Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,107cataloged exploits
34,679CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,692GitHub PoC 13,812VulnCheck XDB 8,460Nuclei 4,233Metasploit 3,467✓ verified onlyrecentpopularrisk
13,812 exploits
GitHub PoC★ 1
CVE-2022-22620: Use-after-free in Safari
CVE-2022-22620HIGHunder attack14 Jun 2022
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS
76RISK
open ↗
GitHub PoC
CVE-2022-30190 : CVE 0-day MS Offic RCE aka msdt follina
CVE-2022-30190HIGHunder attackransomware13 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗
GitHub PoC★ 106
PoC for CVE-2022-26809, analisys and considerations are shown in the github.io.
CVE-2022-26809CRITICAL13 Jun 2022
Remote Procedure Call Runtime Remote Code Execution Vulnerability
70RISK
open ↗
GitHub PoC★ 1
CVE-2022-30525 POC
CVE-2022-30525CRITICALunder attack13 Jun 2022
A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat
100RISK
open ↗
GitHub PoC★ 2
An Unofficial Patch Follina CVE-2022-30190 (patch) by micrisoft Guidelines.
CVE-2022-30190HIGHunder attackransomware13 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗
GitHub PoC★ 4
CVE-2022-26134 - Pre-Auth Remote Code Execution via OGNL Injection
CVE-2022-26134CRITICALunder attackransomware13 Jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISK
open ↗
GitHub PoC
ahmetfurkans/CVE-2022-22718
CVE-2022-22718HIGHunder attack12 Jun 2022
Windows Print Spooler Elevation of Privilege Vulnerability
76RISK
open ↗
GitHub PoC
Log4Shell CVE-2021-44228 Demo
CVE-2021-44228CRITICALunder attackransomware12 Jun 2022
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
open ↗
GitHub PoC★ 1
A OS Command Injection Vulnerability in the CGI Program of Zyxel
CVE-2022-30525CRITICALunder attack12 Jun 2022
A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat
100RISK
open ↗
GitHub PoC★ 2
seymanurmutlu/CVE-2022-24086-CVE-2022-24087
CVE-2022-24086CRITICALunder attack12 Jun 2022
Adobe Commerce checkout improper input validation leads to remote code execution
100RISK
open ↗
GitHub PoC
These are the source codes of the Python scripts to apply the temporary protection against the CVE-2022-30190 vulnerability (Follina)
CVE-2022-30190HIGHunder attackransomware12 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗
GitHub PoC
These are two Python scripts compiled to easily and quickly apply temporary protection against the CVE-2022-30190 vulnerability (Follina)
CVE-2022-30190HIGHunder attackransomware11 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗
GitHub PoC
Practising technical writing with researching CVE-2022-22954 VMware Workspace ONE Access RCE vulnerability.
CVE-2022-22954CRITICALunder attackransomware11 Jun 2022
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISK
open ↗
GitHub PoC★ 1
check CVE-2021-40438
CVE-2021-40438CRITICALunder attackransomware10 Jun 2022
mod_proxy SSRF
100RISK
open ↗
GitHub PoC★ 3
To determine if an APK is vulnerable to CVE-2017-13156
CVE-2017-13156—10 Jun 2022
An elevation of privilege vulnerability in the Android system (art). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0,
43RISK
open ↗
GitHub PoC
CVE-2022-26134, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. This is CVE-2022-26134 expoitation script
CVE-2022-26134CRITICALunder attackransomware10 Jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISK
open ↗
GitHub PoC★ 3
[CVE-2022-26134] Attlasian Confluence RCE
CVE-2022-26134CRITICALunder attackransomware10 Jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISK
open ↗
GitHub PoC★ 3
NEW EXPLOIT FOR TP LINK
CVE-2022-30075—10 Jun 2022
In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote
35RISK
open ↗
GitHub PoC★ 2
proof of concept to CVE-2022-30190 (follina)
CVE-2022-30190HIGHunder attackransomware10 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗
GitHub PoC★ 7
PoC for Sourcegraph Gitserver < 3.37.0 RCE (CVE-2022-23642)
CVE-2022-23642HIGH10 Jun 2022
Code Injection in Sourcegraph
78RISK
open ↗
GitHub PoC
Mitigation for CVE-2022-30190
CVE-2022-30190HIGHunder attackransomware10 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗
GitHub PoC
this is my simple article about CVE 2022-30190 (Follina) analysis. I use the lab from Letsdefend.
CVE-2022-30190HIGHunder attackransomware10 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗
GitHub PoC★ 33
Exploit Microsoft Zero-Day Vulnerability Follina (CVE-2022-30190)
CVE-2022-30190HIGHunder attackransomware09 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗
GitHub PoC★ 3
CVE-2022-26134
CVE-2022-26134CRITICALunder attackransomware09 Jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISK
open ↗
GitHub PoC
Python exploit for CVE-2011-2523 (VSFTPD 2.3.4 Backdoor Command Execution)
CVE-2011-2523—09 Jun 2022
vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.
60RISK
open ↗
GitHub PoC
Bash poc for CVE-2022-1609 WordPress Weblizar Backdoor
CVE-2022-1609CRITICAL09 Jun 2022
The School Management < 9.9.7 - Unauthenticated RCE via REST api
75RISK
open ↗
GitHub PoC★ 3
Bash poc for CVE-2022-1609 WordPress Weblizar Backdoor
CVE-2022-1609CRITICAL09 Jun 2022
The School Management < 9.9.7 - Unauthenticated RCE via REST api
75RISK
open ↗
GitHub PoC★ 1
Repository containing the compromised certificate seen in recent CVE-2022-30190 (Follina) attacks.
CVE-2022-30190HIGHunder attackransomware09 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open ↗
GitHub PoC
Python exploit for CVE-2011-2523 (VSFTPD 2.3.4 Backdoor Command Execution)
CVE-2011-2523—09 Jun 2022
vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.
60RISK
open ↗
GitHub PoC★ 3
批量检测Spring Cloud Gateway 远程代码执行漏洞 Spring_Cloud_Gateway_RCE_POC-CVE-2022-22947
CVE-2022-22947CRITICALunder attack08 Jun 2022
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe
100RISK
open ↗
← previouspage 308 / 461next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.