Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,107cataloged exploits
34,679CVEs with public exploitation
24,695lab-tested
13,812 exploits
GitHub PoC3
Python script to exploit CVE-2021-35064 and CVE-2021-36356
CVE-2021-3506402 Jun 2022
KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo. Sudoers permits runn
60RISK
open
GitHub PoC1
CVE-2020-2551 Exploiter
CVE-2020-2551CRITICALunder attack02 Jun 2022
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppor
100RISK
open
GitHub PoC1
ITMarcin2211/CVE-2022-30190
CVE-2022-30190HIGHunder attackransomware02 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC2
A very simple MSDT "Follina" exploit **patched**
CVE-2022-30190HIGHunder attackransomware02 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC20
CVE-2022-30190 | MS-MSDT Follina One Click
CVE-2022-30190HIGHunder attackransomware02 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC
Simple Follina poc exploit
CVE-2022-30190HIGHunder attackransomware02 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC
PDQ Package I created for CVE-2022-30190
CVE-2022-30190HIGHunder attackransomware02 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC2
The CVE-2022-30190-follina Workarounds Patch
CVE-2022-30190HIGHunder attackransomware02 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC2
swaiist/CVE-2022-30190-Fix
CVE-2022-30190HIGHunder attackransomware02 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC2
gyaansastra/CVE-2022-30190
CVE-2022-30190HIGHunder attackransomware02 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC2
MSDT protocol disabler (CVE-2022-30190 patch tool)
CVE-2022-30190HIGHunder attackransomware02 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC390
CVE-2022-30190-follina.py-修改版,可以自定义word模板,方便实战中钓鱼使用。
CVE-2022-30190HIGHunder attackransomware02 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC23
A tool written in Go that scans files & directories for the Follina exploit (CVE-2022-30190)
CVE-2022-30190HIGHunder attackransomware02 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC1
Mitigates the "Folina"-ZeroDay (CVE-2022-30190)
CVE-2022-30190HIGHunder attackransomware02 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC
CVE-2022-30190 or "Follina" 0day proof of concept
CVE-2022-30190HIGHunder attackransomware01 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC7
MS-MSDT Follina CVE-2022-30190 PoC document generator
CVE-2022-30190HIGHunder attackransomware01 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC
Proof of Concept zu MSDT-Follina - CVE-2022-30190. ÜBERPRÜFUNG DER WIRKSAMKEIT VON MICROSOFT DEFNEDER IN DER JEWEILS AKTUELLSTEN WINDOWS 10 VERSION.
CVE-2022-30190HIGHunder attackransomware01 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC4
Removes the ability for MSDT to run, in response to CVE-2022-30190 (Follina)
CVE-2022-30190HIGHunder attackransomware01 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC3
An NSIS script that helps deploy and roll back the mitigation registry patch for CVE-2022-30190 as recommended by Microsoft
CVE-2022-30190HIGHunder attackransomware01 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC
Vaisakhkm2625/MSDT-0-Day-CVE-2022-30190-Poc
CVE-2022-30190HIGHunder attackransomware01 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC
mitespsoc/CVE-2022-30190-POC
CVE-2022-30190HIGHunder attackransomware01 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC8
Just another PoC for the new MSDT-Exploit
CVE-2022-30190HIGHunder attackransomware01 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC
hscorpion/CVE-2022-30190
CVE-2022-30190HIGHunder attackransomware01 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC17
Follina MS-MSDT 0-day MS Office RCE (CVE-2022-30190) PoC in Go
CVE-2022-30190HIGHunder attackransomware01 Jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISK
open
GitHub PoC
Python script to exploit CVE-2022-22954 and then exploit CVE-2022-22960
CVE-2022-22954CRITICALunder attackransomware01 Jun 2022
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISK
open
GitHub PoC1
A proof of concept of an SEH overflow with arbitrary dll injection
CVE-2010-530101 Jun 2022
Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a HEAD re
28RISK
open
GitHub PoC4
Python script to exploit CVE-2022-22954 and then exploit CVE-2022-22960
CVE-2022-22954CRITICALunder attackransomware01 Jun 2022
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISK
open
GitHub PoC
Python script to exploit CVE-2022-29303
CVE-2022-29303CRITICALunder attack01 Jun 2022
SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.
100RISK
open
GitHub PoC
Exploit for Apache 2.4.50 (CVE-2021-42013)
CVE-2021-42013CRITICALunder attackransomware31 May 2022
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
100RISK
open
GitHub PoC
JCPpeiqi/-cve-2021-46381
CVE-2021-4638131 May 2022
Local File Inclusion due to path traversal in D-Link DAP-1620 leads to unauthorized internal files reading [/etc/passwd]
50RISK
open
previouspage 311 / 461next

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.