Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

75,652cataloged exploits
34,545CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,581GitHub PoC 13,708VulnCheck XDB 8,225Nuclei 4,228Metasploit 3,467✓ verified onlyrecentpopularrisk
8,216 exploits
VulnCheck XDB
local
CVE-2021-4034HIGHunder attack26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attack26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attack26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attack26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attack26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attack26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attack26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attack26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attack26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attack26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attack26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attack26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-4034HIGHunder attack26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attack26 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attack25 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
client-side
CVE-2019-5736—25 Jan 2022
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc b
60RISK
open ↗
VulnCheck XDB
infoleak
CVE-2022-21371HIGH25 Jan 2022
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported ve
78RISK
open ↗
VulnCheck XDB
local
CVE-2021-4034HIGHunder attack25 Jan 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISK
open ↗
VulnCheck XDB
info-leak
CVE-2021-39312HIGH24 Jan 2022
True Ranker <= 2.2.2 Directory Traversal/Arbitrary File Read
78RISK
open ↗
VulnCheck XDB
remote-with-credentials
CVE-2019-18818—23 Jan 2022
strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/s
60RISK
open ↗
VulnCheck XDB
denial-of-service
CVE-2022-21907CRITICAL23 Jan 2022
HTTP Protocol Stack Remote Code Execution Vulnerability
70RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-24489CRITICALunder attack20 Jan 2022
A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, coul
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2019-7609CRITICALunder attack19 Jan 2022
Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker
100RISK
open ↗
VulnCheck XDB
local
CVE-2022-0185HIGHunder attack19 Jan 2022
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functio
76RISK
open ↗
VulnCheck XDB
infoleak
CVE-2022-21661HIGH18 Jan 2022
SQL injection in WordPress
78RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-44228CRITICALunder attackransomware18 Jan 2022
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2014-6287CRITICALunder attack18 Jan 2022
The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c a
100RISK
open ↗
VulnCheck XDB
client-side
CVE-2020-1472MEDIUMunder attackransomware18 Jan 2022
Netlogon Elevation of Privilege Vulnerability
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2021-43798HIGHunder attack18 Jan 2022
Grafana path traversal
100RISK
open ↗
VulnCheck XDB
denial-of-service
CVE-2022-21907CRITICAL17 Jan 2022
HTTP Protocol Stack Remote Code Execution Vulnerability
70RISK
open ↗
← previouspage 201 / 274next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.