Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,107cataloged exploits
34,679CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,692GitHub PoC 13,812VulnCheck XDB 8,460Nuclei 4,233Metasploit 3,467✓ verified onlyrecentpopularrisk
13,812 exploits
GitHub PoC
CVE-2022-26809-RCE
CVE-2022-26809CRITICAL23 Apr 2022
Remote Procedure Call Runtime Remote Code Execution Vulnerability
70RISK
open ↗
GitHub PoC★ 5
mariomamo/CVE-2022-22965
CVE-2022-22965CRITICALunder attack23 Apr 2022
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISK
open ↗
GitHub PoC★ 5
cve-2022-29464 批量脚本
CVE-2022-29464CRITICALunder attackransomware22 Apr 2022
Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file
100RISK
open ↗
GitHub PoC★ 1
0xAgun/CVE-2022-29464
CVE-2022-29464CRITICALunder attackransomware22 Apr 2022
Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file
100RISK
open ↗
GitHub PoC★ 3
Repository containing nse script for vulnerability CVE-2022-29464 known as WSO2 RCE.
CVE-2022-29464CRITICALunder attackransomware22 Apr 2022
Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file
100RISK
open ↗
GitHub PoC
This repository contains a PoC for remote code execution CVE-2022-26809
CVE-2022-26809CRITICAL22 Apr 2022
Remote Procedure Call Runtime Remote Code Execution Vulnerability
70RISK
open ↗
GitHub PoC★ 5
WSO2 RCE (CVE-2022-29464)
CVE-2022-29464CRITICALunder attackransomware22 Apr 2022
Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file
100RISK
open ↗
GitHub PoC
A python script/generator, for generating and exploiting Microsoft vulnerability
CVE-2017-0199HIGHunder attackransomware22 Apr 2022
Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Window
100RISK
open ↗
GitHub PoC★ 2
tufanturhan/wso2-rce-cve-2022-29464
CVE-2022-29464CRITICALunder attackransomware21 Apr 2022
Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file
100RISK
open ↗
GitHub PoC★ 2
Pre-auth RCE bug CVE-2022-29464
CVE-2022-29464CRITICALunder attackransomware21 Apr 2022
Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file
100RISK
open ↗
GitHub PoC★ 1
c4mx/CVE-2022-22965_PoC
CVE-2022-22965CRITICALunder attack21 Apr 2022
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISK
open ↗
GitHub PoC
CVE-2017-9841批量扫描及利用脚本。PHPUnit是其中的一个基于PHP的测试框架。 PHPUnit 4.8.28之前的版本和5.6.3之前的5.x版本中的Util/PHP/eval-stdin.php文件存在安全漏洞。远程攻击者可通过发送以‘<?php’字符串开头的HTTP POST数据利用该漏洞执行任意PHP代码。
CVE-2017-9841CRITICALunder attack20 Apr 2022
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP c
100RISK
open ↗
GitHub PoC★ 377
WSO2 RCE (CVE-2022-29464) exploit and writeup.
CVE-2022-29464CRITICALunder attackransomware20 Apr 2022
Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file
100RISK
open ↗
GitHub PoC
CVE-2021-4034 PoC
CVE-2021-4034HIGHunder attack20 Apr 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC
MS CVE 2019-0708 Python Exploit
CVE-2019-0708CRITICALunder attackransomware20 Apr 2022
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RISK
open ↗
GitHub PoC★ 1
Phantomlancer123/CVE-2017-0199
CVE-2017-0199HIGHunder attackransomware20 Apr 2022
Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Window
100RISK
open ↗
GitHub PoC
ms15-034 or CVE-2015-1635 批量扫描
CVE-2015-1635CRITICALunder attack19 Apr 2022
HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold an
100RISK
open ↗
GitHub PoC★ 2
Watchguard RCE POC CVE-2022-26318
CVE-2022-26318CRITICALunder attack18 Apr 2022
On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. This vulner
100RISK
open ↗
GitHub PoC
CVE-2021-42013 - Apache 2.4.50
CVE-2021-42013CRITICALunder attackransomware18 Apr 2022
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
100RISK
open ↗
GitHub PoC
CVE-2019-15107
CVE-2019-15107CRITICALunder attackransomware18 Apr 2022
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera
100RISK
open ↗
GitHub PoC★ 9
Scripted Linux Privilege Escalation for the CVE-2022-0847 "Dirty Pipe" vulnerability
CVE-2022-0847HIGHunder attack17 Apr 2022
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RISK
open ↗
GitHub PoC★ 1
CVE-2015-1635-POC，指定IP与端口验证HTTP.sys漏洞是否存在
CVE-2015-1635CRITICALunder attack17 Apr 2022
HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold an
100RISK
open ↗
GitHub PoC★ 2
Repository containing nse script for vulnerability CVE-2022-21907. It is a component (IIS) vulnerability on Windows. It allows remote code execution. The vulnerability affects the kernel module http. sys, which handles most basic IIS operations.
CVE-2022-21907CRITICAL16 Apr 2022
HTTP Protocol Stack Remote Code Execution Vulnerability
70RISK
open ↗
GitHub PoC★ 148
Laravel RCE Exploit PoC - CVE-2021-3129 (user-friendly with automatic log path detection)
CVE-2021-3129CRITICALunder attackransomware16 Apr 2022
Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra
100RISK
open ↗
GitHub PoC★ 53
Exploit for CVE-2021-22204 (ExifTool) - Arbitrary Code Execution
CVE-2021-22204MEDIUMunder attack16 Apr 2022
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code exec
100RISK
open ↗
GitHub PoC
mhurts/CVE-2022-22954-POC
CVE-2022-22954CRITICALunder attackransomware16 Apr 2022
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISK
open ↗
GitHub PoC★ 4
CVE-2022-22954 VMware Workspace ONE Access free marker SSTI
CVE-2022-22954CRITICALunder attackransomware15 Apr 2022
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISK
open ↗
GitHub PoC★ 2
tufanturhan/CVE-2022-21971-Windows-Runtime-RCE
CVE-2022-21971HIGHunder attack15 Apr 2022
Windows Runtime Remote Code Execution Vulnerability
83RISK
open ↗
GitHub PoC
tufanturhan/CVE-2022-0847-L-nux-PrivEsc
CVE-2022-0847HIGHunder attack15 Apr 2022
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RISK
open ↗
GitHub PoC★ 11
Spring Cloud Gateway Actuator API SpEL Code Injection (CVE-2022-22947)
CVE-2022-22947CRITICALunder attack15 Apr 2022
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe
100RISK
open ↗
← previouspage 318 / 461next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.