Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

83.554exploits catalogados
39.165CVEs com exploração pública
24.695testados em laboratório
83.554 exploits
VulnCheck XDB
local
CVE-2021-4034HIGHsob ataqueransomware26 jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
VulnCheck XDB
local
CVE-2021-4034HIGHsob ataqueransomware26 jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
VulnCheck XDB
local
CVE-2021-4034HIGHsob ataqueransomware26 jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
VulnCheck XDB
local
CVE-2021-4034HIGHsob ataqueransomware26 jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
VulnCheck XDB
local
CVE-2021-4034HIGHsob ataqueransomware26 jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
GitHub PoC★ 98
Proof of Concept (PoC) CVE-2021-4034
CVE-2021-4034HIGHsob ataqueransomware26 jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
VulnCheck XDB
local
CVE-2021-4034HIGHsob ataqueransomware26 jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
VulnCheck XDB
local
CVE-2021-4034HIGHsob ataqueransomware26 jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
VulnCheck XDB
local
CVE-2021-4034HIGHsob ataqueransomware26 jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
GitHub PoC★ 180
Python exploit code for CVE-2021-4034 (pwnkit)
CVE-2021-4034HIGHsob ataqueransomware26 jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
GitHub PoC★ 15
Bash implementation of CVE-2021-4034
CVE-2021-4034HIGHsob ataqueransomware26 jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
GitHub PoC★ 45
polkit pkexec Local Privilege Vulnerability to Add custom commands
CVE-2021-4034HIGHsob ataqueransomware26 jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
GitHub PoC★ 8
CVE-2021-4034 🎧
CVE-2021-4034HIGHsob ataqueransomware26 jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
GitHub PoC★ 5
discordianfish/cve-2022-0185-crash-poc
CVE-2022-0185HIGHsob ataque26 jan 2022
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functio
76RISCO
abrir ↗
Metasploit600
Spring Cloud Gateway Remote Code Execution
CVE-2022-22947CRITICALsob ataque26 jan 2022
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe
100RISCO
abrir ↗
Metasploit600
GLPI htmLawed php command injection
CVE-2022-35914CRITICALsob ataque26 jan 2022
/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.
100RISCO
abrir ↗
GitHub PoC★ 1.165
PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034)
CVE-2021-4034HIGHsob ataqueransomware26 jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
GitHub PoC★ 1.331
Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation
CVE-2021-4034HIGHsob ataqueransomware26 jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
GitHub PoC★ 1
Proof of Concept for CVE-2021-4034 Polkit Privilege Escalation
CVE-2021-4034HIGHsob ataqueransomware26 jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
GitHub PoC★ 59
PoC for CVE-2021-4034
CVE-2021-4034HIGHsob ataqueransomware26 jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
GitHub PoC★ 23
A python3 and bash PoC for CVE-2021-4034 by Kim Schulz
CVE-2021-4034HIGHsob ataqueransomware26 jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
GitHub PoC
h3x0v3rl0rd/CVE-2021-4034
CVE-2021-4034HIGHsob ataqueransomware26 jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
GitHub PoC
CVE-2021-4034 in Bash Script
CVE-2021-4034HIGHsob ataqueransomware26 jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
GitHub PoC★ 36
CVE-2021-4034: Local Privilege Escalation in polkit's pkexec proof of concept
CVE-2021-4034HIGHsob ataqueransomware26 jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
GitHub PoC★ 38
CVE-2021-4034 POC exploit
CVE-2021-4034HIGHsob ataqueransomware26 jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
GitHub PoC
A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration "require all denied", these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution. This issue only affects Apache 2.4.49 and not earlier versions. Credits to: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41773
CVE-2021-41773HIGHsob ataqueransomware26 jan 2022
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗
GitHub PoC★ 2
Linux system service bug gives root on all major distros, exploit published A vulnerability in the pkexec component of Polkit identified as CVE-2021-4034 PwnKit is present in the default configuration of all major Linux distributions and can be exploited to gain privileges over the compj researchers.
CVE-2021-4034HIGHsob ataqueransomware26 jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
GitHub PoC★ 4
Y3A/CVE-2021-4034
CVE-2021-4034HIGHsob ataqueransomware26 jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
GitHub PoC★ 90
Exploit for CVE-2021-4034
CVE-2021-4034HIGHsob ataqueransomware26 jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
GitHub PoC★ 1
Pseudopatch for CVE-2021-4034
CVE-2021-4034HIGHsob ataqueransomware26 jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
← anteriorpágina 705 / 2.786próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.