Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,058cataloged exploits

35,300CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,451Referência 22,175GitHub PoC 14,096VulnCheck XDB 8,607Nuclei 4,255Metasploit 3,474✓ verified onlyrecent popular risk

14,096 exploits

GitHub PoC

towelroot

CVE-2014-3153HIGHunder attack29 May 2016

The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two diff

98RISK

open ↗

GitHub PoC★ 6

Magento Unauthorized Remote Code Execution (CVE-2016-4010)

CVE-2016-4010—25 May 2016

Magento CE and EE before 2.0.6 allows remote attackers to conduct PHP objection injection attacks and execute arbitrary

60RISK

open ↗

GitHub PoC★ 86

Local privilege escalation for OS X 10.10.5 via CVE-2016-1828.

CVE-2016-1828—18 May 2016

The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers

23RISK

open ↗

GitHub PoC

Test modified buggy poc

CVE-2016-0801—15 May 2016

The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01

35RISK

open ↗

GitHub PoC★ 15

Microsoft Office / COM Object DLL Planting

CVE-2015-6132—14 May 2016

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2

60RISK

open ↗

GitHub PoC★ 78

abdsec/CVE-2016-0801

CVE-2016-0801—11 May 2016

The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01

35RISK

open ↗

GitHub PoC★ 41

hexx0r/CVE-2016-0051

CVE-2016-0051—08 May 2016

The WebDAV client in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Window

43RISK

open ↗

GitHub PoC

NSE plugin for Nmap that scans a DotNetNuke (DNN) web application for an Administration Authentication Bypass vulnerability (CVE-2015-2794, EDB-ID: 39777).

CVE-2015-2794—07 May 2016

The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the application and gain S

60RISK

open ↗

GitHub PoC★ 69

ImaegMagick Code Execution (CVE-2016-3714)

CVE-2016-3714HIGHunder attack07 May 2016

The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.

100RISK

open ↗

GitHub PoC★ 1

Fix ImageMagick Command Injection (CVE-2016-3714) with Ansible.

CVE-2016-3714HIGHunder attack05 May 2016

The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.

100RISK

open ↗

GitHub PoC★ 18

jpeanut/ImageTragick-CVE-2016-3714-RShell

CVE-2016-3714HIGHunder attack05 May 2016

The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.

100RISK

open ↗

GitHub PoC

Blind SQL injection brute force.

CVE-2008-6970—05 May 2016

SQL injection vulnerability in dosearch.inc.php in UBB.threads 7.3.1 and earlier allows remote attackers to execute arbi

23RISK

open ↗

GitHub PoC

tommiionfire/CVE-2016-3714

CVE-2016-3714HIGHunder attack04 May 2016

The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.

100RISK

open ↗

GitHub PoC

a puppet module in response to CVE-2016-3714

CVE-2016-3714HIGHunder attack04 May 2016

The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.

100RISK

open ↗

GitHub PoC★ 193

Simple test for the May 2016 OpenSSL padding oracle (CVE-2016-2107)

CVE-2016-2107—03 May 2016

The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a

45RISK

open ↗

GitHub PoC★ 125

QSEE Privilege Escalation Exploit using PRDiag* commands (CVE-2015-6639)

CVE-2015-6639—02 May 2016

The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to

23RISK

open ↗

GitHub PoC★ 85

Exploit code for CVE-2016-1757

CVE-2016-1757—27 Apr 2016

Race condition in the kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code

28RISK

open ↗

GitHub PoC★ 1

b0b0505/CVE-2016-0846-PoC

CVE-2016-0846—19 Apr 2016

libs/binder/IMemory.cpp in the IMemory Native Interface in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.

23RISK

open ↗

GitHub PoC★ 3

这个代码包含了CVE-2015-8660漏洞的利用代码，还有注释，出现问题的源代码，打了补丁后的代码

CVE-2015-8660—14 Apr 2016

The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr op

43RISK

open ↗

GitHub PoC★ 36

arbitrary memory read/write by IMemroy OOB

CVE-2016-0846—08 Apr 2016

libs/binder/IMemory.cpp in the IMemory Native Interface in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.

23RISK

open ↗

GitHub PoC★ 10

PoC attack server for CVE-2015-7547 buffer overflow vulnerability in glibc DNS stub resolver (public version)

CVE-2015-7547—05 Apr 2016

Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C

45RISK

open ↗

GitHub PoC★ 55

Exploitation Training -- CVE-2013-2028: Nginx Stack Based Buffer Overflow

CVE-2013-2028—23 Mar 2016

The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cau

60RISK

open ↗

GitHub PoC

must run this native binary with system privilege

CVE-2014-4322—23 Mar 2016

drivers/misc/qseecom.c in the QSEECOM driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Andr

23RISK

open ↗

GitHub PoC

Cve-2015-1538-1

CVE-2015-1538—20 Mar 2016

Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android bef

45RISK

open ↗

GitHub PoC

dachidahu/CVE-2016-0752

CVE-2016-0752HIGHunder attack18 Mar 2016

Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.

100RISK

open ↗

GitHub PoC★ 7

a exploit for cve-2016-0728

CVE-2016-0728—15 Mar 2016

The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object ref

23RISK

open ↗

GitHub PoC★ 8

PoC exploit server for CVE-2015-7547

CVE-2015-7547—10 Mar 2016

Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C

45RISK

open ↗

GitHub PoC

JBoss Autopwn as featured at BlackHat Europe 2010 - this version incorporates CVE-2010-0738 the JBoss authentication bypass VERB manipulation vulnerability as discovered by Minded Security

CVE-2010-0738MEDIUMunder attackransomware08 Mar 2016

The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2

100RISK

open ↗

GitHub PoC

Script to test vulnarability for CVE-2015-0235

CVE-2015-0235—07 Mar 2016

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18,

60RISK

open ↗

GitHub PoC★ 31

Python script to exploit CVE-2015-4852.

CVE-2015-4852CRITICALunder attack03 Mar 2016

The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers

100RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.