Every new exploit,
on the radar.

Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.

monitoring live
11151CVEs tracked
26077PoC repositories
13New in 24h
349PoC updated in 7 days
filters
All New Fresh PoC Hot Multi PoC Critical High

11151 results

CVE-2026-8380
CVSS 6.5 MEDIUM Published 2026-06-26 PoCs 1 ★ 0 Last push 2026-05-28 (4 months, 2 weeks ago)

The Frontend File Manager Plugin WordPress plugin through 23.6 does not properly verify ownership of every targeted post before permanent deletion, allowing authenticated users with author-level access and above to permanently delete arbitrary posts and pages. When the Frontend File Manager Plugin WordPress plugin through 23.6's "Allow guest uploads" setting is enabled by an administrator, the same deletion primitive becomes reachable by unauthenticated users.

Top PoC: https://github.com/tiagob0b/CVE-2026-8380
Show 1 repositories
tiagob0b/CVE-2026-8380

CVE-2026-8380

★ 0 · 2026-05-28
CVE-2026-47100
PoCs 1 ★ 0 Last push 2026-05-28 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/rootdirective-sec/CVE-2026-47100-Analysis-Lab
Show 1 repositories
rootdirective-sec/CVE-2026-47100-Analysis-Lab
★ 0 · 2026-05-28
CVE-2026-7791
PoCs 1 ★ 1 Last push 2026-05-28 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/BenZamir/CVE-2026-7791
Show 1 repositories
BenZamir/CVE-2026-7791

Local Privilege Escalation in Amazon WorkSpaces via TOCTOU and Arbitrary File Write

★ 1 · 2026-05-28
CVE-2023-26083
PoCs 1 ★ 0 Last push 2026-05-28 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/noverisp3/CVE-2023-26083
Show 1 repositories
noverisp3/CVE-2023-26083

CVE-2023-26083-Mali-InfoLeak-PoC

★ 0 · 2026-05-28
CVE-2026-48030
PoCs 1 ★ 0 Last push 2026-05-28 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/muslimbek-0x/CVE-2026-48030
Show 1 repositories
muslimbek-0x/CVE-2026-48030
★ 0 · 2026-05-28
CVE-2026-35616
MULTI PoC
PoCs 8 ★ 36 Last push 2026-05-28 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/Alaatk/CVE-2026-35616
Show 8 repositories
Alaatk/CVE-2026-35616

Fortinet FortiClientEMS improper access control

★ 36 · 2026-04-20
BishopFox/CVE-2026-35616-check
★ 2 · 2026-04-06
0xBlackash/CVE-2026-35616

CVE-2026-35616

★ 1 · 2026-04-04
keraattin/CVE-2026-35616

CVE-2026-35616 - FortiClient EMS Pre-Authentication API Bypass (CVSS 9.1, CISA KEV). Python & Nmap NSE detection scripts with full technical breakdown. One for…

★ 1 · 2026-04-13
wa6n3r/CVE-2026-35616
★ 1 · 2026-04-20
fevar54/CVE-2026-35616-detector.py

Detector de CVE-2026-35616: identifica servidores FortiClient EMS vulnerables (7.4.5-7.4.6).

★ 0 · 2026-04-06
fevar54/forticlient_ems_cve_2026_35616_poc.py

PoC de CVE-2026-35616: control de acceso indebido en FortiClient EMS.

★ 0 · 2026-04-06
HORKimhab/CVE-2026-35616

CVE-2026-35616 - Draft

★ 0 · 2026-05-28
CVE-2026-29971
PoCs 2 ★ 0 Last push 2026-05-28 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/tharunchidurala-cyber/BACkupCVE-2026-29971
Show 2 repositories
tharunchidurala-cyber/BACkupCVE-2026-29971

An attacker can execute arbitrary JavaScript in the victim's browser, potentially leading to session hijacking or privilege escalation.

