Every new exploit,
on the radar.

Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.

monitoring live
11151CVEs tracked
26077PoC repositories
13New in 24h
349PoC updated in 7 days
filters
All New Fresh PoC Hot Multi PoC Critical High

11151 results

PoCs 1 ★ 54 Last push 2026-06-01 (4 months, 1 week ago)

Fetching description from NVD…

Show 1 repositories
Vikramaditya015/samsung-android-lpe

Poc for CVE-2026-20980, CVE-2026-20981, CVE-2026-20982

★ 54 · 2026-06-01
PoCs 1 ★ 0 Last push 2026-06-01 (4 months, 1 week ago)

Fetching description from NVD…

Show 1 repositories
Habuon/CVE-2026-48208

This is POC repo for CVE-2026-48208

★ 0 · 2026-06-01
PoCs 1 ★ 0 Last push 2026-06-01 (4 months, 1 week ago)

Fetching description from NVD…

Show 1 repositories
Habuon/CVE-2026-48188

This is POC repo for CVE-2026-48188

★ 0 · 2026-06-01
CVE-2026-9560
CRITICAL
CVSS 9.4 CRITICAL CWE-78, CWE-267, CWE-270, CWE-648 Published 2026-05-26 PoCs 1 ★ 0 Last push 2026-06-01 (4 months, 1 week ago)

Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands with elevated privileges via local IPC channel

Show 1 repositories
HORKimhab/CVE-2026-9560

CVE-2026-9560 - Draft

★ 0 · 2026-06-01
PoCs 1 ★ 0 Last push 2026-06-01 (4 months, 1 week ago)

Fetching description from NVD…

Show 1 repositories
HAERIN-L/POC_CVE-2026-42880
★ 0 · 2026-06-01
CVE-2024-38475
MULTI PoC
PoCs 5 ★ 16 Last push 2026-06-01 (4 months, 1 week ago)

Fetching description from NVD…

Show 5 repositories
p0in7s/CVE-2024-38475
★ 16 · 2024-08-18
soltanali0/CVE-2024-38475

exploit CVE-2024-38475(mod_rewrite weakness with filesystem path matching)

★ 4 · 2024-12-12
syaifulandy/CVE-2024-38475

CVE-2024-38475 Scanner using FFUF + Seclists

★ 0 · 2025-05-09
Nyakki-Labs-0x420/Myesve

CVE-2024-38475 exploitation & scanning tool with Mullvad VPN rotation

★ 0 · 2026-06-01
PoCs 1 ★ 0 Last push 2026-06-01 (4 months, 1 week ago)

Fetching description from NVD…

Show 1 repositories
JianrongXiao-Linksys/dnsmasq-cve-2026

Automated defect verification tool for 6 dnsmasq CVEs (CVE-2026-2291, 4890, 4891, 4892, 4893, 5172)

★ 0 · 2026-06-01
CVE-2019-6340
MULTI PoC
PoCs 11 ★ 71 Last push 2026-05-31 (4 months, 1 week ago)

Fetching description from NVD…

Show 8 of 11 repositories
jas502n/CVE-2019-6340

Drupal8's REST RCE, SA-CORE-2019-003, CVE-2019-6340

★ 71 · 2020-06-10
knqyf263/CVE-2019-6340

Environment for CVE-2019-6340 (Drupal)

★ 42 · 2023-06-19
g0rx/Drupal-SA-CORE-2019-003

CVE-2019-6340-Drupal SA-CORE-2019-003

★ 30 · 2019-02-24
oways/CVE-2019-6340

CVE-2019-6340 POC Drupal rce

★ 11 · 2019-02-25
ludy-dev/drupal8-REST-RCE

(CVE-2019-6340, CVE-2018-7600) drupal8-REST-RCE

★ 4 · 2020-11-07
DevDungeon/CVE-2019-6340-Drupal-8.6.9-REST-Auth-Bypass

CVE-2019-6340 Drupal 8.6.9 REST Auth Bypass examples

★ 2 · 2019-02-25
cved-sources/cve-2019-6340

cve-2019-6340

★ 0 · 2021-04-15
josehelps/cve-2019-6340-bits

Bits generated while analyzing CVE-2019-6340 Drupal RESTful RCE

★ 0 · 2019-03-12
PoCs 1 ★ 6 Last push 2026-05-31 (4 months, 1 week ago)

Fetching description from NVD…

Show 1 repositories
AnalyticETH/tesla-security-research

Vulnerability research on Tesla Model 3/Y infotainment systems. 6 vulnerabilities, 4 CVEs (CVE-2022-42005 through CVE-2022-42008). Root shell, persistent acces…

★ 6 · 2026-05-31
PoCs 2 ★ 11 Last push 2026-05-31 (4 months, 1 week ago)

Fetching description from NVD…

Show 2 repositories
ozkanbilge/Apache-Exploit-2019

CVE-2019-0211-apache & CVE-2019-6977-imagecolormatch

★ 11 · 2019-05-12
Jeanback1/CVE-2019-0211-exploit
★ 0 · 2026-05-31
PoCs 1 ★ 0 Last push 2026-05-31 (4 months, 1 week ago)

