Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

78,958cataloged exploits

36,206CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,460Referência 22,832GitHub PoC 14,991VulnCheck XDB 8,829Nuclei 4,357Metasploit 3,489✓ verified onlyrecent popular risk

78,324 exploits

GitHub PoC★ 55

This is a proof of concept of the critical WinBox vulnerability (CVE-2018-14847) which allows for arbitrary file read of plain text passwords. The vulnerability has long since been fixed, so this project has ended and will not be supported or updated anymore. You can fork it and update it yourself instead.

CVE-2018-14847CRITICALunder attack21 Apr 2021

MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated

100RISK

GitHub PoC★ 5

Exploiting a Reflected Cross-Site Scripting (XSS) attack to get a Remote Command Execution (RCE) through the Webmin's running process feature

CVE-2021-31761—21 Apr 2021

Webmin 1.973 is affected by reflected Cross Site Scripting (XSS) to achieve Remote Command Execution through Webmin's ru

35RISK

GitHub PoC★ 47

DO NOT RUN THIS.

CVE-2021-22893CRITICALunder attackransomware21 Apr 2021

Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windo

90RISK

GitHub PoC★ 10

DO NOT RUN THIS.

CVE-2021-28480CRITICAL21 Apr 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

85RISK

Exploit-DB

RemoteClinic 2 - 'Multiple' Cross-Site Scripting (XSS)

CVE-2021-30044—webappsphp21 Apr 2021

Cross Site Scripting (XSS) in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php.

23RISK

GitHub PoC

Pulse Connect Secure RCE Vulnerability (CVE-2021-22893)

CVE-2021-22893CRITICALunder attackransomware21 Apr 2021

Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windo

90RISK

Metasploit300

Netgear R7000 backup.cgi Heap Overflow RCE

CVE-2021-31802—21 Apr 2021

NETGEAR R7000 1.0.11.116 devices have a heap-based Buffer Overflow that is exploitable from the local network without au

23RISK

Exploit-DB✓ VexDay Proof

GravCMS 1.10.7 - Unauthenticated Arbitrary File Write (Metasploit)

CVE-2021-21425CRITICALwebappsphp21 Apr 2021

Unauthenticated Arbitrary YAML Write/Update leads to Code Execution

85RISK

Exploit-DB

Multilaser Router RE018 AC1200 - Cross-Site Request Forgery (Enable Remote Access)

CVE-2021-31152—webappshardware21 Apr 2021

Multilaser Router AC1200 V02.03.01.45_pt contains a cross-site request forgery (CSRF) vulnerability. An attacker can ena

23RISK

Exploit-DB

Adtran Personal Phone Manager 10.8.1 - DNS Exfiltration

CVE-2021-25681—webappshardware21 Apr 2021

AdTran Personal Phone Manager 10.8.1 software is vulnerable to an issue that allows for exfiltration of data over DNS. T

28RISK

GitHub PoC★ 8

Exploiting a Cross-site request forgery (CSRF) attack to creat a new privileged user through the Webmin's add users feature

CVE-2021-31762—21 Apr 2021

Webmin 1.973 is affected by Cross Site Request Forgery (CSRF) to create a privileged user through Webmin's add users fea

23RISK

GitHub PoC★ 1

Exploiting a Cross-site request forgery (CSRF) attack to creat a new privileged user through the Webmin's add users feature

CVE-2021-31762—21 Apr 2021

Webmin 1.973 is affected by Cross Site Request Forgery (CSRF) to create a privileged user through Webmin's add users fea

23RISK

VulnCheck XDB

client-side

CVE-2021-22893CRITICALunder attackransomware21 Apr 2021

Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windo

90RISK

GitHub PoC★ 4

Exploiting a Reflected Cross-Site Scripting (XSS) attack to get a Remote Command Execution (RCE) through the Webmin's running process feature

CVE-2021-31761—21 Apr 2021

Webmin 1.973 is affected by reflected Cross Site Scripting (XSS) to achieve Remote Command Execution through Webmin's ru

