Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
75,652cataloged exploits
34,545CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,581GitHub PoC 13,708VulnCheck XDB 8,225Nuclei 4,228Metasploit 3,467✓ verified onlyrecentpopularrisk
13,708 exploits
GitHub PoC★ 1
Arszilla/CVE-2023-6538
System Management Unit (SMU) versions prior to 14.8.7825.01, used to manage Hitachi Vantara NAS products is susceptible to unintended information disclosure via unprivileged access to SMU configuration backup data.
41RISK
open ↗GitHub PoC
An access control flaw was identified, potentially leading to unauthorized access to critical webservice endpoints within Joomla! CMS versions 4.0.0 through 4.2.7. This vulnerability could be exploited by attackers to gain unauthorized access to sensitive information or perform unauthorized actions.
[20230201] - Core - Improper access check in webservice endpoints
100RISK
open ↗GitHub PoC★ 2
Simulates CVE-2023-4966 Citrix Bleed overread bug
Unauthenticated sensitive information disclosure
100RISK
open ↗GitHub PoC
dcm2406/CVE-2023-46604
Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack
100RISK
open ↗GitHub PoC
Remote Code Execution exploit for PrimeFaces 5.x - EL Injection (CVE-2017-1000486)
Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution
100RISK
open ↗GitHub PoC
ZhiQiAnSecFork/DirtyCOW_CVE-2016-5195
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RISK
open ↗GitHub PoC
ZhiQiAnSecFork/cve-2017-16995
The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial
50RISK
open ↗GitHub PoC★ 13
A PoC exploit for CVE-2023-32315 - Openfire Authentication Bypass
Openfire administration console authentication bypass
100RISK
open ↗GitHub PoC
markyu0401/CVE-2021-3560-Polkit-Privilege-Escalation
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RISK
open ↗GitHub PoC★ 2
SQL Injection in 3CX CRM Integration
The CRM Integration in 3CX before 18.0.9.23 and 20 before 20.0.0.1494 allows SQL Injection via a first name, search stri
48RISK
open ↗GitHub PoC★ 25
Atlassian Companion RCE Vulnerability Proof of Concept
Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An att
53RISK
open ↗GitHub PoC★ 1
imperva/CVE-2023-22524
Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An att
53RISK
open ↗GitHub PoC
CVE-2022-4047 poc
Return Refund and Exchange For WooCommerce < 4.0.9 - Unauthenticated Arbitrary File Upload
48RISK
open ↗GitHub PoC★ 5
Exihibitor Web Ui 1.7.1 RCE, CVE-2019-5029
An exploitable command injection vulnerability exists in the Config editor of the Exhibitor Web UI versions 1.0.9 to 1.7
60RISK
open ↗GitHub PoC
CVE-2023-23752 Joomla Unauthenticated Information Disclosure
[20230201] - Core - Improper access check in webservice endpoints
100RISK
open ↗GitHub PoC★ 86
Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution
Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution
85RISK
open ↗GitHub PoC
mareks1007/cve-2017-16995
The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial
50RISK
open ↗GitHub PoC★ 1
CVE-2023-38831 Proof-of-concept code
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RISK
open ↗GitHub PoC
RCE for Webmin CVE-2019-15107
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera
100RISK
open ↗GitHub PoC
sigridou/CVE-2023-44487-
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISK
open ↗GitHub PoC
hadrian3689/CVE-2023-23752_Joomla
[20230201] - Core - Improper access check in webservice endpoints
100RISK
open ↗GitHub PoC★ 2
Cisco CVE-2023-20198
Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS
100RISK
open ↗GitHub PoC
Porting the CVE-2020-0674 exploit for Windows8.1 and Windows10
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet
93RISK
open ↗GitHub PoC
PoC of CVE-2023-4911
Glibc: buffer overflow in ld.so leading to privilege escalation
100RISK
open ↗GitHub PoC
qailanet/cve-2022-41352-zimbra-rce
An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload arbitrary files through ama
100RISK
open ↗GitHub PoC★ 14
CVE-2023-20273 Exploit PoC
A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject c
100RISK
open ↗GitHub PoC★ 1
Vulnerability in HTTP Protocol Stack Enabling Remote Code Execution and Potential System Crash.
HTTP Protocol Stack Remote Code Execution Vulnerability
70RISK
open ↗GitHub PoC★ 2
Exploit for CVE-2023-46604
Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack
100RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.