Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,559cataloged exploits
34,978CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,899GitHub PoC 13,960VulnCheck XDB 8,542Nuclei 4,243Metasploit 3,472✓ verified onlyrecentpopularrisk
13,960 exploits
GitHub PoC★ 4
infiniteLoopers/CVE-2019-11932
CVE-2019-11932—06 Oct 2019
A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version
35RISK
open ↗
GitHub PoC★ 4
Double-Free BUG in WhatsApp exploit poc.
CVE-2019-11932—05 Oct 2019
A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version
35RISK
open ↗
GitHub PoC★ 77
timwr/CVE-2019-2215
CVE-2019-2215HIGHunder attack04 Oct 2019
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti
98RISK
open ↗
GitHub PoC
Rails 3 PoC of CVE-2019-5418
CVE-2019-5418HIGHunder attack04 Oct 2019
There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where spe
100RISK
open ↗
GitHub PoC★ 208
Simple POC for exploiting WhatsApp double-free bug in DDGifSlurp in decoding.c in libpl_droidsonroids_gif
CVE-2019-11932—04 Oct 2019
A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version
35RISK
open ↗
GitHub PoC★ 4
This is a Automated Generate Payload for CVE-2019-11932 (WhatsApp Remote Code Execution)
CVE-2019-11932—04 Oct 2019
A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version
35RISK
open ↗
GitHub PoC
Remediation task for CVE-2018-15686, CVE-2018-16866, and CVE-2018-16888 affecting SystemD in EL7
CVE-2018-15686HIGH03 Oct 2019
systemd: reexec state injection: fgets() on overlong lines leads to line splitting
41RISK
open ↗
GitHub PoC★ 8
Stored Cross-Site Scripting in DotNetNuke (DNN) Version before 9.4.0 | XSS to RCE
CVE-2019-12562—03 Oct 2019
Stored Cross-Site Scripting in DotNetNuke (DNN) Version before 9.4.0 allows remote attackers to store and embed the mali
23RISK
open ↗
GitHub PoC★ 267
double-free bug in WhatsApp exploit poc
CVE-2019-11932—03 Oct 2019
A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version
35RISK
open ↗
GitHub PoC★ 1
CVE-2019-17080
CVE-2019-17080—02 Oct 2019
mintinstall (aka Software Manager) 7.9.9 for Linux Mint allows code execution if a REVIEWS_CACHE file is controlled by a
23RISK
open ↗
GitHub PoC★ 20
CVE-2019-16759 vbulletin 5.0.0 till 5.5.4 pre-auth rce
CVE-2019-16759CRITICALunder attack02 Oct 2019
vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widge
100RISK
open ↗
GitHub PoC
A simple exploit for CVE-2007-2447
CVE-2007-2447—30 Sep 2019
The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands
50RISK
open ↗
GitHub PoC★ 246
ispy V1.0 - Eternalblue(ms17-010)/Bluekeep(CVE-2019-0708) Scanner and exploit ( Metasploit automation )
CVE-2019-0708CRITICALunder attackransomware30 Sep 2019
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RISK
open ↗
GitHub PoC★ 624
Full exploit chain (CVE-2019-11708 & CVE-2019-9810) against Firefox on Windows 64-bit.
CVE-2019-11708CRITICALunder attack29 Sep 2019
Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result
90RISK
open ↗
GitHub PoC★ 75
it works on xp (all version sp2 sp3)
CVE-2019-0708CRITICALunder attackransomware29 Sep 2019
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RISK
open ↗
GitHub PoC★ 21
PoC of CVE-2018-14847 Mikrotik Vulnerability using simple script
CVE-2018-14847CRITICALunder attack29 Sep 2019
MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated
100RISK
open ↗
GitHub PoC★ 5
Exploit code for CVE-2019-16692
CVE-2019-16692—27 Sep 2019
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is us
28RISK
open ↗
GitHub PoC★ 21
vBulletin 5.x 未授权远程代码执行漏洞
CVE-2019-16759CRITICALunder attack26 Sep 2019
vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widge
100RISK
open ↗
GitHub PoC★ 3
Nmap NSE Script to Detect vBulletin pre-auth 5.x RCE CVE-2019-16759
CVE-2019-16759CRITICALunder attack26 Sep 2019
vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widge
100RISK
open ↗
GitHub PoC★ 1
Proof of Concept of Winbox Critical Vulnerability (CVE-2018-14847)
CVE-2018-14847CRITICALunder attack25 Sep 2019
MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated
100RISK
open ↗
GitHub PoC★ 5
Vbulletin rce exploit CVE-2019-16759
CVE-2019-16759CRITICALunder attack25 Sep 2019
vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widge
100RISK
open ↗
GitHub PoC★ 10
PoC for distributed NTP reflection DoS (CVE-2013-5211)
CVE-2013-5211—24 Sep 2019
The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service
60RISK
open ↗
GitHub PoC★ 3
CVE-2019-1367
CVE-2019-1367HIGHunder attackransomware24 Sep 2019
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet
83RISK
open ↗
GitHub PoC★ 6
CVE-2018-13379 Exploit
CVE-2018-13379CRITICALunder attackransomware24 Sep 2019
An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.
100RISK
open ↗
GitHub PoC★ 8
CVE-2018-14667-poc Richfaces漏洞环境及PoC
CVE-2018-14667CRITICALunder attack23 Sep 2019
The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resou
100RISK
open ↗
GitHub PoC★ 1,833
Exploit for CVE-2019-11043
CVE-2019-11043HIGHunder attackransomware23 Sep 2019
Underflow in PHP-FPM can lead to RCE
100RISK
open ↗
GitHub PoC★ 1
Built a custom Virtual Machine, running Ubuntu 18.04.1 and Webmin 1.810. Using CVE-2019-15107 to exploit a backdoor in the Linux machine
CVE-2019-15107CRITICALunder attackransomware23 Sep 2019
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera
100RISK
open ↗
GitHub PoC
Escape from Docker using CVE-2017-1000112 and CVE-2017-18344, including gaining root privilage, get all capbilities, namespace recovery, filesystem recovery, cgroup limitation bypass and seccomp bypass.
CVE-2017-1000112—17 Sep 2019
Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSG_MORE
43RISK
open ↗
GitHub PoC★ 5
Crestron/Barco/Extron/InFocus/TeqAV Remote Command Injection (CVE-2019-3929) Metasploit Module
CVE-2019-3929CRITICALunder attack17 Sep 2019
The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Ba
100RISK
open ↗
GitHub PoC★ 1
1aa87148377/CVE-2019-0708
CVE-2019-0708CRITICALunder attackransomware17 Sep 2019
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RISK
open ↗
← previouspage 415 / 466next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.