Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

75,652cataloged exploits

34,545CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,443Referência 21,581GitHub PoC 13,708VulnCheck XDB 8,225Nuclei 4,228Metasploit 3,467✓ verified onlyrecent popular risk

13,708 exploits

GitHub PoC★ 2

A PoC exploit for CVE-2022-33891 - Apache Spark UI Remote Code Execution (RCE)

CVE-2022-33891HIGHunder attack22 Feb 2024

Apache Spark shell command injection vulnerability via Spark UI

100RISK

open ↗

GitHub PoC★ 7

AI ChatBot <= 4.8.9 - Unauthenticated SQL Injection via qc_wpbo_search_response

CVE-2023-5204CRITICAL21 Feb 2024

AI ChatBot <= 4.8.9 - Unauthenticated SQL Injection via qc_wpbo_search_response

63RISK

open ↗

GitHub PoC★ 110

ScreenConnect AuthBypass(cve-2024-1709) --> RCE!!!

CVE-2024-1709CRITICALunder attackransomware21 Feb 2024

Authentication bypass using an alternate path or channel

100RISK

open ↗

GitHub PoC★ 31

Nuclei template and information about the POC for CVE-2024-25600

CVE-2024-25600CRITICAL21 Feb 2024

WordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability

85RISK

open ↗

GitHub PoC

Jason-Siu/CVE-2019-9053-Exploit-in-Python-3

CVE-2019-9053—21 Feb 2024

An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve

35RISK

open ↗

GitHub PoC★ 1

Scraping tool to ennumerate directories or files with the CVE-2024-23897 vulnerability in Jenkins.

CVE-2024-23897CRITICALunder attackransomware21 Feb 2024

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an

100RISK

open ↗

GitHub PoC

Un script realizado en python para atumatizar la vulnerabilidad CVE-2024-23897

CVE-2024-23897CRITICALunder attackransomware20 Feb 2024

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an

100RISK

open ↗

GitHub PoC★ 5

Mdusmandasthaheer/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413CRITICALunder attack20 Feb 2024

Microsoft Outlook Remote Code Execution Vulnerability

100RISK

open ↗

GitHub PoC★ 3

Android Application Vulnerability Exploit

CVE-2017-13156—20 Feb 2024

An elevation of privilege vulnerability in the Android system (art). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0,

43RISK

open ↗

GitHub PoC

CVE-2024-21413 Açığını Kullanarak Giriş Bilgilerini Alma

CVE-2024-21413CRITICALunder attack19 Feb 2024

Microsoft Outlook Remote Code Execution Vulnerability

100RISK

open ↗

GitHub PoC★ 2

Perform with massive Jenkins Reading-2-RCE

CVE-2024-23897CRITICALunder attackransomware19 Feb 2024

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an

100RISK

open ↗

GitHub PoC

Joomla! < 4.2.8 - Unauthenticated information disclosure exploit

CVE-2023-23752MEDIUMunder attack19 Feb 2024

[20230201] - Core - Improper access check in webservice endpoints

100RISK

open ↗

GitHub PoC

132231g/CVE-2018-7602

CVE-2018-7602CRITICALunder attackransomware18 Feb 2024

Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004

100RISK

open ↗

GitHub PoC★ 11

Simple python3 script to automate CVE-2018-9995

CVE-2018-9995—18 Feb 2024

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L

60RISK

open ↗

GitHub PoC★ 4

Priv esc in Nagios 2024R1.01

CVE-2024-24402CRITICAL18 Feb 2024

An issue in Nagios XI 2024R1.01 allows a remote attacker to escalate privileges via a crafted script to the /usr/local/n

48RISK

open ↗

GitHub PoC★ 36

Auto exploitation tool for CVE-2024-24401.

CVE-2024-24401CRITICAL18 Feb 2024

SQL Injection vulnerability in Nagios XI 2024R1.01 allows a remote attacker to execute arbitrary code via a crafted payl

60RISK

open ↗

GitHub PoC★ 1

CVE-2023-36845 – Unauthenticated Juniper Remote Code Execution Vulnerability Scanner

CVE-2023-36845CRITICALunder attack18 Feb 2024

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RISK

open ↗

GitHub PoC

A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to remotely execute code.

CVE-2023-36845CRITICALunder attack17 Feb 2024

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RISK

open ↗

GitHub PoC

A tool written in Go that scans files & directories for the Follina exploit (CVE-2022-30190)

CVE-2022-30190HIGHunder attackransomware17 Feb 2024

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISK

open ↗

GitHub PoC★ 257

CVE-2024-21413 PoC for THM Lab

CVE-2024-21413CRITICALunder attack17 Feb 2024

Microsoft Outlook Remote Code Execution Vulnerability

100RISK

open ↗

GitHub PoC★ 17

Microsoft Outlook Information Disclosure Vulnerability (leak password hash) - CVE-2024-21413 POC

CVE-2024-21413CRITICALunder attack16 Feb 2024

Microsoft Outlook Remote Code Execution Vulnerability

100RISK

open ↗

GitHub PoC

Jenkins Arbitrary File Leak Vulnerability [CVE-2024-23897]

CVE-2024-23897CRITICALunder attackransomware16 Feb 2024

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an

100RISK

open ↗

GitHub PoC★ 43

POC for CVE-2024-23897 Jenkins File-Read

CVE-2024-23897CRITICALunder attackransomware16 Feb 2024

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an

100RISK

open ↗

GitHub PoC★ 765

Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413CRITICALunder attack16 Feb 2024

Microsoft Outlook Remote Code Execution Vulnerability

100RISK

open ↗

GitHub PoC★ 10

AkuCyberSec/Elementor-3.18.0-Upload-Path-Traversal-RCE-CVE-2023-48777

CVE-2023-48777CRITICAL16 Feb 2024

WordPress Elementor plugin 3.3.0-3.18.1 - Arbitrary File Upload vulnerability

63RISK

open ↗

GitHub PoC

wxrdnx/CVE-2023-38408

CVE-2023-38408CRITICAL16 Feb 2024

The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remot

70RISK

open ↗

GitHub PoC

letsr00t/CVE-2022-0847

CVE-2022-0847HIGHunder attack15 Feb 2024

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISK

open ↗

GitHub PoC★ 157

Microsoft Outlook Information Disclosure Vulnerability (leak password hash) - Expect Script POC

CVE-2024-21413CRITICALunder attack15 Feb 2024

Microsoft Outlook Remote Code Execution Vulnerability

100RISK

open ↗

GitHub PoC★ 1

stegano5/ExploitScript-CVE-2023-46604

CVE-2023-46604CRITICALunder attackransomware14 Feb 2024

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISK

open ↗

GitHub PoC★ 1

This Python script automates the Proof of Concept (PoC) for CVE-2023-36845, a vulnerability impacting Juniper Networks Junos OS on EX and SRX Series devices. The vulnerability resides in the J-Web component, allowing remote manipulation of the PHPRC variable, potentially leading to code injection.

CVE-2023-36845CRITICALunder attack14 Feb 2024

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.