Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
75,652cataloged exploits
34,545CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,581GitHub PoC 13,708VulnCheck XDB 8,225Nuclei 4,228Metasploit 3,467✓ verified onlyrecentpopularrisk
13,708 exploits
GitHub PoC★ 71
CVE-2024-3400
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RISK
open ↗GitHub PoC
FoxyProxys/CVE-2024-3400
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RISK
open ↗GitHub PoC★ 2
PoC MinIO vulnerability exploit
Minio Information Disclosure in Cluster Deployment
100RISK
open ↗GitHub PoC
La siguiente regla YARA ayuda a detectar la presencia del backdoor en la librería liblzma comprometida en sistemas que utilizan las versiones 5.6.0 y 5.6.1 de la herramienta de compresión XZ.
Xz: malicious code in distributed source
70RISK
open ↗GitHub PoC★ 335
Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled.
Windows Kernel Elevation of Privilege Vulnerability
83RISK
open ↗GitHub PoC★ 5
OpenMetadata_RCE (CVE-2024-28255) Batch scan/exploit
Authentication Bypass in OpenMetadata
85RISK
open ↗GitHub PoC★ 1
CVE-2024-24576 PoC for Nim Lang
Rusts's `std::process::Command` did not properly escape arguments of batch files on Windows
53RISK
open ↗GitHub PoC★ 1
Public exploit for CVE-2024-31777
File Upload vulnerability in openeclass v.3.15 and before allows an attacker to execute arbitrary code via a crafted fil
48RISK
open ↗GitHub PoC★ 2
0xWhoami35/CVE-2023-23752
[20230201] - Core - Improper access check in webservice endpoints
100RISK
open ↗GitHub PoC★ 50
CVE-2023-6319 proof of concept
Command injection in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service
48RISK
open ↗GitHub PoC★ 2
adhikara13/CVE-2024-2389
Flowmon Unauthenticated Command Injection Vulnerability
85RISK
open ↗GitHub PoC★ 5
D-Link NAS Command Execution Exploit
D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection
100RISK
open ↗GitHub PoC★ 1
Ray OS Command Injection RCE(Unauthorized)
Ray Command Injection in cpu_profile Parameter
85RISK
open ↗GitHub PoC★ 20
CVE-2024-24576 Proof of Concept
Rusts's `std::process::Command` did not properly escape arguments of batch files on Windows
53RISK
open ↗GitHub PoC★ 9
brains93/CVE-2024-24576-PoC-Python
Rusts's `std::process::Command` did not properly escape arguments of batch files on Windows
53RISK
open ↗GitHub PoC★ 1
The script is from https://github.com/JohnHammond/msdt-follina, just make it simple for me to use it and this script aim at generating the payload for more information refer the johnn hammond link
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗GitHub PoC★ 5
A PoC exploit for CVE-2024-3273 - D-Link Remote Code Execution RCE
D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection
100RISK
open ↗GitHub PoC★ 59
Example of CVE-2024-24576 use case.
Rusts's `std::process::Command` did not properly escape arguments of batch files on Windows
53RISK
open ↗GitHub PoC★ 23
CVE-2024-2879 - LayerSlider 7.9.11 - 7.10.0 - Unauthenticated SQL Injection
The LayerSlider plugin for WordPress is vulnerable to SQL Injection via the ls_get_popup_markup action in versions 7.9.1
68RISK
open ↗GitHub PoC
CVE-2020-12641: Command Injection via “_im_convert_path” Parameter in Roundcube Webmail
rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in
100RISK
open ↗GitHub PoC★ 101
D-Link NAS CVE-2024-3273 Exploit Tool
D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection
100RISK
open ↗GitHub PoC
Quick and dirty honeypot for CVE-2024-3273
D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection
100RISK
open ↗GitHub PoC★ 3
CVE-2021-42013 Vulnerability Scanner This Python script checks for the Remote Code Execution (RCE) vulnerability (CVE-2021-42013) in Apache 2.4.50.
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
100RISK
open ↗GitHub PoC★ 13
Exploit for CVE-2024-3273, supports single and multiple hosts
D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection
100RISK
open ↗GitHub PoC
RomainBayle08/CVE-2023-38831
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RISK
open ↗GitHub PoC
Scan for files containing the signature from the `xz` backdoor (CVE-2024-3094)
Xz: malicious code in distributed source
70RISK
open ↗GitHub PoC★ 6
An Ansible Role that installs the xz backdoor (CVE-2024-3094) on a Debian host and optionally installs the xzbot tool.
Xz: malicious code in distributed source
70RISK
open ↗GitHub PoC
churamanib/CVE-2023-0386
A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities wa
86RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.