Core Certified Exploits

Expert validated exploits for safe and effective pen tests

Exploit development can be an advanced penetration testing skill that takes time to master. Additionally, when on a job, pen testers often don’t have the resources to create a new exploit. Many resort to searching for and using pre-written exploits that have not been tested and must go through the timely effort of quality assurance testing in order to ensure they are secure and effective. 

Core Impact users can save time by finding all the up-to-date exploits they need in one place. We provide a robust library of exploits designed to enable pen testers to safely and efficiently conduct successful penetration tests. Whether written by our own internal team or by a third party like ExCraft, you can trust they have been thoroughly tested and validated by our experts.

Stay Informed of New Core Certified Exploits

Subscribe to receive regular email updates on new exploits available for Core Impact

 

Browse the Core Certified Exploit Library

We provide pen testers with real-time updates for a wide range of exploits for different platforms, operating systems, and applications. 

 

Search our continuously growing library to discover an exploit that will allow you to gain and retain access on the target host or application.

Title Description Date Added CVE Link Exploit Platform Exploit Type Product Name
PolicyKit pkexec Elevation of Privilege Vulnerability Exploit A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. February 4, 2022 CVE-2021-4034 Linux Exploits / Local Impact
NTFS Set Short Name Checker This module allow to set a short name 8.3 of a file when you don't have write privileges to the directory where the file is located.The vulnerability exists due to NtfsSetShortNameInfo does not properly impose security restrictions in NTFS Set Short Name, which leads to security restrictions bypass and privilege escalation.

 January 28, 2022 CVE-2021-43240 Windows Exploits / Tools Impact
Raspberry Pi Default Credentials Exploit Raspberry Pi OS through 5.10 has the raspberry default password for the pi account. If not changed, attackers can gain administrator privileges. January 6, 2022 CVE-2021-38759 Exploits / Remote Impact
Microsoft Windows NTFS Elevation of Privilege Vulnerability Exploit An elevation of privilege vulnerability exists in Windows when the NTFS component fails to properly handle objects in memory.

An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode, then install programs, view,

change, delete data or create new accounts with full user rights.

 December 27, 2021 CVE-2021-31956 Windows Exploits / Local Impact
Grafana getPluginAssets Path Traversal Local File Disclosure Exploit A path traversal vulnerability in Grafana may allow an unauthenticated attacker to download system files through specially crafted HTTP resource requests. December 21, 2021 CVE-2021-43798 Windows, Linux Exploits / Remote File Disclosure Impact
VMware vCenter Server Log4shell Remote Code Execution Vulnerability Exploit JNDI features used in configuration, log messages, and parameters present in Apache Log4j2 do not protect against attacker controlled LDAP and other JNDI related endpoints. This library, used by VMware vCenter Server, allows unauthenticated attackers to execute system commands. December 13, 2021 CVE-2021-44228 Windows, Linux Exploits / Remote Code Execution Impact
VMware vRealize Operations Manager Log4shell Remote Code Execution Vulnerability Exploit JNDI features used in configuration, log messages, and parameters present in Apache Log4j2 do not protect against attacker controlled LDAP and other JNDI related endpoints. This library, used by VMware vRealize Operations Manager, allows unauthenticated attackers to execute system commands. December 13, 2021 CVE-2021-44228 Linux Exploits / Remote Code Execution Impact
Microsoft Exchange TypedBinaryFormatter Deserialization Remote Code Execution Vulnerability Exploit A deserialization vulnerability present in the TypedBinaryFormatter class allows authenticated remote attackers to execute arbitrary OS commands with SYSTEM user privileges. December 10, 2021 CVE-2021-42321 Windows Exploits / Remote Code Execution Impact
Microsoft Windows Kernel ObpCreateSymbolicLinkName Denial of Service Exploit Update This module leverages on a race condition in the Windows kernel using symbolic links to crash the system.



