Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

87,106cataloged exploits
40,548CVEs with public exploitation
24,696lab-tested
18,044 exploits
GitHub PoC★ 1
vilasboasph/CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC
impromptu pwn chal
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC
CVE-2021-4034 in Bash Script
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 6
clubby789/CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC
h3x0v3rl0rd/CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 2
gbrsh/CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 1
Pseudopatch for CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 24
PoC for the CVE-2021-4034 vulnerability, affecting polkit < 0.120.
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 4
Y3A/CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 1
ayypril/CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC
jostmart/-CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 45
polkit pkexec Local Privilege Vulnerability to Add custom commands
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 4
POC for CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 11
A Golang implementation of clubby789's implementation of CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 23
A python3 and bash PoC for CVE-2021-4034 by Kim Schulz
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC
Just a sh script file to CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 5
discordianfish/cve-2022-0185-crash-poc
CVE-2022-0185HIGHunder attack26 Jan 2022
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functio
76RISK
open ↗
GitHub PoC★ 1,338
Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC
sunny0day/CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 3
PoC for cve-2021-4034
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 15
Bash implementation of CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC
A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration "require all denied", these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution. This issue only affects Apache 2.4.49 and not earlier versions. Credits to: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41773
CVE-2021-41773HIGHunder attackransomware26 Jan 2022
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
open ↗
GitHub PoC★ 8
This demonstration video shows how we can control the victim's device by sending the innocent-looking PDF file to the target which actually consists of embedded payload. The exploit was made public as CVE-2010-1240.
CVE-2010-1240—26 Jan 2022
Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of
60RISK
open ↗
GitHub PoC★ 1
Proof of Concept for CVE-2021-4034 Polkit Privilege Escalation
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 98
Proof of Concept (PoC) CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 180
Python exploit code for CVE-2021-4034 (pwnkit)
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC
robemmerson/CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 4
An exploit for CVE-2021-4034 aka Pwnkit: Local Privilege Escalation in polkit's pkexec
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 91
Exploit for CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 36
CVE-2021-4034: Local Privilege Escalation in polkit's pkexec proof of concept
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
← previouspage 469 / 602next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.