Exploit catalog results

Showing 21 PoCs on this page

Metasploit

Ivanti Connect Secure Unauthenticated Remote Code Execution via Stack-based Buffer Overflow

Metasploit exploitby Stephen FewerAdded to Metasploit 2025-04-30
Not analyzedCVE-2025-224571 file

exploit_linux/http/ivanti_connect_secure_stack_overflow_rce_cve_2025_22457 · Ruby

Metasploit

Ivanti Connect Secure Authenticated Remote Code Execution via OpenSSL CRLF Injection

Metasploit exploitby Richard WarrenAdded to Metasploit 2024-12-02
Not analyzedCVE-2024-374041 file

exploit_linux/http/ivanti_connect_secure_rce_cve_2024_37404 · Ruby

Metasploit

Ivanti EPM RecordGoodApp SQLi RCE

Metasploit exploitby James HorsemanAdded to Metasploit 2024-06-20
Not analyzedCVE-2024-298241 file

exploit_windows/http/ivanti_epm_recordgoodapp_sqli_rce · Ruby

Metasploit

Cacti Import Packages RCE

Metasploit exploitby Egidio RomanoAdded to Metasploit 2024-05-22
Not analyzedCVE-2024-256411 file

exploit_multi/http/cacti_package_import_rce · Ruby

Metasploit

CrushFTP Unauthenticated RCE

Metasploit exploitby Ryan EmmonsAdded to Metasploit 2024-03-25
Not analyzedCVE-2023-431771 file

exploit_multi/http/crushftp_rce_cve_2023_43177 · Ruby

Metasploit

Cacti RCE via SQLi in pollers.php

Metasploit exploitby Aleksey SolovevAdded to Metasploit 2024-01-30
Not analyzedCVE-2023-49084CVE-2023-490851 file

exploit_multi/http/cacti_pollers_sqli_rce · Ruby

Metasploit

Ancillary Function Driver (AFD) for WinSock Elevation of Privilege

Metasploit exploitby Yarden Shafir, plus 2 additional contributorsAdded to Metasploit 2023-03-27
Not analyzedCVE-2023-217681 file

exploit_windows/local/cve_2023_21768_afd_lpe · Ruby

Metasploit

ManageEngine Endpoint Central Unauthenticated SAML RCE

Metasploit exploitby Khoa Dinh, plus 2 additional contributorsAdded to Metasploit 2023-01-29
Not analyzedCVE-2022-479661 file

exploit_windows/http/manageengine_endpoint_central_saml_rce_cve_2022_47966 · Ruby

Metasploit

ManageEngine ADSelfService Plus Unauthenticated SAML RCE

Metasploit exploitby Khoa Dinh, plus 1 additional contributorAdded to Metasploit 2023-01-26
Not analyzedCVE-2022-479661 file

exploit_multi/http/manageengine_adselfservice_plus_saml_rce_cve_2022_47966 · Ruby

Metasploit

ManageEngine ServiceDesk Plus Unauthenticated SAML RCE

Metasploit exploitby Khoa Dinh, plus 1 additional contributorAdded to Metasploit 2023-01-23
Not analyzedCVE-2022-479661 file

exploit_multi/http/manageengine_servicedesk_plus_saml_rce_cve_2022_47966 · Ruby

Metasploit

Active Directory Certificate Services (ADCS) privilege escalation (Certifried)

Metasploit auxiliary PoCby CravateRouge, plus 2 additional contributorsAdded to Metasploit 2023-01-13
Not analyzedCVE-2022-269231 file

auxiliary_admin/dcerpc/cve_2022_26923_certifried · Ruby

Metasploit

Webmin Package Updates RCE

Metasploit exploitby Emir PolatAdded to Metasploit 2022-08-03
Not analyzedCVE-2022-364461 file

exploit_linux/http/webmin_package_updates_rce · Ruby

Metasploit

MyBB Admin Control Code Injection RCE

Metasploit exploitby Altelus, plus 1 additional contributorAdded to Metasploit 2022-05-23
Not analyzedCVE-2022-247341 file

exploit_multi/http/mybb_rce_cve_2022_24734 · Ruby

Metasploit

Print Spooler Remote DLL Injection

Metasploit exploitby Piotr Madej, plus 6 additional contributorsAdded to Metasploit 2022-05-16
Not analyzedCVE-2021-1675CVE-2021-345271 file

exploit_windows/dcerpc/cve_2021_1675_printnightmare · Ruby

Metasploit

Docker Container Escape Via runC Overwrite

Metasploit exploitby Adam Iwaniuk, plus 3 additional contributorsAdded to Metasploit 2021-06-30
Not analyzedCVE-2018-5736CVE-2019-57361 file

exploit_linux/local/docker_runc_escape · Ruby

Metasploit

Gitea Git Hooks Remote Code Execution

Metasploit exploitby PodaliriusAdded to Metasploit 2021-03-31
Not analyzedCVE-2020-141441 file

exploit_multi/http/gitea_git_hooks_rce · Ruby

Metasploit

Gogs Git Hooks Remote Code Execution

Metasploit exploitby PodaliriusAdded to Metasploit 2021-03-31
Not analyzedCVE-2020-14144CVE-2020-158671 file

exploit_multi/http/gogs_git_hooks_rce · Ruby

Metasploit

SaltStack Salt API Unauthenticated RCE through wheel_async client

Metasploit exploitby Alex SeymourAdded to Metasploit 2021-03-26
Not analyzedCVE-2021-25281CVE-2021-252821 file

exploit_linux/http/saltstack_salt_wheel_async_rce · Ruby

Metasploit

SpamTitan Unauthenticated RCE

Metasploit exploitby Felipe MolinaAdded to Metasploit 2020-12-16
Not analyzedCVE-2020-116981 file

exploit_freebsd/webapp/spamtitan_unauth_rce · Ruby

Metasploit

Cisco AnyConnect Privilege Escalations (CVE-2020-3153 and CVE-2020-3433)

Metasploit exploitby Antoine Goichot (ATGO), plus 1 additional contributorAdded to Metasploit 2020-09-25
Not analyzedCVE-2020-3153CVE-2020-34331 file

exploit_windows/local/anyconnect_lpe · Ruby

Metasploit

WordPress XMLRPC GHOST Vulnerability Scanner

Metasploit auxiliary PoCby Chaim Sanders, plus 5 additional contributorsAdded to Metasploit 2015-01-30
Not analyzedCVE-2015-02351 file

auxiliary_scanner/http/wordpress_ghost_scanner · Ruby