Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.
monitoring live11151 results
Fetching description from NVD…
CVE-2026-23631 (DarkReplica) Redis Exploit
CVE-2026-23631-Draft
Fetching description from NVD…
CVE analysis of CVE-2025-40536, SolarWinds Web Help Desk security control bypass (CVSS 8.1). Covers vulnerability mechanics, attack chain with companion RCE CV…
Fetching description from NVD…
Fetching description from NVD…
Unauthenticated SSRF in Xiaomi Mi Router 4A Gigabit Edition (firmware 3.0.24) via Host Header Injection — CVE-2026-26898
Fetching description from NVD…
Public advisory & PoC for CVE-2026-26897 — Deep Link Bypass in EcoOnline EHS Android (com.airsweb.v10), fixed in 0.2.500
Fetching description from NVD…
Inspect all of your Heroku apps for vulnerable versions of the JSON gem
Fetching description from NVD…
Fetching description from NVD…
Bootstrapped Rails 3.2.10 to test the remote code exploit CVE-2013-0156
Inspect all of your heroku apps to see if they are running a vulnerable version of Rails
Silly Rails App to demonstrate vuln CVE-2013-0156
crack repo from jnunemaker but with version 0.1.8 and rails CVE-2013-0156 vulnerability fixed
Arbitrary deserialization that can be used to trigger SQL injection and even Code execution
Pseudo shell for CVE-2013-0156.
This script is specifically designed to solve the challenge on PentesterLab for the CVE-2013-0156 exploit
Modified ruby script for RCE
Fetching description from NVD…
Research of exploit options for CVE-2024-53667 and their remediation
Fetching description from NVD…
Proof-of-concept exploits for CVE-2026-4390, CVE-2026-4391 and CVE-2026-4392 in TeamSpeak 3 server (3.13.7).
Fetching description from NVD…
A vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305.
Fetching description from NVD…
PoC of CVE-2026-49943
Fetching description from NVD…
Rocket.Chat OAuth2 NoSQL Injection
Fetching description from NVD…
CVE-2026-27145 - Draft
Fetching description from NVD…
CVE-2026-23760 - An authentication bypass via password reset API in SmarterMail.
CVE-2026-0001. Do with your own risk
Fetching description from NVD…
Security-hardened fork of the WordPress plugin "Resize Image Before Upload" — removes all ads/promotions and the bundled Swiper 8.2.4 library (CVE-2026-27212, …
Fetching description from NVD…
CVE-2025-10720 PoC
Fetching description from NVD…
Fetching description from NVD…
Automating the exploitation of CVE-2026-7299 - Stored XSS via Database Table/Column Names in SQL Autocomplete within Appsmith =>1.99. Initial discovery 30/03/26
Fetching description from NVD…
PoC for CVE-2026-28990, an ImageIO bug patched in iOS/macOS 26.5
Fetching description from NVD…
CVE-2026-34156
Fetching description from NVD…
CVE-2026-31525 - Draft
Fetching description from NVD…
CVE-2025-70849: Stored XSS in Podinfo
PoC and Advisory for CVE-2025-70849: Unauthenticated Stored XSS in Podinfo /store endpoint.
CVE-2025-70849 - Draft
Fetching description from NVD…
POC for CVE-2026-49009, an authenticated path traversal to RCE issue in Mender Server.
Fetching description from NVD…
Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.