Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,058cataloged exploits

35,300CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,451Referência 22,175GitHub PoC 14,096VulnCheck XDB 8,607Nuclei 4,255Metasploit 3,474✓ verified onlyrecent popular risk

14,096 exploits

GitHub PoC★ 5

LakshmiDesai/CVE-2016-8655

CVE-2016-8655—08 Dec 2016

Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cau

43RISK

open ↗

GitHub PoC

Inspec profile for detecting CVE-2016-5195 aka Dirty COW

CVE-2016-5195HIGHunder attack08 Dec 2016

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISK

open ↗

GitHub PoC

PoC for CVE-2016-8655 that causes a kernel panic

CVE-2016-8655—07 Dec 2016

Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cau

43RISK

open ↗

GitHub PoC★ 231

Shellshock exploit + vulnerable environment

CVE-2014-6271CRITICALunder attack07 Dec 2016

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISK

open ↗

GitHub PoC

翻译文章，CVE-2015-0057漏洞在32位和64位系统上的利用。Exploiting the win32k!xxxEnableWndSBArrows use-after-free (CVE 2015-0057) bug on both 32-bit and 64-bit(Aaron Adams of NCC )

CVE-2015-0057—05 Dec 2016

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a

28RISK

open ↗

GitHub PoC★ 151

Full exploit of CVE-2016-6754(BadKernel) and slide of SyScan360 2016

CVE-2016-6754—28 Nov 2016

A remote code execution vulnerability in Webview in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-

23RISK

open ↗

GitHub PoC★ 2

shekkbuilder/CVE-2016-7434

CVE-2016-7434—27 Nov 2016

The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a craf

35RISK

open ↗

GitHub PoC★ 2

Information about my advisory on CVE-2006-3747 (Apache mod_rewrite LDAP off-by-one buffer overflow).. At the time, it was the first public working exploit :)

CVE-2006-3747—26 Nov 2016

Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and o

60RISK

open ↗

GitHub PoC★ 937

Dirty Cow exploit - CVE-2016-5195

CVE-2016-5195HIGHunder attack25 Nov 2016

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISK

open ↗

GitHub PoC★ 25

NTPD remote DOS exploit and vulnerable container

CVE-2016-7434—22 Nov 2016

The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a craf

35RISK

open ↗

GitHub PoC★ 10

这里保留着部分脏牛漏洞的利用代码

CVE-2016-5195HIGHunder attack17 Nov 2016

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISK

open ↗

GitHub PoC★ 7

Exploit for Joomla 3.4.4 - 3.6.4 (CVE-2016-8869 and CVE-2016-8870)

CVE-2016-8869—10 Nov 2016

The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before

60RISK

open ↗

GitHub PoC

bluebluelan/CVE-2015-7547-proj-master

CVE-2015-7547—10 Nov 2016

Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C

45RISK

open ↗

GitHub PoC

Recent Linux privilege escalation exploit

CVE-2016-5195HIGHunder attack06 Nov 2016

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISK

open ↗

GitHub PoC★ 5

firebroo/CVE-2016-6663

CVE-2016-6663—02 Nov 2016

Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB be

23RISK

open ↗

GitHub PoC

Source code: https://github.com/XiphosResearch/exploits/tree/master/Joomraa

CVE-2016-8869—02 Nov 2016

The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before

60RISK

open ↗

GitHub PoC

hittlle/CVE-2011-1974-PoC

CVE-2011-1974—01 Nov 2016

NDISTAPI.sys in the NDISTAPI driver in Remote Access Service (RAS) in Microsoft Windows XP SP2 and SP3 and Windows Serve

23RISK

open ↗

GitHub PoC★ 16

Scan vuls kernel CVE-2016-5195 - DirtyCow

CVE-2016-5195HIGHunder attack29 Oct 2016

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISK

open ↗

GitHub PoC★ 6

oleg-fiksel/ansible_CVE-2016-5195_check

CVE-2016-5195HIGHunder attack29 Oct 2016

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISK

open ↗

GitHub PoC

Check the Browser's FlashPlayer version to check if it is vulnerable to exploit CVE-2016-7855

CVE-2016-7855HIGHunder attack26 Oct 2016

Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linu

76RISK

open ↗

GitHub PoC★ 32

Universal Android root tool based on CVE-2016-5195. Watch this space.

CVE-2016-5195HIGHunder attack24 Oct 2016

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISK

open ↗

GitHub PoC★ 341

A CVE-2016-5195 exploit example.

CVE-2016-5195HIGHunder attack23 Oct 2016

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISK

open ↗

GitHub PoC★ 7

Dirty COW (CVE-2016-5195) vulnerability testing utility for Linux-based systems.

CVE-2016-5195HIGHunder attack22 Oct 2016

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISK

open ↗

GitHub PoC★ 513

PoC for Dirty COW (CVE-2016-5195)

CVE-2016-5195HIGHunder attack22 Oct 2016

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISK

open ↗

GitHub PoC★ 10

Mitigates CVE-2016-5195 aka DirtyCOW

CVE-2016-5195HIGHunder attack22 Oct 2016

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISK

open ↗

GitHub PoC

Dirty Cow

CVE-2016-5195HIGHunder attack21 Oct 2016

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISK

open ↗

GitHub PoC★ 1

ASRTeam/CVE-2016-5195

CVE-2016-5195HIGHunder attack21 Oct 2016

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISK

open ↗

GitHub PoC★ 13

CVE-2016-5195 exploit written in Crystal

CVE-2016-5195HIGHunder attack21 Oct 2016

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISK

open ↗

GitHub PoC★ 1,008

CVE-2016-5195 (dirtycow/dirtyc0w) proof of concept for Android

CVE-2016-5195HIGHunder attack21 Oct 2016

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISK

open ↗

GitHub PoC

Ansible playbook to mitigate CVE-2016-5195 on CentOS

CVE-2016-5195HIGHunder attack21 Oct 2016

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.