Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

79,305cataloged exploits
36,465CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,466Referência 23,051GitHub PoC 15,051VulnCheck XDB 8,883Nuclei 4,361Metasploit 3,493✓ verified onlyrecentpopularrisk
79,230 exploits
GitHub PoC★ 1
Curated list of CVE-2020-0601 resources
CVE-2020-0601HIGHunder attack16 Jan 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RISK
open ↗
GitHub PoC★ 66
Proof of Concept for CVE-2020-0601
CVE-2020-0601HIGHunder attack16 Jan 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RISK
open ↗
Exploit-DB
Jenkins Gitlab Hook Plugin 1.4.2 - Reflected Cross-Site Scripting
CVE-2020-2096—webappsjava16 Jan 2020
Jenkins Gitlab Hook Plugin 1.4.2 and earlier does not escape project names in the build_now endpoint, resulting in a ref
60RISK
open ↗
VulnCheck XDB
client-side
CVE-2020-0601HIGHunder attack16 Jan 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-2883CRITICALunder attack15 Jan 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-14883HIGHunder attack15 Jan 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2019-2725HIGHunder attackransomware15 Jan 2020
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-14882CRITICALunder attack15 Jan 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISK
open ↗
VulnCheck XDB
client-side
CVE-2020-0601HIGHunder attack15 Jan 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-14750CRITICALunder attack15 Jan 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2018-2894—15 Jan 2020
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Su
50RISK
open ↗
VulnCheck XDB
initial-access
CVE-2017-3506HIGHunder attack15 Jan 2020
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2018-2628CRITICALunder attack15 Jan 2020
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2017-10271HIGHunder attackransomware15 Jan 2020
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte
100RISK
open ↗
VulnCheck XDB
remote-with-credentials
CVE-2019-2618—15 Jan 2020
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S
35RISK
open ↗
GitHub PoC
Check your website for CVE-2019-19781 Vulnerable
CVE-2019-19781CRITICALunder attackransomware15 Jan 2020
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th
100RISK
open ↗
Exploit-DB✓ VexDay Proof
Barco WePresent - file_transfer.cgi Command Injection (Metasploit)
CVE-2019-3929CRITICALunder attackremotelinux15 Jan 2020
The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Ba
100RISK
open ↗
GitHub PoC
IOCs for CVE-2019-19781
CVE-2019-19781CRITICALunder attackransomware15 Jan 2020
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2019-2729CRITICAL15 Jan 2020
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte
85RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-2551CRITICALunder attack15 Jan 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppor
100RISK
open ↗
GitHub PoC★ 3
Automated forensic script hunting for cve-2019-19781
CVE-2019-19781CRITICALunder attackransomware15 Jan 2020
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-2555CRITICALunder attack15 Jan 2020
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Su
100RISK
open ↗
GitHub PoC★ 2,071
weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883
CVE-2020-2551CRITICALunder attack15 Jan 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppor
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2018-2893—15 Jan 2020
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S
60RISK
open ↗
GitHub PoC★ 35
Zeek package to detect CVE-2020-0601
CVE-2020-0601HIGHunder attack15 Jan 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RISK
open ↗
Metasploit300
WebLogic Server Deserialization RCE - BadAttributeValueExpException
CVE-2020-2555CRITICALunder attack15 Jan 2020
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Su
100RISK
open ↗
GitHub PoC★ 335
A PoC for CVE-2020-0601
CVE-2020-0601HIGHunder attack15 Jan 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RISK
open ↗
GitHub PoC★ 1
A Windows Crypto Exploit
CVE-2020-0601HIGHunder attack15 Jan 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RISK
open ↗
GitHub PoC★ 889
PoC for CVE-2020-0601- Windows CryptoAPI (Crypt32.dll)
CVE-2020-0601HIGHunder attack15 Jan 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RISK
open ↗
GitHub PoC★ 5
Zeek package that uses OpenSSL to detect CVE-2020-0601 exploit attempts
CVE-2020-0601HIGHunder attack15 Jan 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RISK
open ↗
← previouspage 796 / 2,641next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.