Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,058cataloged exploits

35,300CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,451Referência 22,175GitHub PoC 14,096VulnCheck XDB 8,607Nuclei 4,255Metasploit 3,474✓ verified onlyrecent popular risk

14,096 exploits

GitHub PoC★ 9

Meatballs1/cve-2013-1300

CVE-2013-1300—09 Sep 2013

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, W

43RISK

open ↗

GitHub PoC★ 2

Do you own security hotfix with Deviare hooking

CVE-2010-3971—07 Aug 2013

Use-after-free vulnerability in the CSharedStyleSheet::Notify function in the Cascading Style Sheets (CSS) parser in msh

60RISK

open ↗

GitHub PoC★ 5

CVE-2013-2596 exploit for android

CVE-2013-2596HIGHunder attack16 Jul 2013

Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain

71RISK

open ↗

GitHub PoC

tarunyadav/fix-cve-2013-2094

CVE-2013-2094HIGHunder attack18 Jun 2013

The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data t

83RISK

open ↗

GitHub PoC★ 4

CVE-2013-2094 Linux 2.6.32/2.6.37 - 3.8.10 PERF_EVENTS local root x86/x86_64

CVE-2013-2094HIGHunder attack16 Jun 2013

The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data t

83RISK

open ↗

GitHub PoC

CVE-2011-1485 - Published: 2011-04-01 - PolicyKit:

CVE-2011-1485—16 Jun 2013

Race condition in the pkexec utility and polkitd daemon in PolicyKit (aka polkit) 0.96 allows local users to gain privil

38RISK

open ↗

GitHub PoC★ 12

CVE-2013-2597 exploit

CVE-2013-2597HIGHunder attack11 Jun 2013

Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6

71RISK

open ↗

GitHub PoC★ 17

CVE-2013-2094 exploit for android

CVE-2013-2094HIGHunder attack05 Jun 2013

The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data t

83RISK

open ↗

GitHub PoC★ 2

Novell ZENworks Mobile Management - LFI RCE

CVE-2013-1081—31 May 2013

Directory traversal vulnerability in MDM.php in Novell ZENworks Mobile Management (ZMM) 2.6.1 and 2.7.0 allows remote at

50RISK

open ↗

GitHub PoC★ 30

For the analysis of CVE-2013-2028

CVE-2013-2028—21 May 2013

The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cau

60RISK

open ↗

GitHub PoC★ 91

original cve-2013-2094 exploit and a rewritten version for educational purposes

CVE-2013-2094HIGHunder attack20 May 2013

The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data t

83RISK

open ↗

GitHub PoC★ 10

feliam/CVE-2013-2730

CVE-2013-2730—15 May 2013

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attacke

60RISK

open ↗

GitHub PoC★ 24

feliam/CVE-2013-2729

CVE-2013-2729HIGHunder attack15 May 2013

Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attack

83RISK

open ↗

GitHub PoC★ 1

This is used to scan for CVE-2012-2122 vulnerable servers.

CVE-2012-2122—09 May 2013

sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x befor

60RISK

open ↗

GitHub PoC★ 1

Discover uPNP devices vulnerable to CVE-2013-0229 / CVE-2013-0230 / CVE-2012-5958 / CVE-2012-5959

CVE-2013-0229—14 Apr 2013

The ProcessSSDPRequest function in minissdp.c in the SSDP handler in MiniUPnP MiniUPnPd before 1.4 allows remote attacke

60RISK

open ↗

GitHub PoC★ 1

Discover uPNP devices vulnerable to CVE-2013-0229 / CVE-2013-0230 / CVE-2012-5958 / CVE-2012-5959

CVE-2012-5958—14 Apr 2013

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable

60RISK

open ↗

GitHub PoC★ 3

MySQL-Fu is a Ruby based MySQL Client Script I wrote. It does most of the stuff a normal MySQL client might do: SQL Shell, Update/Delete/Drop Database/Table, Add/Delete Users, Dump Database(s)/Table w/ option for gzip...... Plus a few extra options to make life a little easier for pentests. Includes Several builtin PHP Command Shell options as well as Pentestmonkey's PHP Reverse Shell, in addition to multiple options for file writing and reading (all files read logged locally for offline analysis later), also includes Ruby port of Kingcope's CVE-2012-5613 Linux MySQL Privilege Escalation Exploit.

CVE-2012-5613—09 Feb 2013

MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the

50RISK

open ↗

GitHub PoC★ 2

heroku/heroku-CVE-2013-0333

CVE-2013-0333—29 Jan 2013

lib/active_support/json/backends/yaml.rb in Ruby on Rails 2.3.x before 2.3.16 and 3.0.x before 3.0.20 does not properly

60RISK

open ↗

GitHub PoC★ 5

Bootstrapped Rails 3.2.10 to test the remote code exploit CVE-2013-0156

CVE-2013-0156—12 Jan 2013

active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, an

60RISK

open ↗

GitHub PoC★ 1

Inspect all of your heroku apps to see if they are running a vulnerable version of Rails

CVE-2013-0156—11 Jan 2013

active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, an

60RISK

open ↗

GitHub PoC

crack repo from jnunemaker but with version 0.1.8 and rails CVE-2013-0156 vulnerability fixed

CVE-2013-0156—11 Jan 2013

active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, an

60RISK

open ↗

GitHub PoC

Silly Rails App to demonstrate vuln CVE-2013-0156

CVE-2013-0156—10 Jan 2013

active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, an

60RISK

open ↗

GitHub PoC★ 1

Mempodipper, a linux local root exploit.

CVE-2012-0056—29 Dec 2012

The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when

28RISK

open ↗

GitHub PoC★ 16

Python Apache Killer (Range Header DoS CVE-2011-3192)

CVE-2011-3192—26 Oct 2011

The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attac

60RISK

open ↗

GitHub PoC★ 1

http://www.oracle.com/technetwork/topics/security/alert-cve-2010-4476-305811.html

CVE-2010-4476—10 Feb 2011

The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and

28RISK

open ↗

GitHub PoC★ 4

sample exploit of buffer overflow in libpng

CVE-2010-1205—14 Sep 2010

Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might

35RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.