Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,313cataloged exploits

34,834CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,443Referência 21,797GitHub PoC 13,885VulnCheck XDB 8,484Nuclei 4,237Metasploit 3,467✓ verified onlyrecent popular risk

13,885 exploits

GitHub PoC★ 2

An "Incorrect Use of a Privileged API" vulnerability in PrintixService.exe, in Printix's "Printix Secure Cloud Print Management", Version 1.3.1106.0 and below allows a Local Or Remote attacker the ability change all HKEY Windows Registry values as SYSTEM context via the UITasks.PersistentRegistryData parameter.

CVE-2022-25089—10 Feb 2022

Printix Secure Cloud Print Management through 1.3.1106.0 incorrectly uses Privileged APIs to modify values in HKEY_LOCAL

28RISK

GitHub PoC

docker lab setup for kibana-7609

CVE-2019-7609CRITICALunder attack10 Feb 2022

Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker

100RISK

GitHub PoC★ 795

Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE)

CVE-2022-21999HIGHunder attackransomware08 Feb 2022

Windows Print Spooler Elevation of Privilege Vulnerability

98RISK

GitHub PoC

CVE-2012-1876 win7_x86和x64平台分析，EXP、POC代码和分析文档

CVE-2012-1876—08 Feb 2022

Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle objects in memory, which allo

50RISK

GitHub PoC★ 10

kernel exploit

CVE-2015-1328—07 Feb 2022

The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does no

50RISK

GitHub PoC★ 2

Worm written in python, abuses CVE-2020-7247

CVE-2020-7247CRITICALunder attack07 Feb 2022

smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to

100RISK

GitHub PoC★ 49

lpe poc for cve-2022-21882

CVE-2022-21882HIGHunder attack07 Feb 2022

Win32k Elevation of Privilege Vulnerability

98RISK

GitHub PoC★ 237

Cisco Anyconnect VPN unauth RCE (rwx stack)

CVE-2022-20699CRITICALunder attack07 Feb 2022

Cisco Small Business RV Series Routers Vulnerabilities

100RISK

GitHub PoC★ 6

Wordpress Plugin Simple Job Board 2.9.3 LFI Vulnerability (CVE-2020-35749) proof of concept exploit

CVE-2020-35749—06 Feb 2022

Directory traversal vulnerability in class-simple_job_board_resume_download_handler.php in the Simple Board Job plugin 2

50RISK

GitHub PoC

giardinas-dev/audit-xss-cve-2020-7934

CVE-2020-7934—04 Feb 2022

In LifeRay Portal CE 7.1.0 through 7.2.1 GA2, the First Name, Middle Name, and Last Name fields for user accounts in MyA

23RISK

GitHub PoC

IAmNewbieZ/CVE-2021-44228

CVE-2021-44228CRITICALunder attackransomware04 Feb 2022

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

GitHub PoC★ 8

PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec in Python

CVE-2021-4034HIGHunder attack04 Feb 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISK

GitHub PoC★ 1

Apache HTTP Server 2.4.50 - RCE Lab

CVE-2021-42013CRITICALunder attackransomware03 Feb 2022

Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

100RISK

GitHub PoC

Kayky-cmd/CVE-2019-6447--.

CVE-2019-6447—03 Feb 2022

The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary fi

50RISK

GitHub PoC★ 196

L4ys/CVE-2022-21882

CVE-2022-21882HIGHunder attack03 Feb 2022

Win32k Elevation of Privilege Vulnerability

98RISK

GitHub PoC★ 8

CVE-2022-21882

CVE-2022-21882HIGHunder attack01 Feb 2022

Win32k Elevation of Privilege Vulnerability

98RISK

GitHub PoC

Study on Linux kernel code injection via CVE-2014-3153 (Towelroot)

CVE-2014-3153HIGHunder attack01 Feb 2022

The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two diff

98RISK

GitHub PoC

qkrtjsrbs315/CVE-2013-1763

CVE-2013-1763—01 Feb 2022

Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows l

23RISK

GitHub PoC★ 9

CVE-2021-3560 analysis

CVE-2021-3560HIGHunder attack31 Jan 2022

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile

91RISK

GitHub PoC

Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an attacker runs a specially crafted application, aka "Windows COM Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-0214.

CVE-2017-0213HIGHunder attackransomware29 Jan 2022

Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Ser

93RISK

GitHub PoC★ 3

CVE-2013-3660的x64 win7平台EXP源代码，成功率100%。

CVE-2013-3660HIGHunder attack29 Jan 2022

The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windo

98RISK

GitHub PoC★ 1

pwnkit

CVE-2021-4034HIGHunder attack28 Jan 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISK

GitHub PoC

galoget/PwnKit-CVE-2021-4034

CVE-2021-4034HIGHunder attack28 Jan 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISK

GitHub PoC★ 351

Proof of concept for pwnkit vulnerability

CVE-2021-4034HIGHunder attack27 Jan 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISK

GitHub PoC

khaclep007/CVE-2022-0185

CVE-2022-0185HIGHunder attack27 Jan 2022

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functio

76RISK

GitHub PoC★ 4

CVE-2021-4034 PoC , polkit < 0.131

CVE-2021-4034HIGHunder attack27 Jan 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISK

GitHub PoC★ 462

win32k LPE

CVE-2022-21882HIGHunder attack27 Jan 2022

Win32k Elevation of Privilege Vulnerability

98RISK

GitHub PoC

Codiad through 2.8.4 allows Remote Code Execution, a different vulnerability than CVE-2017-11366 and CVE-2017-15689

CVE-2018-14009—27 Jan 2022

Codiad through 2.8.4 allows Remote Code Execution, a different vulnerability than CVE-2017-11366 and CVE-2017-15689.

35RISK

GitHub PoC★ 11

CVE-2021-3156 POC and Docker and Analysis write up

CVE-2021-3156HIGHunder attack27 Jan 2022

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RISK

GitHub PoC

BrunoPincho/cve-2018-16763-rust

CVE-2018-16763—27 Jan 2022

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca

60RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.