Every new exploit,
on the radar.

Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.

monitoring live
11151CVEs tracked
26077PoC repositories
13New in 24h
347PoC updated in 7 days
filters
All New Fresh PoC Hot Multi PoC Critical High

11151 results

CVE-2019-8942
MULTI PoC
PoCs 5 ★ 74 Last push 2026-05-23 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/brianwrf/WordPress_4.9.8_RCE_POC
Show 5 repositories
brianwrf/WordPress_4.9.8_RCE_POC

A simple PoC for WordPress RCE (author priviledge), refer to CVE-2019-8942 and CVE-2019-8943.

★ 74 · 2019-03-18
synacktiv/CVE-2019-8942

WordPress crop-image exploitation

★ 4 · 2019-05-02
tuannq2299/CVE-2019-8942
★ 1 · 2022-05-31
SpeatX/WordPress-RCE-CVE-2019-8942

Python exploit toolkit for WordPress Crop Image RCE — CVE-2019-8942 & CVE-2019-8943

★ 1 · 2026-05-23
synod2/WP_CROP_RCE

cve-2019-8942, cve-2019-8943

★ 0 · 2021-05-05
CVE-2026-46529
PoCs 1 ★ 13 Last push 2026-05-23 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/N1et/CVE-2026-46529
Show 1 repositories
N1et/CVE-2026-46529

Evince/xreader/Atril RCE exploit to CVE-2026-46529

★ 13 · 2026-05-23
CVE-2026-0926
PoCs 1 ★ 0 Last push 2026-05-23 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/diamorphine666/CVE-2026-0926-exploit
Show 1 repositories
diamorphine666/CVE-2026-0926-exploit

CVE-2026-0926 exploit. The Prodigy Commerce plugin for WordPress Local File Inclusion

★ 0 · 2026-05-23
CVE-2026-6009
PoCs 1 ★ 0 Last push 2026-05-23 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/Pumila03/CVE-2026-6009
Show 1 repositories
Pumila03/CVE-2026-6009
★ 0 · 2026-05-23
CVE-2026-24135
PoCs 1 ★ 1 Last push 2026-05-23 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/reschjonas/CVE-2026-24135
Show 1 repositories
reschjonas/CVE-2026-24135

Arbitrary File Deletion in Gogs via Wiki Path Traversal

★ 1 · 2026-05-23
CVE-2026-9018
HIGH
CVSS 8.8 HIGH CWE-269 Published 2026-05-22 PoCs 1 ★ 1 Last push 2026-05-23 (4 months, 2 weeks ago)

The Easy Elements for Elementor – Addons & Website Templates plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.5 via the `easyel_handle_register()` function. This is due to the `wp_ajax_nopriv_eel_register` AJAX handler iterating the attacker-controlled `custom_meta` POST array and writing every supplied key-value pair to the newly created user's meta via `update_user_meta()` without any key whitelist or blocklist, allowing the `wp_capabilities` user meta key to be overwritten after `wp_insert_user()` has already assigned a safe role. This makes it possible for unauthenticated attackers to register a new account with full administrator-level privileges by supplying `custom_meta[wp_capabilities][administrator]=1`. Exploitation requires that user registration is enabled on the site and that at least one page exposes the Login/Register widget, which publishes the required `easy_elements_nonce` into the page DOM where it can be retrieved by any unauthenticated visitor via a simple GET request.

Top PoC: https://github.com/xxconi/CVE-2026-9018
Show 1 repositories
xxconi/CVE-2026-9018

Unauthenticated Privilege Escalation CVE-2026-9018: Easy Elements for Elementor

★ 1 · 2026-05-23
CVE-2026-6960
PoCs 1 ★ 0 Last push 2026-05-23 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/xxconi/CVE-2026-6960
Show 1 repositories
xxconi/CVE-2026-6960

CVE-2026-6960: BookingPress Pro <= 5.6 – Unauthenticated Arbitrary File Upload

★ 0 · 2026-05-23
CVE-2026-23813
PoCs 1 ★ 1 Last push 2026-05-23 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/offseckit/CVE-2026-23813
Show 1 repositories
offseckit/CVE-2026-23813

CVE-2026-23813 — AOS-CX pre-auth bypass via nginx regex. Detection script, bypass demo, config-disclosure PoC, and IDS rules.

★ 1 · 2026-05-23
CVE-2024-12537
PoCs 1 ★ 0 Last push 2026-05-23 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/fineman999/POC_CVE-2024-12537
Show 1 repositories
fineman999/POC_CVE-2024-12537

POC_CVE-2024-12537

★ 0 · 2026-05-23
CVE-2025-46822
PoCs 2 ★ 0 Last push 2026-05-23 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/d3sca/CVE-2025-46822
Show 2 repositories
d3sca/CVE-2025-46822

Unauthenticated Arbitrary File Read via Absolute Path

★ 0 · 2025-05-23
HORKimhab/CVE-2025-46822

CVE-2025-46822

★ 0 · 2026-05-23
CVE-2026-41901
PoCs 1 ★ 0 Last push 2026-05-23 (4 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/HORKimhab/CVE-2026-41901
Show 1 repositories
HORKimhab/CVE-2026-41901

CVE-2026-41901

★ 0 · 2026-05-23
CVE-2021-35036
PoCs 1 ★ 3 Last push 2026-05-22 (4 months, 3 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/minanagehsalalma/zyxel-cve-2021-35036-super-admin-password-leak
Show 1 repositories
minanagehsalalma/zyxel-cve-2021-35036-super-admin-password-leak

Zyxel super-admin credential exposure write-up across CPE/ONT/LTE/5G firmware, with an adapted VMG8825-B50B genpass lab.

