Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,234cataloged exploits

34,798CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,443Referência 21,796GitHub PoC 13,831VulnCheck XDB 8,460Nuclei 4,237Metasploit 3,467✓ verified onlyrecent popular risk

13,812 exploits

GitHub PoC★ 2

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.

CVE-2022-22965CRITICALunder attack05 Apr 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISK

GitHub PoC★ 40

CVE-2021-22555 exploit rewritten with pipe primitive

CVE-2021-22555HIGHunder attack05 Apr 2022

Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE

100RISK

GitHub PoC★ 1

CVE-2022-22963 research

CVE-2022-22963CRITICALunder attack05 Apr 2022

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po

100RISK

GitHub PoC★ 16

CVE-2022-0185 exploit rewritten with pipe primitive

CVE-2022-0185HIGHunder attack05 Apr 2022

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functio

76RISK

GitHub PoC★ 3

Another spring4shell (Spring core RCE) POC

CVE-2022-22965CRITICALunder attack04 Apr 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISK

GitHub PoC

Proof-of-concept exploit for CVE-2016-1827 on OS X Yosemite.

CVE-2016-1827—04 Apr 2022

The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers

23RISK

GitHub PoC★ 1

PowerShell port of CVE-2022-22965 vulnerability check by colincowie.

CVE-2022-22965CRITICALunder attack04 Apr 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISK

GitHub PoC★ 2

Intentionally vulnerable Spring app to test CVE-2022-22965

CVE-2022-22965CRITICALunder attack04 Apr 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISK

GitHub PoC★ 7

CVE-2022-22965 (Spring4Shell) Proof of Concept

CVE-2022-22965CRITICALunder attack04 Apr 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISK

GitHub PoC★ 2

Spring4Shell - CVE-2022-22965

CVE-2022-22965CRITICALunder attack04 Apr 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISK

GitHub PoC★ 12

Vulnerability scanner for Spring4Shell (CVE-2022-22965)

CVE-2022-22965CRITICALunder attack04 Apr 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISK

GitHub PoC★ 128

A REAL DoS exploit for CVE-2022-21907

CVE-2022-21907CRITICAL04 Apr 2022

HTTP Protocol Stack Remote Code Execution Vulnerability

70RISK

GitHub PoC

Linux “Dirty Pipe” vulnerability gives unprivileged users root access

CVE-2022-0847HIGHunder attack03 Apr 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISK

GitHub PoC★ 8

Nmap Spring4Shell NSE script for Spring Boot RCE (CVE-2022-22965)

CVE-2022-22965CRITICALunder attack03 Apr 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISK

GitHub PoC★ 16

Docker PoC for CVE-2022-22965 with Spring Boot version 2.6.5

CVE-2022-22965CRITICALunder attack03 Apr 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISK

GitHub PoC★ 2

Spring Cloud Function SpEL - cve-2022-22963

CVE-2022-22963CRITICALunder attack03 Apr 2022

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po

100RISK

GitHub PoC

Local privilege escalation for OS X 10.10.5 via CVE-2016-1828.

CVE-2016-1828—02 Apr 2022

The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers

23RISK

GitHub PoC

mwojterski/cve-2022-22965

CVE-2022-22965CRITICALunder attack02 Apr 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISK

GitHub PoC★ 16

CVE-2022-22965\Spring-Core-RCE堪比关于 Apache Log4j2核弹级别漏洞exp的rce一键利用

CVE-2022-22965CRITICALunder attack02 Apr 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISK

GitHub PoC

Environment for CVE-2021-41773 recreation.

CVE-2021-41773HIGHunder attackransomware02 Apr 2022

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISK

GitHub PoC★ 11

CVE-2022-23131漏洞利用工具开箱即用。

CVE-2022-23131CRITICALunder attack02 Apr 2022

Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML

100RISK

GitHub PoC★ 4

ShellShock interactive-shell exploit

CVE-2014-6271CRITICALunder attack02 Apr 2022

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISK

GitHub PoC★ 7

CVE-2022-22965 POC

CVE-2022-22965CRITICALunder attack02 Apr 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISK

GitHub PoC★ 10

tess-ss/SAP-memory-pipes-desynchronization-vulnerability-MPI-CVE-2022-22536

CVE-2022-22536CRITICALunder attack02 Apr 2022

SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and

100RISK

GitHub PoC★ 7

DirtyPipe: Exploit for a new Linux vulnerability known as 'Dirty Pipe(CVE-2022-0847)' allows local users to gain root privileges. The vulnerability is tracked as CVE-2022-0847 and allows a non-privileged user to inject and overwrite data in read-only files, including SUID processes that run as root.

CVE-2022-0847HIGHunder attack02 Apr 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISK

GitHub PoC★ 18

ActiveMQ系列漏洞探测利用工具，包括ActiveMQ 默认口令漏洞及ActiveMQ任意文件写入漏洞（CVE-2016-3088），支持批量探测利用。

CVE-2016-3088CRITICALunder attack02 Apr 2022

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitr

100RISK

GitHub PoC★ 14

Spring Framework RCE via Data Binding on JDK 9+ / spring4shell / CVE-2022-22965

CVE-2022-22965CRITICALunder attack01 Apr 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISK

GitHub PoC★ 2

Prova de conceito para a vulnerabilidade Polkit Pkexec: CVE-2021-4034(Pkexec Local Privilege Escalation)

CVE-2021-4034HIGHunder attack01 Apr 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISK

GitHub PoC★ 4

Spring-0day/CVE-2022-22965

CVE-2022-22965CRITICALunder attack01 Apr 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISK

GitHub PoC★ 12

Spring4Shell (CVE-2022-22965)

CVE-2022-22965CRITICALunder attack01 Apr 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.