGH05 Jul 2024

Openssh: regresshion - race condition in ssh allows rce/dos

63RISK

open ↗

GitHub PoC

imv7/CVE-2024-6387

CVE-2024-6387HIGH05 Jul 2024

Openssh: regresshion - race condition in ssh allows rce/dos

63RISK

open ↗

GitHub PoC★ 2

Quick regreSSHion checker (based on software version) for nuclei CVE-2024-6387

CVE-2024-6387HIGH05 Jul 2024

Openssh: regresshion - race condition in ssh allows rce/dos

63RISK

open ↗

GitHub PoC★ 10

HASSH fingerprints for identifying OpenSSH servers potentially vulnerable to CVE-2024-6387 (regreSSHion).

CVE-2024-6387HIGH05 Jul 2024

Openssh: regresshion - race condition in ssh allows rce/dos

63RISK

open ↗

GitHub PoC★ 373

HikvisionExploiter is a Python-based utility designed to automate exploitation and directory accessibility checks on Hikvision network cameras exploiting the Web interface Version 3.1.3.150324 + CVE-2021-36260 Detection

CVE-2021-36260CRITICALunder attack05 Jul 2024

A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation,

100RISK

open ↗

GitHub PoC

puckiestyle/CVE-2023-27532-RCE-Only

CVE-2023-27532HIGHunder attackransomware05 Jul 2024

Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database

93RISK

open ↗

GitHub PoC★ 3

CVE-2024-4040 PoC

CVE-2024-4040CRITICALunder attack05 Jul 2024

Unauthenticated arbitrary file read and remote code execution in CrushFTP

100RISK

open ↗

GitHub PoC★ 1

TeamCity RCE for Linux (CVE-2023-42793)

CVE-2023-42793CRITICALunder attackransomware05 Jul 2024

In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

100RISK

open ↗

GitHub PoC★ 1

Exploiter a Vulnerability detection and Exploitation tool for GeoServer Unauthenticated Remote Code Execution CVE-2024-36401.

CVE-2024-36401CRITICALunder attack05 Jul 2024

Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver

100RISK

open ↗

GitHub PoC★ 2

SSH EXPLOIT BYPASS AUTH SSH

CVE-2024-3094CRITICAL05 Jul 2024

Xz: malicious code in distributed source

70RISK

open ↗

GitHub PoC★ 59

GNU IFUNC is the real culprit behind CVE-2024-3094

CVE-2024-3094CRITICAL05 Jul 2024

Xz: malicious code in distributed source

70RISK

open ↗

GitHub PoC★ 34

POC for CVE-2024-36401. This POC will attempt to establish a reverse shell from the vlun targets.

CVE-2024-36401CRITICALunder attack04 Jul 2024

Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver

100RISK

open ↗

GitHub PoC

iamz24/CVE-2021-3493_CVE-2022-3357

CVE-2021-3493HIGHunder attack04 Jul 2024

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o

98RISK

open ↗

GitHub PoC

Provides instructions for using the script to check if your OpenSSH installation is vulnerable to CVE-2024-6387

CVE-2024-6387HIGH04 Jul 2024

Openssh: regresshion - race condition in ssh allows rce/dos

63RISK

open ↗

GitHub PoC

sms2056/CVE-2024-6387

CVE-2024-6387HIGH04 Jul 2024

Openssh: regresshion - race condition in ssh allows rce/dos

63RISK

open ↗

GitHub PoC

This repository investigates the exploitation of CVE-2023-34362 in the MOVEit file transfer server by the TA505 (Cl0p) ransomware group. It explores the group's tactics and past campaigns targeting file transfer applications, aiming to enhance understanding and defensive measures against such threats.

CVE-2023-34362CRITICALunder attackransomware04 Jul 2024

In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023.

100RISK

open ↗

GitHub PoC

CVE-2017-12617

CVE-2017-12617HIGHunder attack04 Jul 2024

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTT

100RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.