Fetching description from NVD…
Show 1 repositories
FreeBSD LPE
Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.
monitoring live11151 results
Fetching description from NVD…
FreeBSD LPE
Fetching description from NVD…
PoC de CVE-2026-7473: bypass de decapsulacion de tunel en Arista EOS.
Fetching description from NVD…
CVE-2026-5718: Unauthenticated File Upload To RCE in DnD Upload CF7 Plugin
WORDPRESS
Fetching description from NVD…
Page Cache Exploit for CVE-2024-1065
Fetching description from NVD…
GLPI cve-2023-36808
Fetching description from NVD…
CVE-2026-0542 - Draft - ServiceNow
Fetching description from NVD…
CVE-2026-48962 - IO::Compress - Code Execution
Fetching description from NVD…
Cursor plugin for Hono v4 (TypeScript edge web framework). 59 LLM regressions with BAD/CORRECT pairs. Pinned to hono ^4.12.19 (>= 4.9.7 for CVE-2025-59139). Co…
Fetching description from NVD…
AngularJS 1.x -> Angular 18 migration guidance for GitHub Copilot. Source-of-truth repo for github/awesome-copilot/instructions/angularjs-to-angular-18.instruc…
Fetching description from NVD…
CVE-2026-44289, CVE-2026-44290, CVE-2026-44291, CVE-2026-44292, CVE-2026-44294, CVE-2026-44295 - protobuf.js
Fetching description from NVD…
Firmware security analysis of BD Alaris 8015 infusion pump (CVE-2016-9355). Identified 6 compound vulnerabilities including plaintext Wi-Fi credentials, HTTP f…
Fetching description from NVD…
Technical writeup for CVE-2024-20154
Fetching description from NVD…
1-day exploit for CVE-2026-49417
Fetching description from NVD…
1-day exploit for CVE-2026-45258
Fetching description from NVD…
CVE-2026-45247 - Draft
PoC funcional de CVE-2026-45247: PHP Object Injection a RCE no autenticado en Mirasvit Full Page Cache (Magento 2).
Fetching description from NVD…
Reproducible Docker lab for CVE-2024-21182 — Oracle WebLogic T3/IIOP OpaqueReference JNDI injection → unauthenticated RCE (CVE-2023-21839 patch-bypass family).…
PoC for CVE-2024-21182
PoC for CVE-2024-21182
PoC de CVE-2024-21182: RCE por inyeccion JNDI en Oracle WebLogic Server.
Fetching description from NVD…
PoC and writeup for CVE-2026-46395: unauthenticated private key disclosure via broken HMAC in HAXcms Node.js (CWE-321/CWE-200). Authorized security research on…
Fetching description from NVD…
PoC and writeup for CVE-2026-46394: OS command injection in HAXcms Git.php (CWE-78). Authorized security research only.
Fetching description from NVD…
Insert PHP Plugin PHP Code Injection
Fetching description from NVD…
Patched google_gax 0.4.1 for Tesla 1.18.3+ compatibility (CVE-2026-48598)
Fetching description from NVD…
Account takeover full PoC for CVE-2026-27886 in Strapi CMS
Detect whether a Strapi instance is vulnerable to CVE-2026-27886 (unauthenticated boolean-oracle exfiltration of administrator secrets).
Strapi CVE-2026-27886. Leaking sensitive data via relational filtering due to lack of query sanitization
Fetching description from NVD…
MOVEit CVE-2023-34362
CVE-2023-34362: MOVEit Transfer Unauthenticated RCE
POC for CVE-2023-34362 affecting MOVEit Transfer
Repository with everything I have tracking the impact of MOVEit CVE-2023-34362
CVE-2023-34362-IOCs. More information on Deep Instinct's blog site.
an exploit of POC for CVE-2023-34362 affecting MOVEit Transfer
This shellscript given the OrgKey 0 will parse the header of the base64 artifacts found in MOVEit Logs and decrypt the Serialized object used a payload
Fetching description from NVD…
RCE RESPONSIVE filemanager v.9.14.0
Fetching description from NVD…
RCE RESPONSIVE filemanager v.9.14.0
Fetching description from NVD…
The code for personally reproducing the corresponding vulnerability
CVE-2026-42271 - Draft
Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.