Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

87,105cataloged exploits
40,548CVEs with public exploitation
24,696lab-tested
18,044 exploits
GitHub PoC
Pwnkit CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware01 Feb 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 2
PortSwigger Burp Plugin for the Log4j (CVE-2021-44228)
CVE-2021-44228CRITICALunder attackransomware31 Jan 2022
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
open ↗
GitHub PoC
CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware31 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 9
CVE-2021-3560 analysis
CVE-2021-3560HIGHunder attack31 Jan 2022
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RISK
open ↗
GitHub PoC★ 2
A complete PoC for CVE-2021-22204 exiftool RCE
CVE-2021-22204MEDIUMunder attack30 Jan 2022
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code exec
100RISK
open ↗
GitHub PoC★ 26
pwnkit: Local Privilege Escalation in polkit's pkexec (CVE-2021-4034)
CVE-2021-4034HIGHunder attackransomware30 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 6
PwnKit PoC for Polkit pkexec CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware30 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 8
centos 6.10 rpm for fix polkit CVE-2021-4034; centos 6.10的rpm包,修复CVE-2021-4034 漏洞
CVE-2021-4034HIGHunder attackransomware29 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 2
CVE-2013-3660的x64 win7平台EXP源代码,成功率100%。
CVE-2013-3660HIGHunder attack29 Jan 2022
The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windo
98RISK
open ↗
GitHub PoC
Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an attacker runs a specially crafted application, aka "Windows COM Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-0214.
CVE-2017-0213HIGHunder attackransomware29 Jan 2022
Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Ser
93RISK
open ↗
GitHub PoC
milot/dissecting-pkexec-cve-2021-4034
CVE-2021-4034HIGHunder attackransomware29 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 10
Go implementation of the PwnKit Linux Local Privilege Escalation exploit (CVE-2021-4034)
CVE-2021-4034HIGHunder attackransomware29 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC
PwnKit - Local Privilege Escalation Vulnerability Discovered in polkit’s pkexec (CVE-2021-4034)
CVE-2021-4034HIGHunder attackransomware29 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 2
Check CVE-2021-4034 vulnerability
CVE-2021-4034HIGHunder attackransomware29 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 1
Exploit for the PwnKit Vulnerability
CVE-2021-4034HIGHunder attackransomware29 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 1
PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034)
CVE-2021-4034HIGHunder attackransomware29 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC
pengalaman-1t/CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware28 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 96
CVE-2021-4034 Add Root User - Pkexec Local Privilege Escalation
CVE-2021-4034HIGHunder attackransomware28 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 6
pkexec (Polkit) exploit of Privilege Escalation vulnerability CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware28 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 78
CVE-2021-4034简单优化,以应对没有安装gcc和make的目标环境
CVE-2021-4034HIGHunder attackransomware28 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC
qq224015/CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware28 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 1
pwnkit
CVE-2021-4034HIGHunder attackransomware28 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 7
Exploit for the PwnKit vulnerability, CVE-2021-4034, written in Go
CVE-2021-4034HIGHunder attackransomware28 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC
galoget/PwnKit-CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware28 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 1
Exploit for Local Privilege Escalation Vulnerability in polkit’s pkexec
CVE-2021-4034HIGHunder attackransomware28 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC
PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034)
CVE-2021-4034HIGHunder attackransomware28 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 17
Pwnkit Exploit (CVE-2021-4034), no download capabilty? Copy and paste it!
CVE-2021-4034HIGHunder attackransomware28 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 1
CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware28 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 4
Yakumwamba/POC-CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware28 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC
BrunoPincho/cve-2018-16763-rust
CVE-2018-16763—27 Jan 2022
FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca
60RISK
open ↗
← previouspage 467 / 602next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.