Fetching description from NVD…
Show 3 repositories
SolarWinds Orion API 远程代码执行漏洞批量检测脚本
Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.
monitoring live11151 results
Fetching description from NVD…
SolarWinds Orion API 远程代码执行漏洞批量检测脚本
Fetching description from NVD…
Controlled NGINX HTTP/2 frame injection lab for CVE-2026-42926 patch validation and defensive research
Fetching description from NVD…
TypeScript PoC for CVE-2024-54887 (TP-Link TL-WR940N authenticated RCE)
Fetching description from NVD…
Proof-of-Concept checker/exploit for MantisBT SOAP auth bypass (CVE-2026-30849 / GHSA-phrq-pc6r-f6gh)
Fetching description from NVD…
CVE-2024-0044: a "run-as any app" high-severity vulnerability affecting Android versions 12 and 13
RunAsAnyone: PoC and writeup for bypassing the initial patch of CVE-2024-0044, Android run-as any app vulnerability allowing privilege escalation from adb to i…
Exfiltrate sensitive user data from apps on Android 12 and 13 using CVE-2024-0044 vulnerability remotely
EvilDroid automates the exploitation of CVE-2024-0044, installing malicious payloads on a target device and extracting sensitive data. It features automated AD…
利用 CVE-2024-0044 Android 权限提升下载任意目标App沙箱文件。
CVE-2024-0044
a vulnerability affecting Android version 12 & 13
CVE-2024-0044: uma vulnerabilidade de alta gravidade do tipo "executar como qualquer aplicativo" que afeta as versões 12 e 13 do Android
Fetching description from NVD…
Hands-on lab for CVE-2026-40072 — SSRF vulnerability in web3.py via CCIP Read (EIP-3668)
Fetching description from NVD…
Proof-of-concept exploit for CVE-2026-24849, an authenticated path-traversal / arbitrary file read in OpenEMR's Fax/SMS (EtherFax) module. Any authenticated us…
Fetching description from NVD…
CVE-2026-25860 POC git
Fetching description from NVD…
Script exploit the CVE-2024-32019. Credit to froxlor for the vuln.
Fetching description from NVD…
Safely detect whether a UniFi OS Server is vulnerable to CVE-2026-34908
Fetching description from NVD…
Security research on Craft CMS authentication mechanism
Fetching description from NVD…
Vulnerability Case Study: CVE-2026-33829 (Windows Snipping Tool NTLM Coercion)
Fetching description from NVD…
Fetching description from NVD…
Modern Events Calendar Lite <= 7.33.0 — Unauthenticated SQL Injection
Fetching description from NVD…
Gravity Forms path-traversal research with a proof of concept and disclosure notes.
A flaw was found in Keycloak. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted SOAP requests to the SAML ECP (Security Assertion Markup Language Enhanced Client or Proxy) endpoint with varying client IDs. By observing distinct faultstrings in the responses, the attacker can determine the client's protocol type, leading to information disclosure.
CVE-2026-9794 — Keycloak SAML ECP client enumeration vulnerability research
Fetching description from NVD…
Fetching description from NVD…
Fetching description from NVD…
Popcorn HTB write-up covering advanced directory fuzzing, file upload bypass via magic numbers/extension spoofing using Burp Suite, and privilege escalation vi…
Fetching description from NVD…
PoC for CVE-2026-26179 / ZDI-26-276, my very own Secure Kernel bug
Fetching description from NVD…
CVE-2026-5076 — ARMember Premium <= 7.3.1 Insecure Password Reset Mechanism → Full Admin Account Takeover | Proof of Concept
ARMember Premium <= 7.3.1 Full Admin Account Takeover
Fetching description from NVD…
CVE-2025-13673: Tutor LMS SQL Injection PoC + Docker lab
Fetching description from NVD…
CVE-2022-46395 POC for FireTV 3rd gen Cube (gazelle)
CVE-2022-46395 POC for FireTV 2nd gen Cube (raven)
Fetching description from NVD…
CVE-2025-25063 MadeYouReset HTTP/2 DDoS
A Python script that checks if a web server is vulnerable to MadeYouReset (CVE-2025-8671) — an HTTP/2 DoS attack that bypasses Rapid Reset mitigations by trick…
PoC para validar vulnerabilidade MadeYouReset
PoC éducatif pour la vulnérabilité CVE-2025-8671 (DoS HTTP/2 sur lighttpd). À utiliser uniquement en laboratoire local.
CVE-2025-8671 vulnerability POC
Fetching description from NVD…
CVE-2026-32662: Active Debug Code in Production — Gardyn Home Kit (ICSA-26-055-03)
CVE-2026-32662: Active Debug Code in Production — Gardyn Home Kit (ICSA-26-055-03)
Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.