Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

78,324cataloged exploits

36,054CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,458Referência 22,721GitHub PoC 14,477VulnCheck XDB 8,829Nuclei 4,350Metasploit 3,489✓ verified onlyrecent popular risk

78,258 exploits

GitHub PoC★ 5

Exploits Password Reset Vulnerability in OpenCRX, CVE-2020-7378. Also maintains Stealth by deleting all the password reset mails created by the script

CVE-2020-7378CRITICAL06 Jul 2021

CRIXP OpenCRX Unverified Password Change

48RISK

GitHub PoC★ 2

Workaround for Windows Print Spooler Remote Code Execution Vulnerability(CVE-2021-34527). See: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527

CVE-2021-34527HIGHunder attackransomware05 Jul 2021

Windows Print Spooler Remote Code Execution Vulnerability

100RISK

GitHub PoC

edsonjt81/CVE-2021-1675

CVE-2021-1675HIGHunder attackransomware05 Jul 2021

Windows Print Spooler Remote Code Execution Vulnerability

100RISK

GitHub PoC★ 77

CVE-2021-1675 (PrintNightmare)

CVE-2021-1675HIGHunder attackransomware05 Jul 2021

Windows Print Spooler Remote Code Execution Vulnerability

100RISK

GitHub PoC

This simple PowerShell script is in response to the "PrintNightmare" vulnerability. This was designed to give a end user the ability to stop and disable the "Print Spooler" service on their computer while awaiting a fix from Microsoft.

CVE-2021-34527HIGHunder attackransomware05 Jul 2021

Windows Print Spooler Remote Code Execution Vulnerability

100RISK

GitHub PoC★ 801

A PrintNightmare (CVE-2021-34527) Python Scanner. Scan entire subnets for hosts vulnerable to the PrintNightmare RCE

CVE-2021-34527HIGHunder attackransomware05 Jul 2021

Windows Print Spooler Remote Code Execution Vulnerability

100RISK

GitHub PoC★ 2

OpenEMR < 5.0.1.4 - (Authenticated) File upload - Remote command execution

CVE-2018-15139—05 Jul 2021

Unrestricted file upload in interface/super/manage_site_files.php in versions of OpenEMR before 5.0.1.4 allows a remote

28RISK

Exploit-DB

Wordpress Plugin Backup Guard 1.5.8 - Remote Code Execution (Authenticated)

CVE-2021-24155—webappsphp05 Jul 2021

Backup Guard < 1.6.0 - Authenticated Arbitrary File Upload

60RISK

VulnCheck XDB

local

CVE-2021-1675HIGHunder attackransomware05 Jul 2021

Windows Print Spooler Remote Code Execution Vulnerability

100RISK

VulnCheck XDB

remote-with-credentials

CVE-2021-1675HIGHunder attackransomware05 Jul 2021

Windows Print Spooler Remote Code Execution Vulnerability

100RISK

VulnCheck XDB

initial-access

CVE-2017-9841CRITICALunder attack04 Jul 2021

Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP c

100RISK

GitHub PoC★ 23

Masscanner for Laravel phpunit RCE CVE-2017-9841

CVE-2017-9841CRITICALunder attack04 Jul 2021

Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP c

100RISK

GitHub PoC★ 5

Youtube : https://youtu.be/Zr0KjYDSFKQ

CVE-2021-1675HIGHunder attackransomware04 Jul 2021

Windows Print Spooler Remote Code Execution Vulnerability

100RISK

GitHub PoC★ 2

Windows Print Spooler Service RCE CVE-2021-1675 (PrintNightmare)

CVE-2021-1675HIGHunder attackransomware03 Jul 2021

Windows Print Spooler Remote Code Execution Vulnerability

100RISK

GitHub PoC★ 4

Apache ActiveMQ PUT RCE Scan

CVE-2016-3088CRITICALunder attack03 Jul 2021

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitr

100RISK

GitHub PoC

to catch cve-2021-1675-printnightmare

CVE-2021-1675HIGHunder attackransomware03 Jul 2021

Windows Print Spooler Remote Code Execution Vulnerability

100RISK

GitHub PoC★ 173

PrintNightmare - Windows Print Spooler RCE/LPE Vulnerability (CVE-2021-34527, CVE-2021-1675) proof of concept exploits

CVE-2021-34527HIGHunder attackransomware03 Jul 2021

Windows Print Spooler Remote Code Execution Vulnerability

100RISK

GitHub PoC★ 7

Exploit for MS Http Protocol Stack RCE vulnerability (CVE-2021-31166)

CVE-2021-31166CRITICALunder attack03 Jul 2021

HTTP Protocol Stack Remote Code Execution Vulnerability

100RISK

GitHub PoC★ 1

随便放点自己弄的小东西

CVE-2020-0674HIGHunder attack03 Jul 2021

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

93RISK

VulnCheck XDB

remote-with-credentials

CVE-2021-34527HIGHunder attackransomware03 Jul 2021

Windows Print Spooler Remote Code Execution Vulnerability

100RISK

VulnCheck XDB

denial-of-service

CVE-2021-31166CRITICALunder attack03 Jul 2021

HTTP Protocol Stack Remote Code Execution Vulnerability

100RISK

GitHub PoC★ 2

结合14882的未授权访问漏洞，通过14883可远程执行任意代码

CVE-2020-14882CRITICALunder attack03 Jul 2021

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions

100RISK

VulnCheck XDB

initial-access

CVE-2020-14882CRITICALunder attack03 Jul 2021

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions

100RISK

VulnCheck XDB

remote-with-credentials

CVE-2016-3088CRITICALunder attack03 Jul 2021

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitr

100RISK

VulnCheck XDB

client-side

CVE-2020-1350CRITICALunder attack03 Jul 2021

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req

100RISK

Exploit-DB

Wordpress Plugin Modern Events Calendar 5.16.2 - Remote Code Execution (Authenticated)

CVE-2021-24145—webappsphp02 Jul 2021

Modern Events Calendar Lite < 5.16.5 - Authenticated Arbitrary File Upload leading to RCE

60RISK

VulnCheck XDB

initial-access

CVE-2019-15107CRITICALunder attackransomware02 Jul 2021

An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera

100RISK

VulnCheck XDB

local

CVE-2021-34527HIGHunder attackransomware02 Jul 2021

Windows Print Spooler Remote Code Execution Vulnerability

100RISK

VulnCheck XDB

remote-with-credentials

CVE-2021-1675HIGHunder attackransomware02 Jul 2021

Windows Print Spooler Remote Code Execution Vulnerability

100RISK

Exploit-DB

Wordpress Plugin Modern Events Calendar 5.16.2 - Event export (Unauthenticated)

CVE-2021-24146—webappsphp02 Jul 2021

Modern Events Calendar Lite < 5.16.5 - Unauthenticated Events Export

50RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.