Fetching description from NVD…
Show 1 repositories
joshuavanderpoll/CVE-2026-49772
CVE-2026-49772 — The Events Calendar (WordPress) unauthenticated blind SQLi PoC
★ 4 · 2026-06-22
Every new exploit,
on the radar.
Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.
monitoring liveCVE-2026-41992
CVE-2026-104711
CVE-2025-41450
CVE-2026-92956
CVE-2026-91737
CVE-2026-109519
CVE-2026-104082
CVE-2026-100833
CVE-2026-79987
CVE-2026-13078
CVE-2026-102255
CVE-2021-1905
12 contacts in last 24h
11146CVEs tracked
26071PoC repositories
12New in 24h
361PoC updated in 7 days
filters
11146 results
Fetching description from NVD…
Show 1 repositories
user6400/cve-2026-39031-lansweeper-lsrunase2-lsencrypt2
CVE-2026-39031 — offline plaintext password recovery for Lansweeper lsrunase 2.0 / lsencrypt 2.0 via a hardcoded RC4 key. PoC + technical advisory.
★ 0 · 2026-06-22
Fetching description from NVD…
Show 1 repositories
joshuavanderpoll/CVE-2026-54806
Unauthenticated PHP Object Injection to RCE in WP Activity Log <= 5.6.3.1 (CVE-2026-54806)
★ 14 · 2026-06-22
Fetching description from NVD…
Show 8 of 11 repositories
VoidSec/Joomla_CVE-2015-8562
A proof of concept for Joomla's CVE-2015-8562 vulnerability (Object Injection RCE)
★ 12 · 2024-05-03
ZaleHack/joomla_rce_CVE-2015-8562
All versions of the Joomla! below 3.4.6 are known to be vulnerable. But exploitation is possible with PHP versions below 5.5.29, 5.6.13 and below 5.5.
★ 8 · 2016-01-04
dmonst3r/CVE-2015-8562
Joomla 1.5 - 3.4.5 Object Injection RCE X-Forwarded-For header
★ 4 · 2017-01-08
RobinHoutevelts/Joomla-CVE-2015-8562-PHP-POC
A proof of concept for Joomla's CVE-2015-8562 vulnerability
★ 2 · 2016-01-05
★ 1 · 2022-09-23
atcasanova/cve-2015-8562-exploit
CVE-2015-8562 Exploit in bash
★ 0 · 2016-02-08
★ 0 · 2016-06-08
xnorkl/Joomla_Payload
Adapted CVE-2015-8562 payload
★ 0 · 2020-02-07
Fetching description from NVD…
Show 3 repositories
the8frust/CVE-2026-1492
Exploit for CVE-2026-1492 affecting the WordPress User Registration plugin, allowing unauthenticated attackers to register accounts and escalate privileges to …
★ 0 · 2026-03-20
Nxploited/CVE-2026-1492
User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation via Membership Registration
★ 0 · 2026-04-18
limo57640-crypto/wp-user-registration-vuln-checker
Read-only WordPress User Registration CVE-2026-1492 checker for hidden admins, plugin version, uploads PHP, cron, and compromise IOCs.
★ 0 · 2026-06-22
Fetching description from NVD…
Show 1 repositories
trajanOx/cve-2026-25541-fuel-analysis
CVE-2026-25541 impact analysis for Fuel infrastructure (bytes crate integer overflow)
★ 1 · 2026-06-22
Fetching description from NVD…
Show 3 repositories
★ 14 · 2026-05-12
0xAtharv/CVE-2023-20938-Public
A bug trigger for CVE-2023-20938 for Android Binder.
