Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

78,137cataloged exploits
35,961CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,458Referência 22,657GitHub PoC 14,424VulnCheck XDB 8,773Nuclei 4,340Metasploit 3,485✓ verified onlyrecentpopularrisk
78,056 exploits
VulnCheck XDB
local
CVE-2021-1675HIGHunder attackransomware30 Jan 2022
Windows Print Spooler Remote Code Execution Vulnerability
100RISK
open ↗
Metasploit300
Microweber CMS v1.2.10 Local File Inclusion (Authenticated)
CVE-2025-34076MEDIUM30 Jan 2022
Microweber CMS Authenticated Local File Inclusion via Backup API
28RISK
open ↗
VulnCheck XDB
client-side
CVE-2021-22204MEDIUMunder attack30 Jan 2022
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code exec
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware30 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware30 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware29 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware29 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware29 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-4034HIGHunder attackransomware29 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware29 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 3
CVE-2013-3660的x64 win7平台EXP源代码，成功率100%。
CVE-2013-3660HIGHunder attack29 Jan 2022
The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windo
98RISK
open ↗
GitHub PoC
Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an attacker runs a specially crafted application, aka "Windows COM Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-0214.
CVE-2017-0213HIGHunder attackransomware29 Jan 2022
Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Ser
93RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-4034HIGHunder attackransomware28 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware28 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware28 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware28 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware28 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware28 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware28 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware28 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware28 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware28 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware28 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC★ 1
pwnkit
CVE-2021-4034HIGHunder attackransomware28 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware28 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC
galoget/PwnKit-CVE-2021-4034
CVE-2021-4034HIGHunder attackransomware28 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
Metasploit400
vmwgfx Driver File Descriptor Handling Priv Esc
CVE-2022-22942HIGH28 Jan 2022
The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users to gain access to f
36RISK
open ↗
Exploit-DB
WordPress Plugin RegistrationMagic V 5.0.1.5 - SQL Injection (Authenticated)
CVE-2021-24862—webappsphp27 Jan 2022
RegistrationMagic < 5.0.1.6 - Admin+ SQL Injection
60RISK
open ↗
Exploit-DB
WordPress Plugin Modern Events Calendar V 6.1 - SQL Injection (Unauthenticated)
CVE-2021-24946—webappsphp27 Jan 2022
Modern Events Calendar < 6.1.5 - Unauthenticated Blind SQL Injection
60RISK
open ↗
Exploit-DB
WordPress Plugin Mortgage Calculators WP 1.52 - Stored Cross-Site Scripting (XSS) (Authenticated)
CVE-2021-24904—webappsphp27 Jan 2022
Mortgage Calculators WP < 1.56 - Admin+ Stored Cross-Site Scripting
23RISK
open ↗
← previouspage 615 / 2,602next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.