Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

87,106cataloged exploits
40,548CVEs with public exploitation
24,696lab-tested
18,044 exploits
GitHub PoC
NULL0B/CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware27 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 1
vulnerable setup to display an attack chain of log4j CVE-2021-44228 with privilege escalation to root using the polkit exploit CVE-2021-4034
CVE-2021-44228CRITICALunder attackransomware27 Jan 2022
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
open ↗
GitHub PoC★ 2
Exploit PoC for the polkit pkexec (PWNKIT) vulnerability
CVE-2021-4034HIGHunder attackransomware27 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC
Exploit for pkexec (CVE-2021-4034)
CVE-2021-4034HIGHunder attackransomware27 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC
khaclep007/CVE-2022-0185
CVE-2022-0185HIGHunder attack27 Jan 2022
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functio
76RISK
open ↗
GitHub PoC★ 28
Pre-compiled builds for CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware27 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC
This repository contains the exploit for vulnerability CVE-2021-4034 .
CVE-2021-4034HIGHunder attackransomware27 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC
Python exploit for CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware27 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC
This is a POC for the vulnerability found in polkit's pkexec binary which is used to run programs as another users.
CVE-2021-4034HIGHunder attackransomware27 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC
BrunoPincho/cve-2018-16763-rust
CVE-2018-16763—27 Jan 2022
FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca
60RISK
open ↗
GitHub PoC
nikip72/CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware27 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 2
A simple proof-of-concept for CVE-2021-4034 (pkexec local privilege escalation)
CVE-2021-4034HIGHunder attackransomware27 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 10
CVE-2021-3156 POC and Docker and Analysis write up
CVE-2021-3156HIGHunder attack27 Jan 2022
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RISK
open ↗
GitHub PoC★ 21
LSM BPF module to block pwnkit (CVE-2021-4034) like exploits
CVE-2021-4034HIGHunder attackransomware27 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 4
CVE-2021-4034 PoC , polkit < 0.131
CVE-2021-4034HIGHunder attackransomware27 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC
Proof of Concept for CVE-2021-4034 (with experimental traceless exploitation)
CVE-2021-4034HIGHunder attackransomware27 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 354
Proof of concept for pwnkit vulnerability
CVE-2021-4034HIGHunder attackransomware27 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 1
PoC CVE 2021-4034 PwnKit: Local Privilege Escalation Vulnerability Discovered in polkit’s pkexec
CVE-2021-4034HIGHunder attackransomware27 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 2
thatstraw/CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware27 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 4
Local Privilege Escalation in polkit's pkexec (CVE-2021-4034)
CVE-2021-4034HIGHunder attackransomware27 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 462
win32k LPE
CVE-2022-21882HIGHunder attackransomware27 Jan 2022
Win32k Elevation of Privilege Vulnerability
98RISK
open ↗
GitHub PoC
Codiad through 2.8.4 allows Remote Code Execution, a different vulnerability than CVE-2017-11366 and CVE-2017-15689
CVE-2018-14009—27 Jan 2022
Codiad through 2.8.4 allows Remote Code Execution, a different vulnerability than CVE-2017-11366 and CVE-2017-15689.
35RISK
open ↗
GitHub PoC
phvilasboas/CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 3
PoC for cve-2021-4034
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 1
Proof of Concept for CVE-2021-4034 Polkit Privilege Escalation
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC
impromptu pwn chal
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC
fdellwing/CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC
san3ncrypt3d/CVE-2021-4034-POC
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 4
POC for CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 1
vilasboasph/CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
← previouspage 468 / 602next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.