★ 3 · 2026-05-22
CVE-2024-12381
PoCs 2 ★ 0 Last push 2026-05-22 (4 months, 3 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/FatfishIO/CVE-2024-12381-PoC
Show 2 repositories
FatfishIO/CVE-2024-12381-PoC
★ 0 · 2026-05-11
VictorNS69/CVE-2024-12381

CVE-2024-12381 is a WebAssembly type canonicalization vulnerability in Chrome's V8 engine where `CanonicalEquality::EqualValueType()` fails to account for null…

★ 0 · 2026-05-22
CVE-2026-5843
PoCs 1 ★ 0 Last push 2026-05-22 (4 months, 3 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/davidrxchester/CVE-2026-5843
Show 1 repositories
davidrxchester/CVE-2026-5843

Docker Container Escape POC via mlx-metal importlib

★ 0 · 2026-05-22
CVE-2026-5817
PoCs 2 ★ 0 Last push 2026-05-22 (4 months, 3 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/davidrxchester/CVE-2026-5817
Show 2 repositories
davidrxchester/CVE-2026-5817

Docker Container-to-Host Remote Code Execution POC via vllm-metal trust_remote_code=True

★ 0 · 2026-05-20
gouldnicholas/CVE-2026-5817-PoC

Docker Model Runner container-to-host RCE / Escape: A critical vulnerability that allows for container-to-host code execution in the Docker Model Runner MLX /…

★ 0 · 2026-05-22
CVE-2026-36226
PoCs 1 ★ 0 Last push 2026-05-22 (4 months, 3 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/NullByte8080/CVE-2026-36226
Show 1 repositories
NullByte8080/CVE-2026-36226
★ 0 · 2026-05-22
CVE-2026-36228
PoCs 1 ★ 0 Last push 2026-05-22 (4 months, 3 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/NullByte8080/CVE-2026-36228
Show 1 repositories
NullByte8080/CVE-2026-36228
★ 0 · 2026-05-22
CVE-2026-36227
PoCs 1 ★ 0 Last push 2026-05-22 (4 months, 3 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/NullByte8080/CVE-2026-36227
Show 1 repositories
NullByte8080/CVE-2026-36227
★ 0 · 2026-05-22
CVE-2026-45584
PoCs 1 ★ 0 Last push 2026-05-22 (4 months, 3 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/96613686/CVE-2026-45584
Show 1 repositories
96613686/CVE-2026-45584
★ 0 · 2026-05-22
CVE-2026-34926
PoCs 1 ★ 0 Last push 2026-05-22 (4 months, 3 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/HORKimhab/CVE-2026-34926
Show 1 repositories
HORKimhab/CVE-2026-34926

CVE-2026-34926

★ 0 · 2026-05-22
CVE-2020-12112
PoCs 1 ★ 14 Last push 2026-05-22 (4 months, 3 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/tchenu/CVE-2020-12112
Show 1 repositories
tchenu/CVE-2020-12112

BigBlueButton versions lower than 2.2.4 have a LFI vulnerability allowing access to sensitive files. 🚨

★ 14 · 2026-05-22
CVE-2026-20223
PoCs 1 ★ 0 Last push 2026-05-22 (4 months, 3 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/HORKimhab/CVE-2026-20223
Show 1 repositories
HORKimhab/CVE-2026-20223

CVE-2026-20223

★ 0 · 2026-05-22
CVE-2026-3102
PoCs 1 ★ 1 Last push 2026-05-22 (4 months, 3 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/HORKimhab/CVE-2026-3102
Show 1 repositories
HORKimhab/CVE-2026-3102

CVE-2026-3102

★ 1 · 2026-05-22
CVE-2021-30955
HOTMULTI PoC
PoCs 7 ★ 270 Last push 2026-05-21 (4 months, 3 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/b1n4r1b01/desc_race
Show 7 repositories
b1n4r1b01/desc_race

iOS 15.1 kernel exploit POC for CVE-2021-30955

★ 270 · 2022-03-01
markie-dev/desc_race_A15

CVE-2021-30955 iOS 15.1.1 POC for 6GB RAM devices (A14-A15)

★ 48 · 2022-03-14
GeoSn0w/Pentagram-exploit-tester

A test app to check if your device is vulnerable to CVE-2021-30955

★ 19 · 2026-05-21
verygenericname/CVE-2021-30955-POC-IPA

https://gist.github.com/jakeajames/37f72c58c775bfbdda3aa9575149a8aa compiled into a ipa 15.0-15.2b1

★ 3 · 2022-03-01
nickorlow/CVE-2021-30955-POC

Jake Jame's proof of concept wrapped into an iOS app for CVE-2021-30955

★ 1 · 2022-02-28
timb-machine-mirrors/jakeajames-CVE-2021-30955

Clone from gist

★ 0 · 2022-02-28
st-rnd/desc_race-1

desc_race exploit for iOS 15.0 - 15.1.1 (with stable kernel r/w primitives) (CVE-2021-30955)

★ 0 · 2022-03-15
CVE-2025-39247
PoCs 1 ★ 0 Last push 2026-05-21 (4 months, 3 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/Sita-Technologies/CVE-2025-39247
Show 1 repositories
Sita-Technologies/CVE-2025-39247

HikCentral Professional - Pre-Auth License ActiveCode Leak

★ 0 · 2026-05-21
< Prev Page 116 / 447 Next >

Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.