Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
79,107cataloged exploits
36,322CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,464Referência 22,936GitHub PoC 15,010VulnCheck XDB 8,846Nuclei 4,361Metasploit 3,490✓ verified onlyrecentpopularrisk
79,057 exploits
GitHub PoC★ 10
CVE-2020-1472复现时使用的py文件整理打包
Netlogon Elevation of Privilege Vulnerability
100RISK
open ↗Exploit-DB
Mantis Bug Tracker 2.3.0 - Remote Code Execution (Unauthenticated)
MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirm_hash value
60RISK
open ↗GitHub PoC★ 1
pwn3z/CVE-2019-11510-PulseVPN
In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthent
100RISK
open ↗VulnCheck XDB
initial-access
An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.
100RISK
open ↗VulnCheck XDB
initial-access
In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthent
100RISK
open ↗GitHub PoC★ 61
Test script for CVE-2020-1472 for both RPC/TCP and RPC/SMB
Netlogon Elevation of Privilege Vulnerability
100RISK
open ↗GitHub PoC★ 114
PoC exploits for CVE-2020-17382
The MSI AmbientLink MsIo64 driver 1.0.0.8 has a Buffer Overflow (0x80102040, 0x80102044, 0x80102050,and 0x80102054).
23RISK
open ↗VulnCheck XDB
initial-access
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISK
open ↗Exploit-DB
Microsoft SQL Server Reporting Services 2016 - Remote Code Execution
A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page
100RISK
open ↗GitHub PoC★ 70
rsmudge/CVE-2020-0796-BOF
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISK
open ↗GitHub PoC★ 1
pwn3z/CVE-2018-13379-FortinetVPN
An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.
100RISK
open ↗GitHub PoC★ 1
https://github.com/dirkjanm/CVE-2020-1472
Netlogon Elevation of Privilege Vulnerability
100RISK
open ↗GitHub PoC★ 1
[CVE-2020-1472] Netlogon Remote Protocol Call (MS-NRPC) Privilege Escalation (Zerologon)
Netlogon Elevation of Privilege Vulnerability
100RISK
open ↗GitHub PoC★ 1
Fa1c0n35/SecuraBV-CVE-2020-1472
Netlogon Elevation of Privilege Vulnerability
100RISK
open ↗GitHub PoC★ 2
cve-2020-1472_Tool collection
Netlogon Elevation of Privilege Vulnerability
100RISK
open ↗GitHub PoC★ 2
CVE-2020-1472 - Zero Logon vulnerability Python implementation
Netlogon Elevation of Privilege Vulnerability
100RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.