This update adds the CVE number 		December 10, 2021 CVE-2021-41335 Windows Denial of Service / Local Impact
Wordpress <4.9.6 Arbitrary File Delete CVE-2018-12895 Wordpress December 9, 2021 Exploits / Remote SCADAPRO
PHPMyAdmin CVE-2018-12613 PHPMyAdmin Remote Code Execution December 9, 2021 Windows, Linux Exploits / Remote Code Execution SCADAPRO
Handysoft Co., Ltd Groupware HShell.dll Remote Code Execution Vulnerability This module will receive HTTP requests from vulnerable clients and install agents on them. December 9, 2021 CVE-2021-26608 Exploits / Client Side SCADAPRO
GitLab 13.10.2 - Remote Code Execution CVE-2021-22205
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9.
GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution.

Tested on GitLab CE 13.10.2 		December 9, 2021 Exploits / Remote Code Execution SCADAPRO
Soyal VisualProx Access Control Denial of Service Remote Denial Soyal VisualProx Access Control December 9, 2021 Windows Denial of Service / Remote SCADA
Eaton Visual Designer v7.1 software Remote Code Execution Vulnerability This module will receive HTTP requests from vulnerable clients and install agents on them. December 9, 2021 Exploits / Client Side SCADA
Eaton Lean Automation XP12inDemoProgram Directory Traversal and file disclosure Vulnerability This module exploits a directory traversal vulnerability in Eaton Automation XP12inDemoProgram December 9, 2021 Windows Exploits / Remote SCADA
Linux Kernel Netfilter Xt Compat Target From User Local Privilege Escalation Exploit A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space.

 December 1, 2021 CVE-2021-22555 Linux Exploits / Local Impact
Atlassian Confluence Webwork OGNL Injection Vulnerability Exploit An OGNL injection vulnerability in Confluence Server and Data Center allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. November 25, 2021 CVE-2021-26084 Linux, Windows Exploits / Remote Code Execution Impact
Canon Printer TR150 Driver Local Privilege Escalation Exploit The Canon TR150 print driver is vulnerable to a privilege escalation issue. During the add printer process an attacker can overwrite a DLL and, if timed properly, the overwritten DLL will be loaded into a SYSTEM process resulting in escalation of privileges. November 18, 2021 CVE-2021-38085 Windows Exploits / Local Impact
Mitsubishi Electric and INEA SmartRTU Source Code Disclosure Vulnerability Mitsubishi Electric meets these demands with the smartRTU. It supports protocols such as
DNP3 and IEC 60870. The smart- RTU combines the reliability and robustness of our standard
PLC technology with a smart communication gateway, the ME-RTU gateway. 		November 12, 2021 CVE-2021-40382 Exploits / Client Side SCADAPRO
Atlassian Jira Server/Data Center 8.16.0 - Cross-Site Scripting CVE-2021-26078
The number range searcher component in Jira Server and Jira Data Center
before version 8.5.14, from version 8.6.0 before version 8.13.6, and from version 8.14.0 before version 8.16.1
allows remote attackers inject arbitrary HTML or JavaScript via across site scripting (XSS) vulnerability. 		November 12, 2021 Exploits / Remote SCADAPRO
Jeedom 4.1.19 Authenticated Privilege Escalation Jeedom 4.1.19 Dashboard Authorized Privilege Escalation November 12, 2021 Exploits / Remote SCADAPRO
Delta Industrial Automation COMMGR (ModBus) 1.08 Denial of Service Remote Denial Delta Industrial Automation COMMGR November 12, 2021 Windows Denial of Service / Remote SCADAPRO
Confluence 7.12.2 - Arbitrary File Read CVE-2021-26085
Affected versions of Atlassian Confluence Server allow remote attackers to view restricted
resources via a Pre-Authorization Arbitrary File Read vulnerability in the /s/ endpoint.
The affected versions are before version 7.4.10, and from version 7.5.0 before 7.12.3.

Tested against Atlassian Confluence 7.12.2 		November 12, 2021 Exploits / Remote File Disclosure SCADAPRO
ECOA Building Automation System Config file download ECOA Building Automation System configuration download November 12, 2021 Exploits / Client Side SCADA