Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,559cataloged exploits

34,978CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,443Referência 21,899GitHub PoC 13,960VulnCheck XDB 8,542Nuclei 4,243Metasploit 3,472✓ verified onlyrecent popular risk

13,960 exploits

GitHub PoC

Lumindu/CVE-2017-16995-Linux-Kernel---BPF-Sign-Extension-Local-Privilege-Escalation-

CVE-2017-16995—12 May 2020

The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial

50RISK

open ↗

GitHub PoC

Dilith006/CVE-2014-6271

CVE-2014-6271CRITICALunder attack12 May 2020

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISK

open ↗

GitHub PoC

This document explain Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway [CVE-2019-19781]

CVE-2019-19781CRITICALunder attackransomware12 May 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

GitHub PoC

SMBGhost CVE-2020-0796

CVE-2020-0796CRITICALunder attackransomware12 May 2020

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h

100RISK

open ↗

GitHub PoC

CVE-2019-5736

CVE-2019-5736—12 May 2020

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc b

60RISK

open ↗

GitHub PoC★ 1

Exploit work Privilege Escalation CVE-2017-1000112

CVE-2017-1000112—12 May 2020

Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSG_MORE

43RISK

open ↗

GitHub PoC★ 1

BimsaraMalinda/Linux-Kernel-4.4.0-Ubuntu---DCCP-Double-Free-Privilege-Escalation-CVE-2017-6074

CVE-2017-6074—12 May 2020

The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST p

23RISK

open ↗

GitHub PoC

This is a Dirty Cow (CVE-2016-5195) privilege escalation vulnerability exploit

CVE-2016-5195HIGHunder attack12 May 2020

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISK

open ↗

GitHub PoC

Dirtycow also is known as CVE-2016-5195

CVE-2016-5195HIGHunder attack12 May 2020

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISK

open ↗

GitHub PoC

Dilan-Diaz/Point-to-Point-Protocol-Daemon-RCE-Vulnerability-CVE-2020-8597-

CVE-2020-8597CRITICAL12 May 2020

eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.

53RISK

open ↗

GitHub PoC

AvishkaSenadheera/CVE-2017-9805---Documentation---IT19143378

CVE-2017-9805HIGHunder attack12 May 2020

The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with a

100RISK

open ↗

GitHub PoC

SachinThanushka/CVE-2018-1160

CVE-2018-1160CRITICAL12 May 2020

Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking

70RISK

open ↗

GitHub PoC

dinidhu96/IT19013756_-CVE-2016-4971-

CVE-2016-4971—12 May 2020

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted F

35RISK

open ↗

GitHub PoC

lalishasanduwara/CVE-2018-10933

CVE-2018-10933CRITICAL12 May 2020

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul

85RISK

open ↗

GitHub PoC★ 4

CVE-2019-6111 vulnerability exploitation

CVE-2019-6111MEDIUM12 May 2020

An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses wh

45RISK

open ↗

GitHub PoC

Exploit code for CVE-2015-5477 POC

CVE-2015-5477—11 May 2020

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (

60RISK

open ↗

GitHub PoC

shanuka-ashen/Dirty-Cow-Explanation-CVE-2016-5195-

CVE-2016-5195HIGHunder attack11 May 2020

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISK

open ↗

GitHub PoC★ 1

Local Root vulnerability- CVE-2019-13272 / Security Bypass Vulnerability – CVE-2019-14287

CVE-2019-13272HIGHunder attack11 May 2020

In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a proce

98RISK

open ↗

GitHub PoC★ 1

Google Android - 'Stagefright' Remote Code Execution - CVE-2015-1538

CVE-2015-1538—11 May 2020

Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android bef

45RISK

open ↗

GitHub PoC

Sudo Security Policy bypass Vulnerability

CVE-2019-14287—11 May 2020

In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and se

35RISK

open ↗

GitHub PoC

Documentation for Sudo Security Bypass - CVE 2019-14287

CVE-2019-14287—11 May 2020

In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and se

35RISK

open ↗

GitHub PoC

BBRathnayaka/POC-CVE-2019-5736

CVE-2019-5736—10 May 2020

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc b

60RISK

open ↗

GitHub PoC

A remote code execution flaw was found in Samba. A malicious authenticated samba client, having write access to the samba share, could use this flaw to execute arbitrary code as root.

CVE-2017-7494CRITICALunder attackransomware10 May 2020

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allo

100RISK

open ↗

GitHub PoC★ 10

A Python script to exploit CVE-2020-8816, a remote code execution vulnerability on the Pi-hole

CVE-2020-8816CRITICALunder attack10 May 2020

Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static l

100RISK

open ↗

GitHub PoC★ 176

Weblogic coherence.jar RCE

CVE-2020-2883CRITICALunder attack10 May 2020

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th

100RISK

open ↗

GitHub PoC

PoC for CVE-2020-11651

CVE-2020-11651CRITICALunder attack09 May 2020

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs cla

100RISK

open ↗

GitHub PoC★ 33

PoC CVE-2017-5123 - LPE - Bypassing SMEP/SMAP. No KASLR

CVE-2017-5123—08 May 2020

Insufficient data validation in waitid allowed an user to escape sandboxes on Linux.

23RISK

open ↗

GitHub PoC

Project with sublist3r, massan, CVE-2018-15473, ssh bruteforce, ftp bruteforce and nikto.

CVE-2018-15473MEDIUM08 May 2020

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati

70RISK

open ↗

GitHub PoC★ 24

CVE-2020-11651&&CVE-2020-11652 EXP

CVE-2020-11651CRITICALunder attack07 May 2020

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs cla

100RISK

open ↗

GitHub PoC★ 5

lovelyjuice/cve-2020-11651-exp-plus

CVE-2020-11651CRITICALunder attack07 May 2020

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs cla

100RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.