Every new exploit,
on the radar.
Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.
monitoring live
CVE-2026-97229
CVE-2026-68582
CVE-2026-58222
CVE-2026-107159
CVE-2026-102262
CVE-2026-41992
CVE-2026-104711
CVE-2025-41450
8 contacts in last 24h
11151CVEs tracked
26077PoC repositories
8New in 24h
314PoC updated in 7 days
filters
11151 results
CVSS 2.9 LOW
CWE-285, CWE-639
Published 2026-05-09
PoCs 1
★ 1
Last push 2026-05-13 (5 months ago)
A flaw has been found in JeecgBoot 3.9.1. The impacted element is an unknown function of the file jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/system/controller/LoginController.java of the component mLogin Endpoint. This manipulation causes authorization bypass. The attack is possible to be carried out remotely. The attack is considered to have high complexity. The exploitability is regarded as difficult. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Show 1 repositories
PoCs 5
★ 26
Last push 2026-05-12 (5 months ago)
Fetching description from NVD…
Show 5 repositories
NULL200OK/cve_2026_34621_advanced
A sophisticated, cross-platform exploit generator for **CVE-2026-34621** – a critical prototype pollution vulnerability in Adobe Acrobat and Reader that leads …
★ 13 · 2026-04-15
PoCs 1
★ 1
Last push 2026-05-12 (5 months ago)
Fetching description from NVD…
Show 1 repositories
PoCs 1
★ 0
Last push 2026-05-12 (5 months ago)
Fetching description from NVD…
Show 1 repositories
PoCs 2
★ 1
Last push 2026-05-12 (5 months ago)
Fetching description from NVD…
Show 2 repositories
sanupl/CVE-2021-45744
CVE-2021-45744 - A Stored Cross Site Scripting (XSS) vulnerability exists in bludit 3.13.1 via the TAGS section in login panel. Application stores attacker inj…
★ 1 · 2026-05-12
PoCs 2
★ 1
Last push 2026-05-12 (5 months ago)
Fetching description from NVD…
Show 2 repositories
sanupl/CVE-2021-45745
CVE-2021-45745 - A Stored Cross Site Scripting (XSS) vulnerability exists in Bludit 3.13.1 via the About Plugin in login panel. Application stores attacker inj…
★ 1 · 2026-05-12
PoCs 2
★ 1
Last push 2026-05-12 (5 months ago)
Fetching description from NVD…
Show 2 repositories
sanupl/CVE-2021-46069
CVE-2021-46069 - A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Mechanic List Section in login panel.
★ 1 · 2026-05-12
PoCs 2
★ 1
Last push 2026-05-12 (5 months ago)
Fetching description from NVD…
Show 2 repositories
sanupl/CVE-2021-46071
CVE-2021-46071 - A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Category List Section in login panel.
★ 1 · 2026-05-12
PoCs 2
★ 1
Last push 2026-05-12 (5 months ago)
Fetching description from NVD…
Show 2 repositories
sanupl/CVE-2021-46072
CVE-2021-46072 - A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Service List Section in login panel.
★ 1 · 2026-05-12
PoCs 2
★ 1
Last push 2026-05-12 (5 months ago)
Fetching description from NVD…
Show 2 repositories
sanupl/CVE-2021-46070
CVE-2021-46070 - A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Service Requests Section in login pa…
★ 1 · 2026-05-12
PoCs 2
★ 1
Last push 2026-05-12 (5 months ago)
Fetching description from NVD…
Show 2 repositories
sanupl/CVE-2021-46068
CVE-2021-46068 - A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the My Account Section in login panel.
★ 1 · 2026-05-12
PoCs 2
★ 1
Last push 2026-05-12 (5 months ago)
Fetching description from NVD…
Show 2 repositories
sanupl/CVE-2021-46073
CVE-2021-46073 - A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the User List Section in …
★ 1 · 2026-05-12
PoCs 2
★ 1
Last push 2026-05-12 (5 months ago)
Fetching description from NVD…
Show 2 repositories
sanupl/CVE-2021-46074
CVE-2021-46074 - A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the Settings Section in l…
★ 1 · 2026-05-12
PoCs 2
★ 1
Last push 2026-05-12 (5 months ago)
Fetching description from NVD…
Show 2 repositories
sanupl/CVE-2021-46075
CVE-2021-46075 - A Privilege Escalation vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. Staff account users can access the admin …
★ 1 · 2026-05-12
PoCs 2
★ 1
Last push 2026-05-12 (5 months ago)
Fetching description from NVD…
Show 2 repositories
sanupl/CVE-2021-46076
CVE-2021-46076 - Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker can upload a malicious php file in multiple end…
★ 1 · 2026-05-12
PoCs 2
★ 1
Last push 2026-05-12 (5 months ago)
Fetching description from NVD…
Show 2 repositories
sanupl/CVE-2021-46078
CVE-2021-46078 - An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicio…
★ 1 · 2026-05-12
PoCs 2
★ 1
Last push 2026-05-12 (5 months ago)
Fetching description from NVD…
Show 2 repositories
sanupl/CVE-2021-46079
CVE-2021-46079 - An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicio…
★ 1 · 2026-05-12
PoCs 2
★ 1
Last push 2026-05-12 (5 months ago)
Fetching description from NVD…
Show 2 repositories
sanupl/CVE-2021-46080
CVE-2021-46080 - A Cross Site Request Forgery (CSRF) vulnerability exists in Vehicle Service Management System 1.0. An successful CSRF attacks leads to Stored …
★ 1 · 2026-05-12
PoCs 2
★ 1
Last push 2026-05-12 (5 months ago)
Fetching description from NVD…
Show 2 repositories
sanupl/CVE-2021-46067
CVE-2021-46067 - In Vehicle Service Management System 1.0 an attacker can steal the cookies leading to Full Account Takeover.
★ 1 · 2026-05-12
PoCs 1
★ 1
Last push 2026-05-12 (5 months ago)
Fetching description from NVD…
Show 1 repositories
sanupl/CVE-2024-34568
In LetterPress plugin <= 1.2.1 is vulnerable to Cookie Stealing Vulnerability. An attacker can able to steal the cookies by injecting the JavaScript code.
★ 1 · 2026-05-12
PoCs 27
★ 5
Last push 2026-05-12 (5 months ago)
Fetching description from NVD…
Show 8 of 27 repositories
Rai2en/CVE-2023-4220-Chamilo-LMS
This is a script written in Python that allows the exploitation of the Chamilo's LMS software security flaw described in CVE-2023-4220
★ 5 · 2026-02-09
Ziad-Sakr/Chamilo-CVE-2023-4220-Exploit
This is an Exploit for Unrestricted file upload in big file upload functionality in Chamilo-LMS for this location "/main/inc/lib/javascript/bigupload/inc/bigUp…
★ 5 · 2024-07-08
PoCs 1
★ 0
Last push 2026-05-12 (5 months ago)
Fetching description from NVD…
Show 1 repositories
PoCs 3
★ 207
Last push 2026-05-12 (5 months ago)
Fetching description from NVD…
Show 3 repositories
PoCs 2
★ 1
Last push 2026-05-12 (5 months ago)
Fetching description from NVD…
Show 2 repositories
PoCs 1
★ 0
Last push 2026-05-12 (5 months ago)
Fetching description from NVD…
Show 1 repositories
Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.