Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,647cataloged exploits

34,986CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,443Referência 21,899GitHub PoC 14,014VulnCheck XDB 8,571Nuclei 4,248Metasploit 3,472✓ verified onlyrecent popular risk

14,014 exploits

GitHub PoC

Easy RM to MP3 Converter es un software que sufre de una vulnerabiliad de desbordamiento de buffer basada en la pila o StackBufferOverflow lo cual puede permite a los atacantes remotos ejecutar código arbitrario a través de un nombre de archivo largo en un archivo de lista de reproducción (.pls)

CVE-2009-1330—18 Feb 2019

Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long fil

28RISK

GitHub PoC★ 48

Proof of calc for CVE-2019-6453

CVE-2019-6453—18 Feb 2019

mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The a

35RISK

GitHub PoC★ 7

getshell test

CVE-2019-5736—15 Feb 2019

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc b

60RISK

GitHub PoC★ 316

Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (Pipeline: Declarative)

CVE-2019-1003000—15 Feb 2019

A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkinsci/plugins/

60RISK

GitHub PoC★ 6

Payload Generator

CVE-2019-7304HIGH14 Feb 2019

Local privilege escalation via snapd socket

53RISK

GitHub PoC

likekabin/cve-2019-5736-poc

CVE-2019-5736—14 Feb 2019

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc b

60RISK

GitHub PoC★ 1

likekabin/CVE-2019-5736

CVE-2019-5736—14 Feb 2019

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc b

60RISK

GitHub PoC★ 14

runc容器逃逸漏洞预警

CVE-2019-5736—14 Feb 2019

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc b

60RISK

GitHub PoC★ 69

exploit for CVE-2018-4193

CVE-2018-4193—13 Feb 2019

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Windows Ser

23RISK

GitHub PoC★ 658

PoC for CVE-2019-5736

CVE-2019-5736—13 Feb 2019

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc b

60RISK

GitHub PoC★ 210

Unweaponized Proof of Concept for CVE-2019-5736 (Docker escape)

CVE-2019-5736—12 Feb 2019

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc b

60RISK

GitHub PoC★ 681

Linux privilege escalation exploit via snapd (CVE-2019-7304)

CVE-2019-7304HIGH12 Feb 2019

Local privilege escalation via snapd socket

53RISK

GitHub PoC

Takes advantage of CVE-2018-10933

CVE-2018-10933CRITICAL10 Feb 2019

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul

85RISK

GitHub PoC★ 67

Programa ideal para robar toda la información de un dispositivo remotamente a través de la aplicación AirDroid. [CVE-2019-9599] (https://www.exploit-db.com/exploits/46337)

CVE-2019-9599—09 Feb 2019

The AirDroid application through 4.2.1.6 for Android allows remote attackers to cause a denial of service (service crash

28RISK

GitHub PoC

cve-2018-15877

CVE-2018-15877—08 Feb 2019

The Plainview Activity Monitor plugin before 20180826 for WordPress is vulnerable to OS command injection via shell meta

60RISK

GitHub PoC★ 5

VMware NSX SD-WAN command injection vulnerability

CVE-2018-6961HIGHunder attack08 Feb 2019

VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web U

100RISK

GitHub PoC★ 5

Exploiting CVE-2016-10277 for Secure Boot and Device Locking bypass

CVE-2016-10277—04 Feb 2019

An elevation of privilege vulnerability in the Motorola bootloader could enable a local malicious application to execute

23RISK

GitHub PoC

cve-2018-3810

CVE-2018-3810—02 Feb 2019

Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unau

60RISK

GitHub PoC

cve-2018-3811

CVE-2018-3811—02 Feb 2019

SQL Injection vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthentica

35RISK

GitHub PoC★ 16

iOS 12.0 -> 12.1.2 Incomplete Osiris Jailbreak with CVE-2019-6225 by GeoSn0w (FCE365)

CVE-2019-6225—31 Jan 2019

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.

28RISK

GitHub PoC★ 1

NSE script to scan for Cisco routers vulnerable to CVE-2019-1653

CVE-2019-1653HIGHunder attack30 Jan 2019

Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

100RISK

GitHub PoC★ 1

Python 3 implementation of an existing CVE-2011-3556 proof of concept (PoC).

CVE-2011-3556—29 Jan 2019

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and ear

60RISK

GitHub PoC

Exploit script for Crossfire 1.9.0

CVE-2006-1236—29 Jan 2019

Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrar

28RISK

GitHub PoC★ 2

DVR username password recovery.

CVE-2018-9995—28 Jan 2019

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L

60RISK

GitHub PoC★ 370

CVE-2018-8581

CVE-2018-8581HIGHunder attackransomware24 Jan 2019

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of

76RISK

GitHub PoC★ 228

CVE-2019-1652 /CVE-2019-1653 Exploits For Dumping Cisco RV320 Configurations & Debugging Data AND Remote Root Exploit!

CVE-2019-1652HIGHunder attack24 Jan 2019

Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability

100RISK

GitHub PoC★ 1

This is a exp of CVE-2018-15473

CVE-2018-15473MEDIUM23 Jan 2019

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati

70RISK

GitHub PoC★ 1

Writeup for CVE-2017-16995 Linux BPF Local Privilege Escalation

CVE-2017-16995—22 Jan 2019

The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial

50RISK

GitHub PoC★ 1

cve-2018-15961

CVE-2018-15961CRITICALunder attack21 Jan 2019

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unr

100RISK

GitHub PoC

CVE-2015-2794 auto finder

CVE-2015-2794—20 Jan 2019

The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the application and gain S

60RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.