35RISK

Metasploit500

Pi-Hole Remove Commands Linux Priv Esc

CVE-2021-29449MEDIUM20 Apr 2021

Multiple Privilege Escalation Vulnerabilities Pihole

28RISK

GitHub PoC

jquery file upload poc

CVE-2018-9206—20 Apr 2021

Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0

60RISK

VulnCheck XDB

remote-with-credentials

CVE-2018-9206—20 Apr 2021

Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0

60RISK

VulnCheck XDB

local

CVE-2021-3493HIGHunder attack19 Apr 2021

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o

98RISK

GitHub PoC★ 442

Ubuntu OverlayFS Local Privesc

CVE-2021-3493HIGHunder attack19 Apr 2021

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o

98RISK

GitHub PoC

針對近期微軟公布修補遭駭客攻擊的Exchange Server漏洞問題，台灣DEVCORE表示早在1月5日便已發現安全漏洞後，並且向微軟通報此項編號命名為「CVE-2021-26855 」，以及「CVE-2021-27065」的零日漏洞，同時也將此項漏洞稱為「ProxyLogon」。此次揭露的「ProxyLogon」漏洞，是以無需驗證即可使用的遠端程式碼執行 (Pre-Auth Remote Code Execution；Pre-Auth RCE)零日漏洞(Zero-day exploit)，可讓攻擊者得以繞過身份驗證步驟，驅使系統管理員協助執行惡意文件或執行指令，進而觸發更廣泛的攻擊。「ProxyLogon」是微軟近期被揭露最重大的RCE漏洞之一，DEVCORE團隊遵循責任揭露 (Responsible Disclosure)原則，在發現後便第一時間立即於今年1月5日通報微軟進行修補，避免該漏洞遭有心人士利用，造成全球用戶重大損失。而微軟遂於3月2日針對相關漏洞釋出安全更新，避免用戶機敏資訊遭受惡意攻擊。個人想法:遭駭客攻擊的Exchange Server漏洞問題，台灣DEVCORE表示早在1月5日便已發現，並且向微軟通報此項編號命名為「CVE-2021-26855 」，以及「CVE-2021-27065」的零日漏洞，同時也將此項漏洞稱為「ProxyLogon」。此次揭露的「ProxyLogon」漏洞，是以無需驗證即可使用的遠端程式碼執行 (Pre-Auth Remote Code Execution；Pre-Auth RCE)零日漏洞(Zero-day exploit)，可讓攻擊者得以繞過身份驗證步驟，驅使系統管理員協助執行惡意文件或執行指令，進而觸發更廣泛的攻擊。「ProxyLogon」是微軟近期被揭露最重大的RCE漏洞之一，DEVCORE團隊遵循責任揭露 (Responsible Disclosure)原則，在發現後便第一時間立即於今年1月5日通報微軟進行修補，避免該漏洞遭有心人士利用，造成全球用戶重大損失。而微軟遂於3月2日針對相關漏洞釋出安全更新，避免用戶機敏資訊遭受惡意攻擊。個人想法:微軟是大眾常用的軟體之一，駭客只要察覺漏洞就會進行惡意的攻擊，微軟公布4個Exchange Server的安全漏洞後，就遭受駭客的惡意攻擊，這件事的發生，微軟需更加小心並提高資安的防護。

CVE-2021-26855CRITICALunder attackransomware19 Apr 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISK

VulnCheck XDB

local

CVE-2015-1701HIGHunder attackransomware16 Apr 2021

Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local

98RISK

GitHub PoC★ 43

WordPress - Authenticated XXE (CVE-2021-29447)

CVE-2021-29447HIGH16 Apr 2021

WordPress Authenticated XXE attack when installation is running PHP 8

63RISK

GitHub PoC

cve-2007-2447 this script was rewrite the part of Metasploit modules to python3

CVE-2007-2447—16 Apr 2021

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands

50RISK

GitHub PoC★ 3

my personal POC of CVE-2016-5195(dirtyCOW)

CVE-2016-5195HIGHunder attack16 Apr 2021

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISK

VulnCheck XDB

local

CVE-2016-5195HIGHunder attack16 Apr 2021

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISK

VulnCheck XDB

initial-access

CVE-2017-12617HIGHunder attack16 Apr 2021

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTT

100RISK

Exploit-DB

Tileserver-gl 3.0.0 - 'key' Reflected Cross-Site Scripting (XSS)

CVE-2020-15500—webappsmultiple15 Apr 2021

An issue was discovered in server.js in TileServer GL through 3.0.0. The content of the key GET parameter is reflected u

43RISK

Exploit-DB

htmly 2.8.0 - 'description' Stored Cross-Site Scripting (XSS)

CVE-2021-30637—webappsmultiple15 Apr 2021

htmly 2.8.0 allows stored XSS via the blog title, Tagline, or Description to config.html.php.

23RISK

Metasploit300

Apache Tapestry HMAC secret key leak

CVE-2021-27850—15 Apr 2021

Bypass of the fix for CVE-2019-0195

60RISK

GitHub PoC★ 63

CVE-2021-27928 MariaDB/MySQL-'wsrep provider' 命令注入漏洞

CVE-2021-27928—15 Apr 2021

A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, a

35RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.