Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

79,107cataloged exploits
36,322CVEs with public exploitation
24,695lab-tested
79,057 exploits
GitHub PoC1
Zabbix Template to monitor for Windows Event Viewer event's related to Netlogon Elevation of Privilege Vulnerability - CVE-2020-1472. Monitors event ID's 5827, 5828 & 5829. See: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1472
CVE-2020-1472MEDIUMunder attackransomware16 Sep 2020
Netlogon Elevation of Privilege Vulnerability
100RISK
open
GitHub PoC2
cve-2020-1472_Tool collection
CVE-2020-1472MEDIUMunder attackransomware16 Sep 2020
Netlogon Elevation of Privilege Vulnerability
100RISK
open
GitHub PoC1
Serie de scripts para enumerar nombres de usuarios de JIRA a partir de vulnerabilidades conocidas (CVE-2020-14181, CVE-2019-3403, CVE-2019-8449...)
CVE-2020-1418115 Sep 2020
Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Infor
60RISK
open
GitHub PoC2
CVE-2020-1472漏洞复现过程
CVE-2020-1472MEDIUMunder attackransomware15 Sep 2020
Netlogon Elevation of Privilege Vulnerability
100RISK
open
GitHub PoC1
CVE-2020-1472
CVE-2020-1472MEDIUMunder attackransomware15 Sep 2020
Netlogon Elevation of Privilege Vulnerability
100RISK
open
GitHub PoC58
Ladon Moudle CVE-2020-1472 Exploit 域控提权神器
CVE-2020-1472MEDIUMunder attackransomware15 Sep 2020
Netlogon Elevation of Privilege Vulnerability
100RISK
open
Exploit-DB
ThinkAdmin 6 - Arbitrarily File Read
CVE-2020-25540webappsphp15 Sep 2020
ThinkAdmin v6 is affected by a directory traversal vulnerability. An unauthorized attacker can read arbitrarily file on
60RISK
open
GitHub PoC4
CVE-2020-1472复现流程
CVE-2020-1472MEDIUMunder attackransomware15 Sep 2020
Netlogon Elevation of Privilege Vulnerability
100RISK
open
GitHub PoC8
PoC for Zerologon (CVE-2020-1472) - Exploit
CVE-2020-1472MEDIUMunder attackransomware15 Sep 2020
Netlogon Elevation of Privilege Vulnerability
100RISK
open
VulnCheck XDB
initial-access
CVE-2020-1472MEDIUMunder attackransomware15 Sep 2020
Netlogon Elevation of Privilege Vulnerability
100RISK
open
VulnCheck XDB
initial-access
CVE-2020-1472MEDIUMunder attackransomware15 Sep 2020
Netlogon Elevation of Privilege Vulnerability
100RISK
open
VulnCheck XDB
initial-access
CVE-2020-1472MEDIUMunder attackransomware15 Sep 2020
Netlogon Elevation of Privilege Vulnerability
100RISK
open
VulnCheck XDB
initial-access
CVE-2020-1472MEDIUMunder attackransomware15 Sep 2020
Netlogon Elevation of Privilege Vulnerability
100RISK
open
VulnCheck XDB
initial-access
CVE-2020-1472MEDIUMunder attackransomware14 Sep 2020
Netlogon Elevation of Privilege Vulnerability
100RISK
open
VulnCheck XDB
initial-access
CVE-2020-1472MEDIUMunder attackransomware14 Sep 2020
Netlogon Elevation of Privilege Vulnerability
100RISK
open
VulnCheck XDB
initial-access
CVE-2020-1472MEDIUMunder attackransomware14 Sep 2020
Netlogon Elevation of Privilege Vulnerability
100RISK
open
VulnCheck XDB
initial-access
CVE-2020-1472MEDIUMunder attackransomware14 Sep 2020
Netlogon Elevation of Privilege Vulnerability
100RISK
open
VulnCheck XDB
remote-with-credentials
CVE-2020-1472MEDIUMunder attackransomware14 Sep 2020
Netlogon Elevation of Privilege Vulnerability
100RISK
open
GitHub PoC6
(CVE-2017-9841) PHPUnit_eval-stdin_php Remote Code Execution
CVE-2017-9841CRITICALunder attack14 Sep 2020
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP c
100RISK
open
VulnCheck XDB
initial-access
CVE-2017-9841CRITICALunder attack14 Sep 2020
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP c
100RISK
open
GitHub PoC706
Exploit for zerologon cve-2020-1472
CVE-2020-1472MEDIUMunder attackransomware14 Sep 2020
Netlogon Elevation of Privilege Vulnerability
100RISK
open
GitHub PoC398
Exploit Code for CVE-2020-1472 aka Zerologon
CVE-2020-1472MEDIUMunder attackransomware14 Sep 2020
Netlogon Elevation of Privilege Vulnerability
100RISK
open
GitHub PoC1,322
PoC for Zerologon - all research credits go to Tom Tervoort of Secura
CVE-2020-1472MEDIUMunder attackransomware14 Sep 2020
Netlogon Elevation of Privilege Vulnerability
100RISK
open
GitHub PoC179
Abuse CVE-2020-1472 (Zerologon) to take over a domain and then repair the local stored machine account password.
CVE-2020-1472MEDIUMunder attackransomware14 Sep 2020
Netlogon Elevation of Privilege Vulnerability
100RISK
open
Metasploit600
Apache Struts 2 Forced Multi OGNL Evaluation
CVE-2019-023014 Sep 2020
Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation, when evaluated on raw user input in tag attributes, may lea
60RISK
open
GitHub PoC38
cube0x0/CVE-2020-1472
CVE-2020-1472MEDIUMunder attackransomware14 Sep 2020
Netlogon Elevation of Privilege Vulnerability
100RISK
open
GitHub PoC1
H0j3n/CVE-2020-23934
CVE-2020-2393414 Sep 2020
An issue was discovered in RiteCMS 2.2.1. An authenticated user can directly execute system commands by uploading a php
28RISK
open
Metasploit600
Apache Struts 2 Forced Multi OGNL Evaluation
CVE-2020-17530CRITICALunder attack14 Sep 2020
Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected
100RISK
open
VulnCheck XDB
initial-access
CVE-2020-15505CRITICALunder attack13 Sep 2020
A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1,
100RISK
open
VulnCheck XDB
initial-access
CVE-2021-26084CRITICALunder attackransomware13 Sep 2020
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISK
open
previouspage 750 / 2,636next

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.