Fetching description from NVD…

Show 1 repositories
kavin-jindal/CVE-2026-48800-PoC
★ 0 · 2026-05-31
PoCs 2 ★ 7 Last push 2026-05-31 (4 months, 1 week ago)

Fetching description from NVD…

Show 2 repositories
XK3NF4/CVE-2026-48778

Notepad++ RCE via config.xml commandLineInterpreter

★ 7 · 2026-05-30
kavin-jindal/CVE-2026-48778-PoC
★ 0 · 2026-05-31
PoCs 1 ★ 0 Last push 2026-05-30 (4 months, 1 week ago)

Fetching description from NVD…

Show 1 repositories
diamorphine666/CVE-2025-10162-Exploit

CVE-2025-10162 Exploit

★ 0 · 2026-05-30
CVE-2025-6934
MULTI PoC
PoCs 10 ★ 9 Last push 2026-05-30 (4 months, 1 week ago)

Fetching description from NVD…

Show 8 of 10 repositories
Nxploited/CVE-2025-6934

Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation

★ 9 · 2025-07-01
0xgh057r3c0n/CVE-2025-6934

CVE-2025-6934 is a critical vulnerability in the WordPress Opal Estate Pro plugin (<= 1.7.5) that allows unauthenticated attackers to create new administrator …

★ 5 · 2025-08-17
yukinime/CVE-2025-6934
★ 5 · 2025-08-27
1atakan1/CVE-2025-6934
★ 3 · 2026-01-30
AnotherSec/CVE-2025-6934

Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation

★ 2 · 2025-11-26
MrjHaxcore/CVE-2025-6934

CVE-2025-6934 POC

★ 1 · 2025-07-02
Rosemary1337/CVE-2025-6934

CVE-2025-6934 - Exploit WordPress Opal Estate Pro

★ 0 · 2025-09-08
Jenderal92/WP-CVE-2025-6934

WP-CVE-2025-6934 | Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation

★ 0 · 2026-05-30
CVE-2023-5360
MULTI PoC
PoCs 8 ★ 13 Last push 2026-05-30 (4 months, 1 week ago)

Fetching description from NVD…

Show 8 repositories
phankz/Worpress-CVE-2023-5360
★ 13 · 2023-11-30
Chocapikk/CVE-2023-5360

Exploit for the unauthenticated file upload vulnerability in WordPress's Royal Elementor Addons and Templates plugin (< 1.3.79). CVE-ID: CVE-2023-5360.

★ 10 · 2023-11-02
Pushkarup/CVE-2023-5360

The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to u…

★ 5 · 2023-11-05
sagsooz/CVE-2023-5360

CVE-2023-5360 Auto Shell Upload WordPress Royal Elementor 1.3.78 Shell Upload

★ 3 · 2023-10-21
X3RX3SSec/CVE-2023-5360

Royal Elementor Addons - Unauthenticated Remote Code Execution

★ 2 · 2025-07-15
LaviruDilshan/CVE-2023-5360-exploit-with-native-libraries

CVE-2023-5360 PoC: Unauthenticated arbitrary file upload leading to RCE in Royal Elementor Addons (≤ 1.3.78), written in pure Python.

★ 1 · 2025-12-27
nastar-id/CVE-2023-5360

CVE-2023-5360

★ 0 · 2023-10-26
Jenderal92/WP-CVE-2023-5360

Wordpress CVE-2023-5360

★ 0 · 2026-05-30
CVE-2023-32243
MULTI PoC
PoCs 8 ★ 86 Last push 2026-05-30 (4 months, 1 week ago)

Fetching description from NVD…

Show 8 repositories
RandomRobbieBF/CVE-2023-32243

CVE-2023-32243 - Essential Addons for Elementor 5.4.0-5.7.1 - Unauthenticated Privilege Escalation

★ 86 · 2023-06-05
Jenderal92/WP-CVE-2023-32243

Wordpress CVE-2023-32243

★ 5 · 2026-05-30
gbrsh/CVE-2023-32243

Exploit for CVE-2023-32243 - Unauthorized Account Takeover.

★ 4 · 2023-05-31
thatonesecguy/Wordpress-Vulnerability-Identification-Scripts

Identifies domains which run WordPress and tests against vulnerabilities (CVE-2023-32243) / #VU76395 / etc...

★ 2 · 2023-05-29
little44n1o/cve-2023-32243

poc

★ 1 · 2023-05-13
YouGina/CVE-2023-32243

Vulnerable docker to test for: CVE-2023-32243

★ 0 · 2023-05-24
PoCs 3 ★ 6 Last push 2026-05-30 (4 months, 1 week ago)

Fetching description from NVD…

Show 3 repositories
RandomRobbieBF/CVE-2023-2732

MStore API <= 3.9.2 - Authentication Bypass

★ 6 · 2023-05-25
Ap0dexMe0/CVE-2023-2732

Perform With Massive Authentication Bypass (Wordpress Mstore-API)

★ 2 · 2023-08-05
Jenderal92/WP-CVE-2023-2732

Python 2.7

★ 0 · 2026-05-30
PoCs 2 ★ 2 Last push 2026-05-30 (4 months, 1 week ago)

