Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

79,305cataloged exploits

36,465CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,466Referência 23,051GitHub PoC 15,051VulnCheck XDB 8,883Nuclei 4,361Metasploit 3,493✓ verified onlyrecent popular risk

79,201 exploits

GitHub PoC★ 1

这资源是作者复现微软签字证书漏洞CVE-2020-0601，结合相关资源及文章实现。推荐大家结合作者博客，复现了该漏洞和理解恶意软件自启动劫持原理。作为网络安全初学者，自己确实很菜，但希望坚持下去，一起加油！

CVE-2018-20250HIGHunder attackransomware17 Feb 2020

In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field o

100RISK

Exploit-DB✓ VexDay Proof

Anviz CrossChex - Buffer Overflow (Metasploit)

CVE-2019-12518—remotewindows17 Feb 2020

Anviz CrossChex access control management software 4.3.8.0 and 4.3.12 is vulnerable to a buffer overflow vulnerability.

50RISK

VulnCheck XDB

initial-access

CVE-2020-7247CRITICALunder attack17 Feb 2020

smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to

100RISK

Exploit-DB

MSI Packages Symbolic Links Processing - Windows 10 Privilege Escalation

CVE-2020-0683HIGHunder attacklocalwindows17 Feb 2020

An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'W

71RISK

GitHub PoC★ 4

OpenSMTPD version 6.6.2 remote code execution exploit

CVE-2020-7247CRITICALunder attack17 Feb 2020

smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to

100RISK

VulnCheck XDB

initial-access

CVE-2016-4977—17 Feb 2020

When processing authorization requests using the whitelabel views in Spring Security OAuth 2.0.0 to 2.0.9 and 1.0.0 to 1

60RISK

GitHub PoC★ 30

这资源是作者复现微软签字证书漏洞CVE-2020-0601，结合相关资源及文章实现。推荐大家结合作者博客，理解ECC算法、Windows验证机制，并尝试自己复现可执行文件签名证书和HTTPS劫持的例子。作为网络安全初学者，自己确实很菜，但希望坚持下去，加油！

CVE-2020-0601HIGHunder attack17 Feb 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISK

GitHub PoC★ 41

Android privilege escalation via an use-after-free in binder.c

CVE-2019-2215HIGHunder attack17 Feb 2020

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

100RISK

VulnCheck XDB

local

CVE-2019-2215HIGHunder attack17 Feb 2020

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

100RISK

GitHub PoC★ 3

Hack The CCTV | DVRs; Credentials Exposed | CVE-2018-9995

CVE-2018-9995—15 Feb 2020

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L

60RISK

GitHub PoC★ 196

SQL Server Reporting Services(CVE-2020-0618)中的RCE

CVE-2020-0618CRITICALunder attackransomware15 Feb 2020

A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page

100RISK

VulnCheck XDB

initial-access

CVE-2018-9995—15 Feb 2020

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L

60RISK

GitHub PoC★ 2

User Enumeration Proof Of Concept Exploit for CVE-2019-8449

CVE-2019-8449—14 Feb 2020

The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate username

60RISK

GitHub PoC★ 1

POE code for CVE-2017-1000112 adapted to both funtion on a specific VM and Escape a Docker

CVE-2017-1000112—14 Feb 2020

Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSG_MORE

43RISK

Exploit-DB

PANDORAFMS 7.0 - Authenticated Remote Code Execution

CVE-2020-8947—webappsphp13 Feb 2020

functions_netflow.php in Artica Pandora FMS 7.0 allows remote attackers to execute arbitrary OS commands via shell metac

28RISK

GitHub PoC★ 2

An Python Exploit for Sudo vulnerability CVE-2019-18634

CVE-2019-18634—13 Feb 2020

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the

28RISK

GitHub PoC

exploit for DNS 4.3

CVE-2013-6987—13 Feb 2020

Multiple directory traversal vulnerabilities in the FileBrowser components in Synology DiskStation Manager (DSM) before

28RISK

VulnCheck XDB

remote-with-credentials

CVE-2019-9193—12 Feb 2020

In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and users in the 'pg_execute_serve

60RISK

GitHub PoC

PoC for CVE-2020-0601 vulnerability (Code Signing)

CVE-2020-0601HIGHunder attack12 Feb 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISK

GitHub PoC★ 3

PostgreSQL Remote Code Executuon

CVE-2019-9193—12 Feb 2020

In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and users in the 'pg_execute_serve

60RISK

Exploit-DB✓ VexDay Proof

HP System Event Utility - Local Privilege Escalation

CVE-2019-18915—localwindows12 Feb 2020

A potential security vulnerability has been identified with certain versions of HP System Event Utility prior to version

23RISK

Metasploit600

SQL Server Reporting Services (SSRS) ViewState Deserialization

CVE-2020-0618CRITICALunder attackransomware11 Feb 2020

A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page

100RISK

Metasploit600

Exchange Control Panel ViewState Deserialization

CVE-2020-0688HIGHunder attackransomware11 Feb 2020

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle o

100RISK

Metasploit600

Service Tracing Privilege Elevation Vulnerability

CVE-2020-0668—11 Feb 2020

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Window

23RISK

GitHub PoC

https://github.com/awakened1712/CVE-2019-11932

CVE-2019-11932—11 Feb 2020

A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version

35RISK

VulnCheck XDB

initial-access

CVE-2018-1335—11 Feb 2020

From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to

60RISK

Exploit-DB

Vanilla Forums 2.6.3 - Persistent Cross-Site Scripting

CVE-2020-8825—webappsphp11 Feb 2020

index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS.

23RISK

Exploit-DB✓ VexDay Proof

OpenSMTPD 6.4.0 < 6.6.1 - Local Privilege Escalation + Remote Code Execution

CVE-2020-7247CRITICALunder attackremoteopenbsd11 Feb 2020

smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to

100RISK

Exploit-DB

CHIYU BF430 TCP IP Converter - Stored Cross-Site Scripting

CVE-2020-8839—webappscgi11 Feb 2020

Stored XSS was discovered on CHIYU BF-430 232/485 TCP/IP Converter devices before 1.16.00, as demonstrated by the /if.cg

23RISK

VulnCheck XDB

local

CVE-2020-0683HIGHunder attack11 Feb 2020

An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'W

71RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.