Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,107cataloged exploits

34,679CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,443Referência 21,692GitHub PoC 13,812VulnCheck XDB 8,460Nuclei 4,233Metasploit 3,467✓ verified onlyrecent popular risk

13,812 exploits

GitHub PoC★ 8

Spring Cloud Function SPEL表达式注入漏洞（CVE-2022-22963）

CVE-2022-22963CRITICALunder attack14 Apr 2022

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po

100RISK

open ↗

GitHub PoC★ 1

Proof of Concept for exploiting VMware CVE-2022-22954

CVE-2022-22954CRITICALunder attackransomware14 Apr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RISK

open ↗

GitHub PoC★ 32

Detects attempts and successful exploitation of CVE-2022-26809

CVE-2022-26809CRITICAL14 Apr 2022

Remote Procedure Call Runtime Remote Code Execution Vulnerability

70RISK

open ↗

GitHub PoC★ 7

auduongxuan/CVE-2022-26809

CVE-2022-26809CRITICAL14 Apr 2022

Remote Procedure Call Runtime Remote Code Execution Vulnerability

70RISK

open ↗

GitHub PoC★ 27

Remote Code Execution Exploit in the RPC Library

CVE-2022-26809CRITICAL14 Apr 2022

Remote Procedure Call Runtime Remote Code Execution Vulnerability

70RISK

open ↗

GitHub PoC★ 3

CVE-2022-0185 exploit

CVE-2022-0185HIGHunder attack14 Apr 2022

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functio

76RISK

open ↗

GitHub PoC★ 19

The poc for CVE-2022-26809 RCE via RPC will be updated here.

CVE-2022-26809CRITICAL14 Apr 2022

Remote Procedure Call Runtime Remote Code Execution Vulnerability

70RISK

open ↗

GitHub PoC

VVeakee/CVE-2017-12149

CVE-2017-12149CRITICALunder attackransomware14 Apr 2022

In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter

100RISK

open ↗

GitHub PoC★ 3

A Zeek detector for CVE-2022-24497.

CVE-2022-24497CRITICAL13 Apr 2022

Windows Network File System Remote Code Execution Vulnerability

60RISK

open ↗

GitHub PoC★ 3

Easy!Appointments < 1.4.3 - Unauthenticated PII (events) disclosure

CVE-2022-0482CRITICAL13 Apr 2022

Exposure of Private Personal Information to an Unauthorized Actor in alextselegidis/easyappointments

75RISK

open ↗

GitHub PoC★ 68

CVE-2022-22954 VMware Workspace ONE Access freemarker SSTI 漏洞命令执行、批量检测脚本、文件写入

CVE-2022-22954CRITICALunder attackransomware13 Apr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RISK

open ↗

GitHub PoC

VMware Workspace ONE Access远程代码执行漏洞 / Code By:Jun_sheng

CVE-2022-22954CRITICALunder attackransomware13 Apr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RISK

open ↗

GitHub PoC★ 16

VMware Workspace ONE Access and Identity Manager RCE via SSTI - Test script for shodan, file or manual.

CVE-2022-22954CRITICALunder attackransomware13 Apr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RISK

open ↗

GitHub PoC★ 2

AkuCyberSec/CVE-2017-8917-Joomla-370-SQL-Injection

CVE-2017-8917—13 Apr 2022

SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspeci

60RISK

open ↗

GitHub PoC★ 3

A Zeek CVE-2022-24491 detector.

CVE-2022-24491CRITICAL13 Apr 2022

Windows Network File System Remote Code Execution Vulnerability

60RISK

open ↗

GitHub PoC

exploitation script tryhackme

CVE-2022-22965CRITICALunder attack13 Apr 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISK

open ↗

GitHub PoC

Wangsafz/cve-2017-0358.sh

CVE-2017-0358HIGH12 Apr 2022

ntfs-3g: Modprobe influence vulnerability via environment variables

56RISK

open ↗

GitHub PoC★ 1

Greenwolf/CVE-2022-1175

CVE-2022-1175HIGH12 Apr 2022

Improper neutralization of user input in GitLab CE/EE versions 14.4 before 14.7.7, all versions starting from 14.8 befor

63RISK

open ↗

GitHub PoC★ 4

Greenwolf/CVE-2022-1162

CVE-2022-1162CRITICAL12 Apr 2022

A hardcoded password was set for accounts registered using an OmniAuth provider (e.g. OAuth, LDAP, SAML) in GitLab CE/EE

85RISK

open ↗

GitHub PoC★ 23

spring4shell | CVE-2022-22965

CVE-2022-22965CRITICALunder attack12 Apr 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISK

open ↗

GitHub PoC★ 3

TerraMaster TOS Unauthenticated Remote Command Execution(RCE) Vulnerability CVE-2022-24990

CVE-2022-24990CRITICALunder attackransomware12 Apr 2022

TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agen

100RISK

open ↗

GitHub PoC★ 1

mumu2020629/-CVE-2022-22954-scanner

CVE-2022-22954CRITICALunder attackransomware12 Apr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RISK

open ↗

GitHub PoC

lucksec/VMware-CVE-2022-22954

CVE-2022-22954CRITICALunder attackransomware12 Apr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RISK

open ↗

GitHub PoC★ 1

corelight/cve-2022-22954

CVE-2022-22954CRITICALunder attackransomware12 Apr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RISK

open ↗

GitHub PoC★ 12

提供批量扫描URL以及执行命令功能。Workspace ONE Access 模板注入漏洞，可执行任意代码

CVE-2022-22954CRITICALunder attackransomware12 Apr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RISK

open ↗

GitHub PoC★ 10

PoC for CVE-2022-22954 - VMware Workspace ONE Access Freemarker Server-Side Template Injection

CVE-2022-22954CRITICALunder attackransomware12 Apr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RISK

open ↗

GitHub PoC★ 1

CVE-2022-22954 Açığı test etme

CVE-2022-22954CRITICALunder attackransomware12 Apr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RISK

open ↗

GitHub PoC★ 279

POC for VMWARE CVE-2022-22954

CVE-2022-22954CRITICALunder attackransomware11 Apr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RISK

open ↗

GitHub PoC

G01d3nW01f/CVE-2022-22963

CVE-2022-22963CRITICALunder attack11 Apr 2022

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po

100RISK

open ↗

GitHub PoC★ 11

CVE-2022-22954 is a server-side template injection vulnerability in the VMware Workspace ONE Access and Identity Manager

CVE-2022-22954CRITICALunder attackransomware11 Apr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.