★ 3 · 2026-01-14
★ 1 · 2026-06-22
Fetching description from NVD…
Top PoC: https://github.com/rvzsec/joombrute
Show 1 repositories
rvzsec/joombrute
Modern Joomla Auth-attack Toolkit J3 / J4 / J5 - CVE-2023-23752 · CVE-2023-23755 · CVE-2025-25227
★ 1 · 2026-06-22
Fetching description from NVD…
Show 1 repositories
0xBlackash/CVE-2026-47729
CVE-2026-47729
★ 5 · 2026-06-21
Fetching description from NVD…
Show 1 repositories
lukehebe/CVE-2026-39949
Cacti ≤ 1.2.30 Auth RCE - Host variable injection
★ 0 · 2026-06-21
Fetching description from NVD…
Show 1 repositories
OkamiSpade/Cve-2026-39676
Version: Download Manager 3.3.5.2 Title: Missing Authorization - Unauthenticated IDOR Exploit
★ 0 · 2026-06-21
Fetching description from NVD…
Show 1 repositories
Somisomair/CVE-2026-43655-AppleM2ScalerCSCDriver-UAF
Public disclosure for CVE-2026-43655 AppleM2ScalerCSCDriver use-after-free
★ 0 · 2026-06-21
Fetching description from NVD…
Top PoC: https://github.com/vtemlabs/imaging
Show 1 repositories
vtemlabs/imaging
Security-maintenance fork of disintegration/imaging (CVE-2023-36308 fix) used by Tala WTE
★ 0 · 2026-06-21
Fetching description from NVD…
Show 1 repositories
xxconi/CVE-2025-13407
GravityForms < 2.9.23.1 - Unauthenticated Arbitrary File Upload
★ 0 · 2026-06-21
Fetching description from NVD…
Show 2 repositories
JoakimBulow/CVE-2026-24688
CVE-2026-24688 - pypdf - DoS - POC
★ 0 · 2026-01-27
Fomovet/cve-2026-24688
POC for CVE-2026-24688
★ 0 · 2026-06-21
Fetching description from NVD…
Show 2 repositories
★ 14 · 2025-03-19
Fomovet/cve-2025-29384
POC for CVE-2025-29384
★ 0 · 2026-06-21
Fetching description from NVD…
Show 1 repositories
Perufitlife/directus-security
Keyless active-probe security auditor for Directus: proves public-role data exposure, user enumeration, unauth version/schema leaks (CVE-2025-53887), GraphQL i…
★ 0 · 2026-06-21
Fetching description from NVD…
Show 1 repositories
AnandJogawade/CVE-2026-48849-Roundcube-Webmail-Stored-XSS
This repository documents CVE-2026-48849, a Stored Cross-Site Scripting (XSS), HTML Injection, and CSS Injection vulnerability discovered in Roundcube Webmai
★ 1 · 2026-06-21
Fetching description from NVD…
Show 1 repositories
alperenkesk/CVE-2026-11561
Nuclei template for CVE-2026-11561 — Apinizer SSTI / RCE version detection
★ 1 · 2026-06-21
Fetching description from NVD…
Show 8 of 10 repositories
bigb0x/CVE-2024-36991
POC for CVE-2024-36991: This exploit will attempt to read Splunk /etc/passwd file.
★ 126 · 2024-07-12
Mr-xn/CVE-2024-36991
Path Traversal On The "/Modules/Messaging/" Endpoint In Splunk Enterprise On Windows
★ 9 · 2024-07-06
jaytiwari05/CVE-2024-36991
Critical Splunk Vulnerability CVE-2024-36991: Patch Now to Prevent Arbitrary File Reads
★ 9 · 2025-03-30
gunzf0x/CVE-2024-36991
Proof of Concept for CVE-2024-36991. Path traversal for Splunk versions below 9.2.2, 9.1.5, and 9.0.10 for Windows which allows arbitrary file read.
★ 4 · 2025-03-31
Cappricio-Securities/CVE-2024-36991
Path traversal vulnerability in Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10 that allows reading sensitive files.
★ 3 · 2024-07-10
0xFZin/CVE-2024-36991
Exploit for CVE-2024-36991 , written by me, enumerates a handfull of things, not all, cause not needed.
★ 3 · 2026-06-21
th3gokul/CVE-2024-36991
CVE-2024-36991: Path traversal that affects Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10.
★ 2 · 2024-07-06
TheStingR/CVE-2024-36991-Tool
This binary POC automates the exploitation of CVE-2024-36991 by sending crafted curl requests to a vulnerable Splunk instance. It retrieves sensitive files and…
★ 2 · 2025-10-30
Fetching description from NVD…
Show 1 repositories
Fetching description from NVD…
Top PoC: https://github.com/Hunt-Benito/mediatek-wlan-heap-overflow-cve-2026-20452-filogic-router-rce
Show 1 repositories
A vulnerability was found in lwIP up to 2.2.1. Affected is the function snmp_parse_inbound_frame of the file src/apps/snmp/snmp_msg.c of the component snmpv3 USM Handler. Performing a manipulation of the argument msgAuthenticationParameters results in stack-based buffer overflow. The attack may be initiated remotely. The patch is named 0c957ec03054eb6c8205e9c9d1d05d90ada3898c. It is suggested to install a patch to address this issue. Two separate issue reports were submitted to the project. Their processing was merged as a duplicate.
Top PoC: https://github.com/Hunt-Benito/lwip-snmpv3-stack-overflow-cve-2026-8836-critical-embedded-rce
Show 1 repositories
Hunt-Benito/lwip-snmpv3-stack-overflow-cve-2026-8836-critical-embedded-rce
CVE-2026-8836 — lwIP SNMPv3 stack-based buffer overflow PoC (CVSS 9.8)
★ 0 · 2026-06-21
Fetching description from NVD…
Show 1 repositories
Fetching description from NVD…
Show 1 repositories
★ 0 · 2026-06-21
Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.