Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,496cataloged exploits

34,964CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,443Referência 21,899GitHub PoC 13,937VulnCheck XDB 8,510Nuclei 4,239Metasploit 3,468✓ verified onlyrecent popular risk

13,937 exploits

GitHub PoC★ 6

Wordpress Plugin Simple Job Board 2.9.3 LFI Vulnerability (CVE-2020-35749) proof of concept exploit

CVE-2020-35749—06 Feb 2022

Directory traversal vulnerability in class-simple_job_board_resume_download_handler.php in the Simple Board Job plugin 2

50RISK

open ↗

GitHub PoC

giardinas-dev/audit-xss-cve-2020-7934

CVE-2020-7934—04 Feb 2022

In LifeRay Portal CE 7.1.0 through 7.2.1 GA2, the First Name, Middle Name, and Last Name fields for user accounts in MyA

23RISK

open ↗

GitHub PoC

IAmNewbieZ/CVE-2021-44228

CVE-2021-44228CRITICALunder attackransomware04 Feb 2022

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISK

open ↗

GitHub PoC★ 8

PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec in Python

CVE-2021-4034HIGHunder attack04 Feb 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISK

open ↗

GitHub PoC★ 196

L4ys/CVE-2022-21882

CVE-2022-21882HIGHunder attack03 Feb 2022

Win32k Elevation of Privilege Vulnerability

98RISK

open ↗

GitHub PoC★ 1

Apache HTTP Server 2.4.50 - RCE Lab

CVE-2021-42013CRITICALunder attackransomware03 Feb 2022

Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

100RISK

open ↗

GitHub PoC

Kayky-cmd/CVE-2019-6447--.

CVE-2019-6447—03 Feb 2022

The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary fi

50RISK

open ↗

GitHub PoC

Study on Linux kernel code injection via CVE-2014-3153 (Towelroot)

CVE-2014-3153HIGHunder attack01 Feb 2022

The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two diff

98RISK

open ↗

GitHub PoC

qkrtjsrbs315/CVE-2013-1763

CVE-2013-1763—01 Feb 2022

Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows l

23RISK

open ↗

GitHub PoC★ 8

CVE-2022-21882

CVE-2022-21882HIGHunder attack01 Feb 2022

Win32k Elevation of Privilege Vulnerability

98RISK

open ↗

GitHub PoC★ 9

CVE-2021-3560 analysis

CVE-2021-3560HIGHunder attack31 Jan 2022

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile

91RISK

open ↗

GitHub PoC★ 3

CVE-2013-3660的x64 win7平台EXP源代码，成功率100%。

CVE-2013-3660HIGHunder attack29 Jan 2022

The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windo

98RISK

open ↗

GitHub PoC

Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an attacker runs a specially crafted application, aka "Windows COM Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-0214.

CVE-2017-0213HIGHunder attackransomware29 Jan 2022

Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Ser

93RISK

open ↗

GitHub PoC★ 1

pwnkit

CVE-2021-4034HIGHunder attack28 Jan 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISK

open ↗

GitHub PoC

galoget/PwnKit-CVE-2021-4034

CVE-2021-4034HIGHunder attack28 Jan 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISK

open ↗

GitHub PoC★ 4

CVE-2021-4034 PoC , polkit < 0.131

CVE-2021-4034HIGHunder attack27 Jan 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISK

open ↗

GitHub PoC★ 351

Proof of concept for pwnkit vulnerability

CVE-2021-4034HIGHunder attack27 Jan 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISK

open ↗

GitHub PoC

Codiad through 2.8.4 allows Remote Code Execution, a different vulnerability than CVE-2017-11366 and CVE-2017-15689

CVE-2018-14009—27 Jan 2022

Codiad through 2.8.4 allows Remote Code Execution, a different vulnerability than CVE-2017-11366 and CVE-2017-15689.

35RISK

open ↗

GitHub PoC

khaclep007/CVE-2022-0185

CVE-2022-0185HIGHunder attack27 Jan 2022

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functio

76RISK

open ↗

GitHub PoC

BrunoPincho/cve-2018-16763-rust

CVE-2018-16763—27 Jan 2022

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca

60RISK

open ↗

GitHub PoC★ 11

CVE-2021-3156 POC and Docker and Analysis write up

CVE-2021-3156HIGHunder attack27 Jan 2022

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RISK

open ↗

GitHub PoC★ 462

win32k LPE

CVE-2022-21882HIGHunder attack27 Jan 2022

Win32k Elevation of Privilege Vulnerability

98RISK

open ↗

GitHub PoC★ 1,157

PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034)

CVE-2021-4034HIGHunder attack26 Jan 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISK

open ↗

GitHub PoC★ 5

discordianfish/cve-2022-0185-crash-poc

CVE-2022-0185HIGHunder attack26 Jan 2022

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functio

76RISK

open ↗

GitHub PoC★ 4

Y3A/CVE-2021-4034

CVE-2021-4034HIGHunder attack26 Jan 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISK

open ↗

GitHub PoC★ 1,319

Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation

CVE-2021-4034HIGHunder attack26 Jan 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISK

open ↗

GitHub PoC★ 1

统信UOS 桌面操作系统，存在CVE-2021-4034漏洞（Linux Polkit本地权限提升漏洞）。

CVE-2021-4034HIGHunder attack26 Jan 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISK

open ↗

GitHub PoC★ 20

dadvlingd/CVE-2021-4034

CVE-2021-4034HIGHunder attack26 Jan 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISK

open ↗

GitHub PoC★ 12

CVE-2021-4034 POC and Docker and Analysis write up

CVE-2021-4034HIGHunder attack26 Jan 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISK

open ↗

GitHub PoC★ 3

PoC for cve-2021-4034

CVE-2021-4034HIGHunder attack26 Jan 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.