★ 0 · 2026-03-26
Tharooon/CVE-2026-29971

An attacker can execute arbitrary JavaScript in the victim's browser, potentially leading to session hijacking or privilege escalation.

★ 0 · 2026-05-28
CVE-2023-35813
MULTI PoC
PoCs 5 ★ 7 Last push 2026-05-27 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/aalexpereira/CVE-2023-35813
Show 5 repositories
aalexpereira/CVE-2023-35813

Exploit for CVE-2023-35813 POC

★ 7 · 2023-12-31
BagheeraAltered/CVE-2023-35813-PoC

An exploit for the Sitecore Remote Code Execution Vulnerability

★ 4 · 2026-02-20
her3ticAVI/CVE-2023-35813

CVE-2023-35813 is a proof-of-concept used to determine if an instance of Sitecore is vulnerable by analyzing a server Response Header for modification.

★ 3 · 2026-03-27
Rezy-Dev/CVE-2023-35813

Exploit CVE-2023-35813 PoC Script

★ 0 · 2025-11-30
nmlz/CVE-2023-35813_PoC
★ 0 · 2026-05-27
CVE-2026-34474
PoCs 1 ★ 1 Last push 2026-05-27 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/minanagehsalalma/cve-2026-34474-zte-h298a-h108n-sensitive-data-exposure
Show 1 repositories
minanagehsalalma/cve-2026-34474-zte-h298a-h108n-sensitive-data-exposure

CVE-2026-34474: unauthenticated ETHCheat=1 requests leak the admin password and Wi-Fi PSK from ZTE H298A/H108N routers.

★ 1 · 2026-05-27
CVE-2026-999999
PoCs 1 ★ 0 Last push 2026-05-27 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/24520597-blip/CVE-2026-999999
Show 1 repositories
24520597-blip/CVE-2026-999999

A critical Server-Side Template Injection (SSTI) vulnerability exists in the X-Trading Portal v1.4.2 dashboard metadata rendering engine. The flaw is due to …

★ 0 · 2026-05-27
CVE-2026-35455
PoCs 1 ★ 0 Last push 2026-05-27 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/emanuelepns/immich-exfiltration-demo
Show 1 repositories
emanuelepns/immich-exfiltration-demo

Cybersecurity demo exploiting CVE-2026-35455 with automatic API key generation and exfiltration

★ 0 · 2026-05-27
CVE-2025-55423
PoCs 1 ★ 0 Last push 2026-05-27 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/logis11/CVE-2025-55423-analysis-and-reproduction
Show 1 repositories
logis11/CVE-2025-55423-analysis-and-reproduction
★ 0 · 2026-05-27
CVE-2026-4893
PoCs 1 ★ 0 Last push 2026-05-27 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/lottiedeyan/CVE20264893poc
Show 1 repositories
lottiedeyan/CVE20264893poc

Generate the poc for CVE-2026-4893: broken EDNS Client Subnet validation.

★ 0 · 2026-05-27
CVE-2026-5172
PoCs 1 ★ 0 Last push 2026-05-27 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/lottiedeyan/CVE20265172poc
Show 1 repositories
lottiedeyan/CVE20265172poc

CVE-2026-5172: buffer overflow in extract_addresses() on crafted resource record PoC

★ 0 · 2026-05-27
CVE-2026-20182
PoCs 2 ★ 1 Last push 2026-05-26 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/Nxploited/CVE-2026-20182
Show 2 repositories
Nxploited/CVE-2026-20182

Cisco Catalyst SD-WAN Peering Authentication Bypass

★ 1 · 2026-05-26
HORKimhab/CVE-2026-20182

CVE-2026-20182

★ 0 · 2026-05-24
CVE-2026-46275
PoCs 1 ★ 0 Last push 2026-05-26 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/xxconi/CVE-2026-46275
Show 1 repositories
xxconi/CVE-2026-46275
★ 0 · 2026-05-26
CVE-2025-50946
PoCs 1 ★ 0 Last push 2026-05-26 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/runt1me/cve-2025-50946
Show 1 repositories
runt1me/cve-2025-50946

