Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,107cataloged exploits

34,679CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,443Referência 21,692GitHub PoC 13,812VulnCheck XDB 8,460Nuclei 4,233Metasploit 3,467✓ verified onlyrecent popular risk

13,812 exploits

GitHub PoC★ 29

Atlassian Confluence (CVE-2022-26134) - Unauthenticated Remote code execution (RCE)

CVE-2022-26134CRITICALunder attackransomware05 Jul 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISK

open ↗

GitHub PoC★ 1

CVE-2022-29464 Exploit

CVE-2022-29464CRITICALunder attackransomware05 Jul 2022

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file

100RISK

open ↗

GitHub PoC★ 2

EXP for Spring4Shell(CVE-2022-22965)

CVE-2022-22965CRITICALunder attack05 Jul 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISK

open ↗

GitHub PoC★ 2

exp of CVE-2022-0847

CVE-2022-0847HIGHunder attack05 Jul 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISK

open ↗

GitHub PoC★ 29

An eBPF detection program for CVE-2022-0847

CVE-2022-0847HIGHunder attack05 Jul 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISK

open ↗

GitHub PoC★ 2

CVE-2022-35513 | blink1-pass-decrypt

CVE-2022-35513—05 Jul 2022

The Blink1Control2 application <= 2.2.7 uses weak password encryption and an insecure method of storage.

23RISK

open ↗

GitHub PoC★ 30

POC exploit for CVE-2015-10141

CVE-2015-10141CRITICAL04 Jul 2022

Xdebug Remote Debugger Unauthenticated OS Command Execution

63RISK

open ↗

GitHub PoC★ 5

Visualization, Fuzzing, Exploit and Patch of Baron Samedit Vulnerability

CVE-2021-3156HIGHunder attack04 Jul 2022

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RISK

open ↗

GitHub PoC

CVE-2022-1388, bypassing iControl REST authentication

CVE-2022-1388CRITICALunder attackransomware04 Jul 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISK

open ↗

GitHub PoC★ 1

Atlassian, CVE-2022-26134 An interactive lab showcasing the Confluence Server and Data Center un-authenticated RCE vulnerability.

CVE-2022-26134CRITICALunder attackransomware04 Jul 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISK

open ↗

GitHub PoC

CVE-2022-24706 POC exploit

CVE-2022-24706CRITICALunder attack04 Jul 2022

Remote Code Execution Vulnerability in Packaging

100RISK

open ↗

GitHub PoC

The above investigation of the ES file browser security weakness allows us to see the issue in its entirety

CVE-2019-6447—03 Jul 2022

The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary fi

50RISK

open ↗

GitHub PoC★ 13

CVE-2022-2185 poc

CVE-2022-2185CRITICAL02 Jul 2022

A critical issue has been discovered in GitLab affecting all versions starting from 14.0 prior to 14.10.5, 15.0 prior to

85RISK

open ↗

GitHub PoC★ 5

Ruby反序列化命令执行漏洞（CVE-2019-5420）-vulfocus通关版

CVE-2019-5420—02 Jul 2022

A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess th

60RISK

open ↗

GitHub PoC★ 1

PoC for exploiting CVE-2022-1388 on BIG IP F5

CVE-2022-1388CRITICALunder attackransomware01 Jul 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISK

open ↗

GitHub PoC★ 4

Apache Tomcat DoS (CVE-2022-29885) Exploit

CVE-2022-29885—01 Jul 2022

EncryptInterceptor does not provide complete protection on insecure networks

45RISK

open ↗

GitHub PoC★ 5

Apache Tomcat CVE-2022-29885

CVE-2022-29885—30 Jun 2022

EncryptInterceptor does not provide complete protection on insecure networks

45RISK

open ↗

GitHub PoC★ 1

vesperp/CVE-2021-42237-SiteCore-XP

CVE-2021-42237CRITICALunder attackransomware30 Jun 2022

Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it

100RISK

open ↗

GitHub PoC

A collection of exploits and documentation that can be used to exploit the Linux Dirty Pipe vulnerability.

CVE-2022-0847HIGHunder attack30 Jun 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISK

open ↗

GitHub PoC★ 134

PoC for Nginx 0.6.18 - 1.20.0 Memory Overwrite Vulnerability CVE-2021-23017

CVE-2021-23017—30 Jun 2022

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from t

35RISK

open ↗

GitHub PoC

PoC for exploiting CVE-2022-26134 on Confluence

CVE-2022-26134CRITICALunder attackransomware29 Jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISK

open ↗

GitHub PoC★ 8

This is exploit of CVE-2022-30190 on PowerPoint.

CVE-2022-30190HIGHunder attackransomware29 Jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISK

open ↗

GitHub PoC★ 41

CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability

CVE-2021-34473CRITICALunder attackransomware29 Jun 2022

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISK

open ↗

GitHub PoC★ 5

(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call.

CVE-2015-2291HIGHunder attackransomware28 Jun 2022

(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows all

71RISK

open ↗

GitHub PoC★ 1

Mass Exploit for CVE 2022-29464 on Carbon

CVE-2022-29464CRITICALunder attackransomware28 Jun 2022

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file

100RISK

open ↗

GitHub PoC

A docker container vulnerable to Shellshock - CVE-2014-6271

CVE-2014-6271CRITICALunder attack27 Jun 2022

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISK

open ↗

GitHub PoC★ 9

ProxyLogon (CVE-2021-26855+CVE-2021-27065) Exchange Server RCE (SSRF->GetWebShell)

CVE-2021-26855CRITICALunder attackransomware27 Jun 2022

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISK

open ↗

GitHub PoC★ 2

Follina (CVE-2022-30190) proof-of-concept

CVE-2022-30190HIGHunder attackransomware27 Jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISK

open ↗

GitHub PoC

CVE-2021-26855

CVE-2021-26855CRITICALunder attackransomware27 Jun 2022

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISK

open ↗

GitHub PoC★ 16

Nacos下Spring-Cloud-Gateway CVE-2022-22947利用环境

CVE-2022-22947CRITICALunder attack25 Jun 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.