Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
77,772cataloged exploits
35,760CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,455Referência 22,523GitHub PoC 14,289VulnCheck XDB 8,710Nuclei 4,319Metasploit 3,476✓ verified onlyrecentpopularrisk
77,724 exploits
GitHub PoC★ 3
An educational Proof of Concept for the Log4j Vulnerability (CVE-2021-44228) in Minecraft
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
open ↗Metasploit600
PaperCut PaperCutNG Authentication Bypass
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Bui
100RISK
open ↗Metasploit600
Lexmark Device Embedded Web Server RCE
Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4).
68RISK
open ↗GitHub PoC★ 4
CVE-2022-22963 RCE PoC in python
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po
100RISK
open ↗VulnCheck XDB
initial-access
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP c
100RISK
open ↗VulnCheck XDB
initial-access
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po
100RISK
open ↗GitHub PoC★ 4
A Tool for scanning CVE-2017-9841 with multithread
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP c
100RISK
open ↗GitHub PoC★ 1
Syd-SydneyJr/CVE-2021-45010
A path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager before 2.4.7
45RISK
open ↗GitHub PoC★ 1
Demonstrable Proof of Concept Exploit for Spring4Shell Vulnerability (CVE-2022-22965)
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISK
open ↗GitHub PoC
ahiahai242/CVE-2017-5123
Insufficient data validation in waitid allowed an user to escape sandboxes on Linux.
23RISK
open ↗GitHub PoC
h1bAna/CVE-2017-5123
Insufficient data validation in waitid allowed an user to escape sandboxes on Linux.
23RISK
open ↗GitHub PoC★ 15
This is poc of CVE-2022-46169 authentication bypass and remote code execution
Unauthenticated Command Injection
100RISK
open ↗GitHub PoC★ 1
Laravel RCE CVE-2021-3129
Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra
100RISK
open ↗GitHub PoC★ 26
CVE-2023-21839工具
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t
100RISK
open ↗VulnCheck XDB
initial-access
Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra
100RISK
open ↗VulnCheck XDB
local
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
68RISK
open ↗GitHub PoC
FortiRecorder Denial of Service Exploit (CVE-2022-41333)
An uncontrolled resource consumption vulnerability [CWE-400] in FortiRecorder version 6.4.3 and below, 6.0.11 and below
33RISK
open ↗GitHub PoC★ 11
Tomcat PUT方法任意文件写入（CVE-2017-12615）exp
When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisati
100RISK
open ↗VulnCheck XDB
initial-access
When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisati
100RISK
open ↗GitHub PoC★ 2
Tenda f3 Malformed HTTP Request Header Processing Vulnerability.
Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_pas
60RISK
open ↗GitHub PoC★ 7
Mass Auto Exploit CVE-2022-4395 Unauthenticated Arbitrary File Upload
Membership For WooCommerce < 2.1.7 - Unauthenticated Arbitrary File Upload
53RISK
open ↗GitHub PoC
sei-fish/CVE-2021-22205
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati
100RISK
open ↗GitHub PoC★ 2
CVE-2022-47986: Python, Ruby, NMAP and Metasploit modules to exploit the vulnerability.
IBM Aspera Faspex code execution
100RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.