Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,559cataloged exploits

34,978CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,443Referência 21,899GitHub PoC 13,960VulnCheck XDB 8,542Nuclei 4,243Metasploit 3,472✓ verified onlyrecent popular risk

13,960 exploits

GitHub PoC★ 1

Curated list of CVE-2020-0601 resources

CVE-2020-0601HIGHunder attack16 Jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISK

open ↗

GitHub PoC★ 335

A PoC for CVE-2020-0601

CVE-2020-0601HIGHunder attack15 Jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISK

open ↗

GitHub PoC★ 2,074

weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883

CVE-2018-2628CRITICALunder attack15 Jan 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISK

open ↗

GitHub PoC★ 2,074

CVE-2017-3248—15 Jan 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Core Components). Suppo

60RISK

open ↗

GitHub PoC★ 888

PoC for CVE-2020-0601- Windows CryptoAPI (Crypt32.dll)

CVE-2020-0601HIGHunder attack15 Jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISK

open ↗

GitHub PoC★ 1

A Windows Crypto Exploit

CVE-2020-0601HIGHunder attack15 Jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISK

open ↗

GitHub PoC★ 35

Zeek package to detect CVE-2020-0601

CVE-2020-0601HIGHunder attack15 Jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISK

open ↗

GitHub PoC

JPurrier/CVE-2020-0601

CVE-2020-0601HIGHunder attack15 Jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISK

open ↗

GitHub PoC★ 5

Zeek package that uses OpenSSL to detect CVE-2020-0601 exploit attempts

CVE-2020-0601HIGHunder attack15 Jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISK

open ↗

GitHub PoC

Check your website for CVE-2019-19781 Vulnerable

CVE-2019-19781CRITICALunder attackransomware15 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

GitHub PoC★ 3

Automated forensic script hunting for cve-2019-19781

CVE-2019-19781CRITICALunder attackransomware15 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

GitHub PoC

IOCs for CVE-2019-19781

CVE-2019-19781CRITICALunder attackransomware15 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

GitHub PoC★ 2,071

CVE-2020-2551CRITICALunder attack15 Jan 2020

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppor

100RISK

open ↗

GitHub PoC★ 2

Remote Code Execution Exploit

CVE-2020-0601HIGHunder attack14 Jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISK

open ↗

GitHub PoC

Citrix Netscaler RCE

CVE-2019-19781CRITICALunder attackransomware13 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

GitHub PoC★ 11

Automated script for Citrix ADC scanner (CVE-2019-19781) using hosts retrieved from Shodan API. You must have a Shodan account to use this script.

CVE-2019-19781CRITICALunder attackransomware13 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

GitHub PoC★ 120

Detect and log CVE-2019-19781 scan and exploitation attempts.

CVE-2019-19781CRITICALunder attackransomware13 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

GitHub PoC

The exploitation module for the CVE-2019-19781 #Shitrix (Vulnerability in Citrix Application Delivery Controller and Citrix Gateway).

CVE-2019-19781CRITICALunder attackransomware13 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

GitHub PoC

My working exploit script for Shitrix (CVE-2019-19781)

CVE-2019-19781CRITICALunder attackransomware12 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

GitHub PoC★ 4

All Working Exploits

CVE-2019-19781CRITICALunder attackransomware11 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

GitHub PoC★ 7

Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway [ CVE-2019-19781 ]

CVE-2019-19781CRITICALunder attackransomware11 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

GitHub PoC

Took at stab at an NSE discovery script for CVE-2019-19781.

CVE-2019-19781CRITICALunder attackransomware11 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

GitHub PoC★ 158

CVE-2019-19781 - Remote Code Execution on Citrix ADC Netscaler exploit

CVE-2019-19781CRITICALunder attackransomware11 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

GitHub PoC★ 85

Citrix ADC Remote Code Execution

CVE-2019-19781CRITICALunder attackransomware11 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

GitHub PoC★ 109

Test a host for susceptibility to CVE-2019-19781

CVE-2019-19781CRITICALunder attackransomware11 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

GitHub PoC★ 2

CVE-2019-19781 Citrix RCE

CVE-2019-19781CRITICALunder attackransomware11 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

GitHub PoC★ 573

This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit code first.

CVE-2019-19781CRITICALunder attackransomware11 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

GitHub PoC★ 367

Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway [ CVE-2019-19781 ]

CVE-2019-19781CRITICALunder attackransomware10 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

GitHub PoC★ 24

CVE-2019-7238 Nexus RCE漏洞图形化一键检测工具。CVE-2019-7238 Nexus RCE Vul POC Tool.

CVE-2019-7238CRITICALunder attack10 Jan 2020

Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control.

100RISK

open ↗

GitHub PoC★ 7

Exploit code for CVE-2019-2729

CVE-2019-2729CRITICAL09 Jan 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte

85RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.