Exploit script for CVE-2025-50946

★ 0 · 2026-05-26
CVE-2026-5364
PoCs 1 ★ 1 Last push 2026-05-26 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/xxconi/CVE-2026-5364
Show 1 repositories
xxconi/CVE-2026-5364

CVE-2026-5364 is a CVSS 8.1 (High) Unauthenticated Arbitrary File Upload vulnerability in the Drag and Drop File Upload for Contact Form 7

★ 1 · 2026-05-26
CVE-2024-23113
MULTI PoC
PoCs 7 ★ 11 Last push 2026-05-26 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/p33d/CVE-2024-23113
Show 7 repositories
p33d/CVE-2024-23113
★ 11 · 2024-10-27
CheckCve2/CVE-2024-23113

test_private_CVE

★ 1 · 2024-10-11
puckiestyle/CVE-2024-23113
★ 1 · 2024-10-31
MAVRICK-1/cve-2024-23113-test-env
★ 1 · 2025-07-02
ownouwa/cve-2024-23113-poc

CVE-2024-23113 是一个在 Linux Kernel 中被发现的漏洞，它属于 任意代码执行漏洞，影响了 bpf (Berkeley Packet Filter) 子系统。具体来说，这个漏洞影响了 bpf 程序的 bpf_prog 类型的对象，并且可以允许攻击者通过构造恶意的 BPF 程序来在内核空间执行恶…

★ 0 · 2024-11-28
iambrayden/CVE-2024-23113

This python scripts searches a client list to see if their FortiGate device is vulnerable to this CVE.

★ 0 · 2025-05-02
MinhPham123456789/PoC-CVE-2024-23113

A proof of concept for CVE 2024 23113 inspired by WatchTowr's article.

★ 0 · 2026-05-26
CVE-2026-20700
PoCs 2 ★ 17 Last push 2026-05-26 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/R3n3r0/CVE-2026-20700
Show 2 repositories
R3n3r0/CVE-2026-20700
★ 17 · 2026-05-23
notthemystery/CVE-2026-20700-POC-that-ll-never-work
★ 0 · 2026-05-26
CVE-2026-27384
PoCs 1 ★ 0 Last push 2026-05-26 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/xxconi/CVE-2026-27384
Show 1 repositories
xxconi/CVE-2026-27384
★ 0 · 2026-05-26
CVE-2026-45401
PoCs 1 ★ 1 Last push 2026-05-26 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/nayakchinmohan/CVE-2026-45401
Show 1 repositories
nayakchinmohan/CVE-2026-45401

Working exploit for ssrf issue reported in CVE-2026–45401

★ 1 · 2026-05-26
CVE-2026-3296
PoCs 1 ★ 0 Last push 2026-05-26 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/xxconi/CVE-2026-3296
Show 1 repositories
xxconi/CVE-2026-3296

CVE-2026-3296 is a CVSS 9.8 Critical unauthenticated PHP Object Injection vulnerability in the Everest Forms WordPress plugin

★ 0 · 2026-05-26
CVE-2026-6741
PoCs 1 ★ 0 Last push 2026-05-26 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/xxconi/CVE-2026-6741
Show 1 repositories
xxconi/CVE-2026-6741

CVE-2026-6741 is a CVSS 8.8 (High) Authenticated (Agent+) Privilege Escalation vulnerability in the LatePoint – Calendar Booking Plugin

★ 0 · 2026-05-26
CVE-2026-5229
PoCs 1 ★ 0 Last push 2026-05-26 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/xxconi/CVE-2026-5229
Show 1 repositories
xxconi/CVE-2026-5229

CVE-2026-5229: Form Notify Auth Bypass via LINE OAuth Callback (CVSS 9.8)

★ 0 · 2026-05-26
< Prev Page 114 / 447 Next >

Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.