Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
78,324cataloged exploits
36,054CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,458Referência 22,721GitHub PoC 14,477VulnCheck XDB 8,829Nuclei 4,350Metasploit 3,489✓ verified onlyrecentpopularrisk
78,295 exploits
GitHub PoC★ 1
This Repo is PoC environment of CVE-2014-6271(https://nvd.nist.gov/vuln/detail/cve-2014-6271).
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISK
open ↗GitHub PoC★ 3
C# PoC for CVE-2021-36934/HiveNightmare/SeriousSAM
Windows Elevation of Privilege Vulnerability
98RISK
open ↗GitHub PoC
Exploit Analysis of The WhatsApp Double-Free Vulnerability (CVE-2019-11932) Using the GEF-GDB Debugger
A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version
35RISK
open ↗Exploit-DB
ElasticSearch 7.13.3 - Memory disclosure
A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the abil
60RISK
open ↗GitHub PoC
3t4n/samba-3.0.24-CVE-2007-2447-vunerable-
The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands
50RISK
open ↗Exploit-DB
Microsoft SharePoint Server 2019 - Remote Code Execution (2)
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the softwar
100RISK
open ↗GitHub PoC★ 1
A capability to identify and remediate CVE-2021-36934 (HiveNightmare)
Windows Elevation of Privilege Vulnerability
98RISK
open ↗GitHub PoC★ 3
see https://github.com/cube0x0/CVE-2021-1675
Windows Print Spooler Remote Code Execution Vulnerability
100RISK
open ↗GitHub PoC★ 35
PoC for CVE-2021-36934, which enables a standard user to be able to retrieve the SAM, Security, and Software Registry hives in Windows 10 version 1809 or newer
Windows Elevation of Privilege Vulnerability
98RISK
open ↗GitHub PoC★ 9
HiveNightmare a.k.a. SeriousSam Local Privilege Escalation in Windows – CVE-2021-36934
Windows Elevation of Privilege Vulnerability
98RISK
open ↗GitHub PoC★ 3
magichk/cve-2021-22146
All versions of Elastic Cloud Enterprise has the Elasticsearch “anonymous” user enabled by default in deployed clusters.
28RISK
open ↗GitHub PoC★ 2
Windows Elevation of Privilege Vulnerability (SeriousSAM)
Windows Elevation of Privilege Vulnerability
98RISK
open ↗GitHub PoC★ 1
CVE-2021-36934 PowerShell scripts
Windows Elevation of Privilege Vulnerability
98RISK
open ↗GitHub PoC★ 8
Small and dirty PoC for CVE-2021-36934
Windows Elevation of Privilege Vulnerability
98RISK
open ↗GitHub PoC★ 1
idea-oss/laravel-CVE-2021-3129-EXP
Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra
100RISK
open ↗Metasploit300
Elasticsearch Memory Disclosure
A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the abil
60RISK
open ↗GitHub PoC★ 5
Detection and Mitigation script for CVE-2021-36934 (HiveNightmare aka. SeriousSam)
Windows Elevation of Privilege Vulnerability
98RISK
open ↗GitHub PoC★ 210
Pure Nim implementation for exploiting CVE-2021-36934, the SeriousSAM local privilege escalation
Windows Elevation of Privilege Vulnerability
98RISK
open ↗GitHub PoC★ 1
Winter3un/CVE-2021-1675
Windows Print Spooler Remote Code Execution Vulnerability
100RISK
open ↗VulnCheck XDB
client-side
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc
100RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.