Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

78,137cataloged exploits
35,961CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,458Referência 22,657GitHub PoC 14,424VulnCheck XDB 8,773Nuclei 4,340Metasploit 3,485✓ verified onlyrecentpopularrisk
78,056 exploits
GitHub PoC★ 11
CVE-2021-3156 POC and Docker and Analysis write up
CVE-2021-3156HIGHunder attack27 Jan 2022
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RISK
open ↗
GitHub PoC★ 351
Proof of concept for pwnkit vulnerability
CVE-2021-4034HIGHunder attackransomware27 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
Exploit-DB
WordPress Plugin Modern Events Calendar V 6.1 - SQL Injection (Unauthenticated)
CVE-2021-24946—webappsphp27 Jan 2022
Modern Events Calendar < 6.1.5 - Unauthenticated Blind SQL Injection
60RISK
open ↗
Exploit-DB
WordPress Plugin Mortgage Calculators WP 1.52 - Stored Cross-Site Scripting (XSS) (Authenticated)
CVE-2021-24904—webappsphp27 Jan 2022
Mortgage Calculators WP < 1.56 - Admin+ Stored Cross-Site Scripting
23RISK
open ↗
GitHub PoC★ 4
CVE-2021-4034 PoC , polkit < 0.131
CVE-2021-4034HIGHunder attackransomware27 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
GitHub PoC
BrunoPincho/cve-2018-16763-rust
CVE-2018-16763—27 Jan 2022
FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca
60RISK
open ↗
Exploit-DB
Oracle WebLogic Server 14.1.1.0.0 - Local File Inclusion
CVE-2022-21371HIGHremotewindows27 Jan 2022
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported ve
78RISK
open ↗
GitHub PoC
khaclep007/CVE-2022-0185
CVE-2022-0185HIGHunder attack27 Jan 2022
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functio
76RISK
open ↗
VulnCheck XDB
local
CVE-2022-21882HIGHunder attackransomware27 Jan 2022
Win32k Elevation of Privilege Vulnerability
98RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware27 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware27 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware27 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware27 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware27 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware27 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-3156HIGHunder attack27 Jan 2022
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware27 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware27 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware27 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware27 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware27 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware27 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware27 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
Exploit-DB
WordPress Plugin RegistrationMagic V 5.0.1.5 - SQL Injection (Authenticated)
CVE-2021-24862—webappsphp27 Jan 2022
RegistrationMagic < 5.0.1.6 - Admin+ SQL Injection
60RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attackransomware26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
← previouspage 616 / 2,602next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.