Fetching description from NVD…

Show 2 repositories
xShadow-Here/CVE-2026-4885

Piotnet Addons for Elementor Pro <= 7.1.70 - Unauthenticated Arbitrary File Upload → RCE

★ 2 · 2026-05-21
Jenderal92/CVE-2026-4885

Piotnet Addons for Elementor Pro <= 7.1.70 - Unauthenticated Arbitrary File Upload via Form File Upload

★ 0 · 2026-05-30
PoCs 2 ★ 1 Last push 2026-05-30 (4 months, 1 week ago)

Fetching description from NVD…

Show 2 repositories
Jenderal92/CVE-2024-9290

The tool targets WordPress websites that use the Super Backup & Clone plugin and are vulnerable to arbitrary file upload.

★ 1 · 2026-05-30
RandomRobbieBF/CVE-2024-9290

Super Backup & Clone - Migrate for WordPress <= 2.3.3 - Unauthenticated Arbitrary File Upload

★ 0 · 2024-12-13
PoCs 3 ★ 2 Last push 2026-05-30 (4 months, 1 week ago)

Fetching description from NVD…

Show 3 repositories
ubaydev/CVE-2024-8856

WordPress WP Time Capsule Plugin Arbitrary File Upload Vulnerability

★ 2 · 2024-11-16
Jenderal92/CVE-2024-8856

This tool scans WordPress websites for vulnerabilities in the WP Time Capsule plugin related to CVE-2024-8856. It identifies plugin versions below 1.22.22 as v…

★ 2 · 2026-05-30
Evillm/CVE-2024-8856-PoC
★ 0 · 2026-02-04
PoCs 2 ★ 3 Last push 2026-05-30 (4 months, 1 week ago)

Fetching description from NVD…

Show 2 repositories
RandomRobbieBF/CVE-2024-6624

JSON API User <= 3.9.3 - Unauthenticated Privilege Escalation

★ 3 · 2024-09-10
Jenderal92/CVE-2024-6624

This is a Python script that exploits the CVE-2024-6624 vulnerability in the JSON API User <= 3.9.3 plugin for WordPress.

★ 1 · 2026-05-30
PoCs 2 ★ 1 Last push 2026-05-30 (4 months, 1 week ago)

Fetching description from NVD…

Show 2 repositories
Jenderal92/CVE-2024-10508

This tool scans WordPress sites for vulnerabilities in the "RegistrationMagic" plugin (CVE-2024-10508). It checks for the presence of a specific version (`6.0.…

★ 1 · 2026-05-30
ubaydev/CVE-2024-10508
★ 0 · 2024-11-19
CVE-2023-34960
MULTI PoC
PoCs 6 ★ 34 Last push 2026-05-30 (4 months, 1 week ago)

Fetching description from NVD…

Show 6 repositories
Aituglo/CVE-2023-34960

CVE-2023-34960 Chamilo PoC

★ 34 · 2023-06-09
Ap0dexMe0/CVE-2023-34960

Perform with Massive Command Injection (Chamilo)

★ 23 · 2023-07-31
Mantodkaz/CVE-2023-34960
★ 4 · 2023-09-05
Jenderal92/CHAMILO-CVE-2023-34960

Wordpress CVE-2023-34960

★ 1 · 2026-05-30
YongYe-Security/CVE-2023-34960

Chamilo CVE-2023-34960 Batch scan/exploit

★ 0 · 2023-07-09
tpdlshdmlrkfmcla/cve-2023-34960

chamilo soap api rce (/webservices/additional_webservices.php)

★ 0 · 2025-03-30
PoCs 1 ★ 2 Last push 2026-05-30 (4 months, 1 week ago)

Fetching description from NVD…

Show 1 repositories
hfh86/CVE-2021-43530-UXSS-On-QRcode-Reader-

CVE-2021-43530 A Universal XSS vulnerability was present in Firefox for Android resulting from improper sanitization when processing a URL scanned from a QR co…

★ 2 · 2026-05-30
CVE-2014-3566
HOTMULTI PoC
PoCs 7 ★ 267 Last push 2026-05-30 (4 months, 1 week ago)

Fetching description from NVD…

Show 7 repositories
mpgn/poodle-PoC

:poodle: Poodle (Padding Oracle On Downgraded Legacy Encryption) attack CVE-2014-3566 :poodle:

★ 267 · 2023-10-06
cloudpassage/mangy-beast

CloudPassage Halo policy for detecting vulnerability to CVE-2014-3566 (AKA POODLE)

★ 0 · 2015-09-21
GoRuGoo/poodle-attack-sandbox

Test code for poodle attack (CVE-2014-3566)

★ 0 · 2025-01-27
josecl200/VC-PoodlePOC

Vibe coded POC of exploitation of the POODLE CVE-2014-3566

★ 0 · 2026-04-26
jmonge12/Home-Network-Vulnerability-Assessment

Auditoría de seguridad y análisis de vulnerabilidades (CVE-2014-3566 y CVE-2010-2333) en la infraestructura de red local y router residencial.

★ 0 · 2026-05-30
< Prev Page 112 / 447 Next >

Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.