Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,107cataloged exploits
34,679CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,692GitHub PoC 13,812VulnCheck XDB 8,460Nuclei 4,233Metasploit 3,467✓ verified onlyrecentpopularrisk
13,812 exploits
GitHub PoC★ 57
PoC for CVE-2022-1388_F5_BIG-IP
CVE-2022-1388CRITICALunder attackransomware09 May 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISK
open ↗
GitHub PoC★ 230
POC for CVE-2022-1388
CVE-2022-1388CRITICALunder attackransomware09 May 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISK
open ↗
GitHub PoC★ 37
CVE-2022-1388 F5 BIG-IP iControl REST RCE
CVE-2022-1388CRITICALunder attackransomware09 May 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISK
open ↗
GitHub PoC
Hudi233/CVE-2022-1388
CVE-2022-1388CRITICALunder attackransomware09 May 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISK
open ↗
GitHub PoC★ 1
batch scan CVE-2022-1388
CVE-2022-1388CRITICALunder attackransomware09 May 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISK
open ↗
GitHub PoC★ 2
CVE-2022-1388 POC exploit
CVE-2022-1388CRITICALunder attackransomware09 May 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISK
open ↗
GitHub PoC★ 25
Generate primary obfuscated or secondary obfuscated CVE-2021-44228 or CVE-2021-45046 payloads to evade WAF detection.
CVE-2021-44228CRITICALunder attackransomware09 May 2022
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
open ↗
GitHub PoC★ 147
Atlassian Bitbucket Data Center RCE(CVE-2022-26133) verification.
CVE-2022-26133CRITICAL09 May 2022
SharedSecretClusterAuthenticator in Atlassian Bitbucket Data Center versions 5.14.0 and later before 7.6.14, 7.7.0 and l
70RISK
open ↗
GitHub PoC★ 2
CVE-2022-1388 F5 BIG-IP iControl REST身份验证绕过漏洞
CVE-2022-1388CRITICALunder attackransomware09 May 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISK
open ↗
GitHub PoC
Trinadh465/device_renesas_kernel_AOSP10_r33_CVE-2022-0492
CVE-2022-0492HIGHunder attack09 May 2022
A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. Th
86RISK
open ↗
GitHub PoC★ 8
F5 BIG-IP iControl REST身份验证绕过漏洞
CVE-2022-1388CRITICALunder attackransomware09 May 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISK
open ↗
GitHub PoC★ 48
CVE-2022-24734 PoC
CVE-2022-24734HIGH08 May 2022
Remote code execution in mybb
78RISK
open ↗
GitHub PoC
Files required to demonstrate CVE-2022-0847 vulnerability in Linux Kernel v5.8
CVE-2022-0847HIGHunder attack08 May 2022
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RISK
open ↗
GitHub PoC★ 8
blind-intruder/CVE-2022-1388-RCE-checker-and-POC-Exploit
CVE-2022-1388CRITICALunder attackransomware08 May 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISK
open ↗
GitHub PoC
A vulnerability scanner that detects CVE-2021-21980 vulnerabilities.
CVE-2022-1388CRITICALunder attackransomware07 May 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISK
open ↗
GitHub PoC★ 93
CVE-2022-1388 F5 BIG-IP RCE 批量检测
CVE-2022-1388CRITICALunder attackransomware07 May 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISK
open ↗
GitHub PoC★ 2
fuzzing with libFuzzer，inlude openssl heartbleed (CVE-2014-0160)
CVE-2014-0160HIGHunder attack07 May 2022
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RISK
open ↗
GitHub PoC★ 1
cve-2022-29464 EXP
CVE-2022-29464CRITICALunder attackransomware07 May 2022
Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file
100RISK
open ↗
GitHub PoC
Just proof of concept for Cisco CVE-2020-3452. Using external or internal file base.
CVE-2020-3452HIGHunder attack07 May 2022
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability
100RISK
open ↗
GitHub PoC
jr64/CVE-2015-0311
CVE-2015-0311HIGHunder attack07 May 2022
Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Window
100RISK
open ↗
GitHub PoC★ 6
WordPress Plugin MasterStudy LMS 2.7.5 - Unauthenticated Admin Account Creation
CVE-2022-0441—06 May 2022
MasterStudy LMS < 2.7.6 - Unauthenticated Admin Account Creation
60RISK
open ↗
GitHub PoC★ 28
This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services. There is no data plane exposure; this is a control plane issue only.
CVE-2022-1388CRITICALunder attackransomware06 May 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISK
open ↗
GitHub PoC★ 16
may the poc with you
CVE-2022-1040CRITICALunder attack06 May 2022
An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sopho
100RISK
open ↗
GitHub PoC
Satheesh575555/external_expat_AOSP10_r33_CVE-2022-25236
CVE-2022-25236CRITICAL06 May 2022
xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace
60RISK
open ↗
GitHub PoC★ 1
1
CVE-2022-29464CRITICALunder attackransomware05 May 2022
Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file
100RISK
open ↗
GitHub PoC★ 53
K23605346: BIG-IP iControl REST vulnerability CVE-2022-1388
CVE-2022-1388CRITICALunder attackransomware05 May 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISK
open ↗
GitHub PoC★ 25
Simple script realizado en bash, para revisión de múltiples hosts para CVE-2022-1388 (F5)
CVE-2022-1388CRITICALunder attackransomware05 May 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISK
open ↗
GitHub PoC
CVE-2022-22954 analyst
CVE-2022-22954CRITICALunder attackransomware05 May 2022
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISK
open ↗
GitHub PoC
CVE-2018-17553 PoC
CVE-2018-17553—03 May 2022
An "Unrestricted Upload of File with Dangerous Type" issue with directory traversal in navigate_upload.php in Naviwebs N
60RISK
open ↗
GitHub PoC★ 13
PoC of CVE-2022-24707
CVE-2022-24707HIGH03 May 2022
SQL injection in anuko timetracker
41RISK
open ↗
← previouspage 316 / 461next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.