Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,008cataloged exploits

34,638CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,443Referência 21,662GitHub PoC 13,743VulnCheck XDB 8,460Nuclei 4,233Metasploit 3,467✓ verified onlyrecent popular risk

13,743 exploits

GitHub PoC

lkduy2602/Detecting-CVE-2018-15708-Vulnerabilities

CVE-2018-15708—01 Dec 2022

Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP r

60RISK

open ↗

GitHub PoC★ 2

Exchange CVE '22

CVE-2022-41082HIGHunder attackransomware01 Dec 2022

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISK

open ↗

GitHub PoC★ 2

Validation of Arbitrary File Read Vulnerabilities in Dell OpenManage Server Administrator (OMSA) - CVE-2016-4004, CVE-2021-21514 and CVE-2020-5377.

CVE-2020-5377CRITICAL30 Nov 2022

Dell EMC OpenManage Server Administrator (OMSA) versions 9.4 and prior contain multiple path traversal vulnerabilities.

60RISK

open ↗

GitHub PoC★ 2

Validation of Arbitrary File Read Vulnerabilities in Dell OpenManage Server Administrator (OMSA) - CVE-2016-4004, CVE-2021-21514 and CVE-2020-5377.

CVE-2016-4004—30 Nov 2022

Directory traversal vulnerability in Dell OpenManage Server Administrator (OMSA) 8.2 allows remote authenticated adminis

23RISK

open ↗

GitHub PoC★ 3

revanmalang/CVE-2022-1388

CVE-2022-1388CRITICALunder attackransomware30 Nov 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISK

open ↗

GitHub PoC

fei9747/CVE-2016-5195

CVE-2016-5195HIGHunder attack29 Nov 2022

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISK

open ↗

GitHub PoC★ 1

fei9747/CVE-2021-3493

CVE-2021-3493HIGHunder attack29 Nov 2022

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o

98RISK

open ↗

GitHub PoC

fei9747/CVE-2021-4034

CVE-2021-4034HIGHunder attack29 Nov 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISK

open ↗

GitHub PoC

fei9747/CVE-2017-16995

CVE-2017-16995—29 Nov 2022

The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial

50RISK

open ↗

GitHub PoC★ 1

CVE-2022-22965 proof of concept

CVE-2022-22965CRITICALunder attack28 Nov 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISK

open ↗

GitHub PoC

ClemExp/CVE-2022-22965-PoC

CVE-2022-22965CRITICALunder attack28 Nov 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISK

open ↗

GitHub PoC★ 100

clif is a command-line interface (CLI) application fuzzer, pretty much what wfuzz or ffuf are for web. It was inspired by sudo vulnerability CVE-2021-3156 and the fact that for some reasons, Google's afl-fuzz doesn't allow for unlimited argument or option specification.

CVE-2021-3156HIGHunder attack28 Nov 2022

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RISK

open ↗

GitHub PoC★ 1

CVE-2017-9833 POC

CVE-2017-9833—25 Nov 2022

/cgi-bin/wapopen in Boa 0.94.14rc21 allows the injection of "../.." using the FILECAMERA variable (sent by GET) to read

50RISK

open ↗

GitHub PoC★ 2

CVE-2022-39197

CVE-2022-39197MEDIUMunder attack24 Nov 2022

An XSS (Cross Site Scripting) vulnerability was found in HelpSystems Cobalt Strike through 4.7 that allowed a remote att

75RISK

open ↗

GitHub PoC

dr4g0n23/CVE-2020-1472

CVE-2020-1472MEDIUMunder attackransomware22 Nov 2022

Netlogon Elevation of Privilege Vulnerability

100RISK

open ↗

GitHub PoC★ 7

grails/GSSC-CVE-2022-41923

CVE-2022-41923CRITICAL22 Nov 2022

Grails Spring Security Core plugin vulnerable to privilege escalation

48RISK

open ↗

GitHub PoC★ 8

PoC for CVE-2021-31166 and CVE-2022-21907

CVE-2022-21907CRITICAL22 Nov 2022

HTTP Protocol Stack Remote Code Execution Vulnerability

70RISK

open ↗

GitHub PoC★ 13

Apache HTTP-Server 2.4.49-2.4.50 Path Traversal & Remote Code Execution PoC (CVE-2021-41773 & CVE-2021-42013)

CVE-2021-41773HIGHunder attackransomware22 Nov 2022

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISK

open ↗

GitHub PoC★ 8

PoC for CVE-2021-31166 and CVE-2022-21907

CVE-2021-31166CRITICALunder attack22 Nov 2022

HTTP Protocol Stack Remote Code Execution Vulnerability

100RISK

open ↗

GitHub PoC★ 1

CVE-2017-9841

CVE-2017-9841CRITICALunder attack21 Nov 2022

Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP c

100RISK

open ↗

GitHub PoC★ 1

CVE-1999-1053 Proof-of-Concept Exploit

CVE-1999-1053—21 Nov 2022

guestbook.pl cleanses user-inserted SSI commands by removing text between "" separators, which allows remo

60RISK

open ↗

GitHub PoC★ 7

修改版CVE-2022-0847

CVE-2022-0847HIGHunder attack21 Nov 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISK

open ↗

GitHub PoC★ 5

Python Script to exploit RCE of CVE-2022-42889

CVE-2022-42889—21 Nov 2022

Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults

60RISK

open ↗

GitHub PoC

ARBITAR FILE UPLOAD LEADS TO "delete every file for Denial of Service (using 'rm -rf *.*' in the code), reverse connection (using '.asp' webshell), backdoor , Escalation of Privileges, etc".

CVE-2020-23591CRITICAL20 Nov 2022

A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an attacker t

48RISK

open ↗

GitHub PoC

REMOTE CODE EXECUTION found in "OPTILINK OP-XT71000N".

CVE-2020-23583CRITICAL20 Nov 2022

OPTILINK OP-XT71000N V2.2 is vulnerable to Remote Code Execution. The issue occurs when the attacker sends an arbitrary

48RISK

open ↗

GitHub PoC

REMOTE CODE EXECUTION

CVE-2020-23584CRITICAL20 Nov 2022

Unauthenticated remote code execution in OPTILINK OP-XT71000N, Hardware Version: V2.2 occurs when the attacker passes ar

60RISK

open ↗

GitHub PoC★ 8

A Command Line based python tool for exploit Zero-Day vulnerability in MSDT (Microsoft Support Diagnostic Tool) also know as 'Follina' CVE-2022-30190.

CVE-2022-30190HIGHunder attackransomware19 Nov 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISK

open ↗

GitHub PoC

Vulnerable configuration Apache HTTP Server version 2.4.49/2.4.50

CVE-2021-42013CRITICALunder attackransomware18 Nov 2022

Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

100RISK

open ↗

GitHub PoC

Vulnerable configuration Apache HTTP Server version 2.4.49

CVE-2021-41773HIGHunder attackransomware18 Nov 2022

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISK

open ↗

GitHub PoC★ 1

CVE-2022-0441 - MasterStudy LMS 2.7.6

CVE-2022-0441—18 Nov 2022

MasterStudy LMS < 2.7.6 - Unauthenticated Admin Account Creation

60RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.