Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
75,902cataloged exploits
34,597CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,624GitHub PoC 13,727VulnCheck XDB 8,410Nuclei 4,231Metasploit 3,467✓ verified onlyrecentpopularrisk
13,727 exploits
GitHub PoC★ 2
Python script to exploit PlaySMS before 1.4.3
PlaySMS before 1.4.3 does not sanitize inputs from a malicious string.
100RISK
open ↗GitHub PoC★ 1
CVE-2022-23305 Log4J JDBCAppender SQl injection POC
SQL injection in JDBC Appender in Apache Log4j V1
60RISK
open ↗GitHub PoC★ 1
Learn what is BlueJam CVE-2017-0781
A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1
28RISK
open ↗GitHub PoC★ 46
A PoC exploit for CVE-2017-7921 - Hikvision Camera Series Improper Authentication Vulnerability.
An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16
100RISK
open ↗GitHub PoC★ 1
ImageMagick Arbitrary Read Files - CVE-2022-44268
ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulti
55RISK
open ↗GitHub PoC★ 1
NetScaler (Citrix ADC) CVE-2023-3519 Scanner
Unauthenticated remote code execution
100RISK
open ↗GitHub PoC★ 11
CVE-2023-3519 vuln for nuclei scanner
Unauthenticated remote code execution
100RISK
open ↗GitHub PoC★ 1
lakshit1212/CVE-2021-23017-PoC
A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from t
35RISK
open ↗GitHub PoC★ 86
Accurately fingerprint and detect vulnerable (and patched!) versions of Netscaler / Citrix ADC to CVE-2023-3519
Unauthenticated remote code execution
100RISK
open ↗GitHub PoC
PowerShell Script for initial mitigation of vulnerability
Windows Search Remote Code Execution Vulnerability
93RISK
open ↗GitHub PoC★ 4
A PoC exploit for CVE-2010-4231 - Directory Traversal Vulnerability in Camtron and TecVoz IP Cameras.
Directory traversal vulnerability in the web-based administration interface on the Camtron CMNC-200 Full HD IP Camera an
43RISK
open ↗GitHub PoC★ 2
A PoC exploit for CVE-2015-2166 - Directory Traversal Vulnerability in Ericsson Drutt Mobile Service Delivery Platform (MSDP)
Directory traversal vulnerability in the Instance Monitor in Ericsson Drutt Mobile Service Delivery Platform (MSDP) 4, 5
43RISK
open ↗GitHub PoC
Muhammad-Ali007/Log4j_CVE-2021-44228
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
open ↗GitHub PoC★ 1
This shellscript given the OrgKey 0 will parse the header of the base64 artifacts found in MOVEit Logs and decrypt the Serialized object used a payload
In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023.
100RISK
open ↗GitHub PoC★ 2
This script allows for remote code execution (RCE) on Oracle WebLogic Server
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISK
open ↗GitHub PoC★ 1
Muhammad-Ali007/Follina_MSDT_CVE-2022-30190
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗GitHub PoC★ 2
Automating Exploitation of CVE-2022-44268 ImageMagick Arbitrary File Read
ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulti
55RISK
open ↗GitHub PoC★ 15
Script to check for CVE-2023-36884 hardening
Windows Search Remote Code Execution Vulnerability
93RISK
open ↗GitHub PoC
d0x-awrqxavc/CVE-2019-7609-KibanaRCE
Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker
100RISK
open ↗GitHub PoC★ 6
Integrate Google Drive <= 1.1.99 - Missing Authorization via REST API Endpoints
WordPress Integrate Google Drive plugin <= 1.1.99 - Unauthenticated Broken Access Control vulnerability
63RISK
open ↗GitHub PoC★ 4
NyaMeeEain/CVE-2022-28171-POC
The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to t
53RISK
open ↗GitHub PoC
Fuel CMS 1.4.1 - Remote Code Execution - Python 3.x
FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca
60RISK
open ↗GitHub PoC★ 2
This is an emergency solution while Microsoft addresses the vulnerability.
Windows Search Remote Code Execution Vulnerability
93RISK
open ↗GitHub PoC★ 1
CVE-2023-33592批量漏洞利用程序
Lost and Found Information System v1.0 was discovered to contain a SQL injection vulnerability via the component /php-lf
23RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.