Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
78,295cataloged exploits
36,048CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,458Referência 22,721GitHub PoC 14,464VulnCheck XDB 8,813Nuclei 4,350Metasploit 3,489✓ verified onlyrecentpopularrisk
78,258 exploits
Metasploit600
ManageEngine OpManager SumPDU Java Deserialization
Zoho ManageEngine OpManager before 12.5.329 allows unauthenticated Remote Code Execution due to a general bypass in the
30RISK
open ↗Metasploit600
ManageEngine OpManager SumPDU Java Deserialization
Zoho ManageEngine OpManager Stable build before 125203 (and Released build before 125233) allows Remote Code Execution v
60RISK
open ↗GitHub PoC★ 3
haidv35/CVE-2021-21972
The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor
100RISK
open ↗GitHub PoC
Exodusro/CVE-2021-3156
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RISK
open ↗Exploit-DB
Elasticsearch ECE 7.13.3 - Anonymous Database Dump
All versions of Elastic Cloud Enterprise has the Elasticsearch “anonymous” user enabled by default in deployed clusters.
28RISK
open ↗GitHub PoC★ 5
PoC for CVE-2021-36934 Aka HiveNightmare/SeriousSAM written in python3
Windows Elevation of Privilege Vulnerability
98RISK
open ↗GitHub PoC
This PowerShell script will take the mitigation measures for CVE-2021-36934 described by Microsoft and the US CERT team. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36934 https://kb.cert.org/vuls/id/506989 USE AT YOUR OWN RISK -- BACKUPS MAY BREAK.
Windows Elevation of Privilege Vulnerability
98RISK
open ↗GitHub PoC★ 3
C# PoC for CVE-2021-36934/HiveNightmare/SeriousSAM
Windows Elevation of Privilege Vulnerability
98RISK
open ↗GitHub PoC★ 1
This Repo is PoC environment of CVE-2014-6271(https://nvd.nist.gov/vuln/detail/cve-2014-6271).
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISK
open ↗VulnCheck XDB
remote-with-credentials
InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.
50RISK
open ↗VulnCheck XDB
remote-with-credentials
Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004
100RISK
open ↗Exploit-DB
ElasticSearch 7.13.3 - Memory disclosure
A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the abil
60RISK
open ↗Exploit-DB
Microsoft SharePoint Server 2019 - Remote Code Execution (2)
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the softwar
100RISK
open ↗GitHub PoC
Exploit Analysis of The WhatsApp Double-Free Vulnerability (CVE-2019-11932) Using the GEF-GDB Debugger
A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version
35RISK
open ↗GitHub PoC
3t4n/samba-3.0.24-CVE-2007-2447-vunerable-
The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands
50RISK
open ↗GitHub PoC★ 1
idea-oss/laravel-CVE-2021-3129-EXP
Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra
100RISK
open ↗GitHub PoC★ 2
Windows Elevation of Privilege Vulnerability (SeriousSAM)
Windows Elevation of Privilege Vulnerability
98RISK
open ↗GitHub PoC★ 1
A capability to identify and remediate CVE-2021-36934 (HiveNightmare)
Windows Elevation of Privilege Vulnerability
98RISK
open ↗GitHub PoC★ 8
Small and dirty PoC for CVE-2021-36934
Windows Elevation of Privilege Vulnerability
98RISK
open ↗GitHub PoC★ 3
see https://github.com/cube0x0/CVE-2021-1675
Windows Print Spooler Remote Code Execution Vulnerability
100RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.