Fetching description from NVD…
Show 1 repositories
CSRF (Cross-Site Request Forgery) vulnerability in gpEasy 1.5-16.3
Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.
monitoring live11151 results
Fetching description from NVD…
CSRF (Cross-Site Request Forgery) vulnerability in gpEasy 1.5-16.3
Fetching description from NVD…
SETROOTCERTIFICATE (write /etc/cert.pem.1) + APPLYAPP (RC_SERVICE execution). Refs: CVE-2025-2492, CVE-2024-12912, CVE-2025-59366; runZero; routersploit; ASUS …
Fetching description from NVD…
SETROOTCERTIFICATE (write /etc/cert.pem.1) + APPLYAPP (RC_SERVICE execution). Refs: CVE-2025-2492, CVE-2024-12912, CVE-2025-59366; runZero; routersploit; ASUS …
Fetching description from NVD…
POC_CVE-2024-4322
Fetching description from NVD…
Arbitrary command execution on Cockpit
[email protected] and lower versions are vulnerable to denial of service via uncaught exception. By sending a multipart/form-data request with a field name that collides with an inherited Object.prototype property such as __proto__, constructor, or toString, the parser invokes .push() on the inherited prototype value rather than an array, throwing a TypeError that propagates as an uncaught exception and crashes the process. Impact: any service accepting multipart uploads via multiparty is affected. Workarounds: none. Upgrade to [email protected] or higher.
Proof of concept of CVE-2026-8161 (Multiparty)
Fetching description from NVD…
EspoCRM 9.3.3 - Stored HTML Injection in Email Notifications
Fetching description from NVD…
From Solder to Shell: Full Hardware Exploitation of the Linksys WRT54GL Router (CVE-2022-43973)
Fetching description from NVD…
Analysis of CVE-2026-24072
Fetching description from NVD…
CVE-2021-21220 Exploitation infrastructure
Fetching description from NVD…
Fetching description from NVD…
CVE-2018-25031 tests
.json and .yaml files used to exploit CVE-2018-25031
Exploit Swagger UI - User Interface (UI) Misrepresentation of Critical Information (CVE-2018-25031)
PoC of CVE-2018-25031
A simple POC (CVE-2018-25031
Fetching description from NVD…
CVE-2026-6274 - Redline WR3200 Broken Authentication
Fetching description from NVD…
CVE-2026-42569
Fetching description from NVD…
Project Date : Feb 2026 / Discovered a buffer overflow vulnerability in the IOCTL handler of the kernel driver. The vulnerability allows an unprivileged local …
Fetching description from NVD…
PoC for CVE-2024-48990
Testing POC for use cases
Automated local privilege escalation exploit for CVE-2024-48990 (needrestart v3.7), leveraging PYTHONPATH hijacking to gain root access.
Exploit for CVE-2024-48990 (Local Privilege Escalation in needrestart < 3.8)
My exploit for CVE-2024-48990. Full details of how I made this are on my blog.
Exploit for CVE-2024-48990 - Privilege Escalation in Needrestart 3.7-3. For eductional purposes only
My take on the needrestart Python CVE-2024-48990
an exploit for CVE-2024-48990 ( Local Privilege Escalation ) in needrestart
Fetching description from NVD…
CVE-2024-31680
Fetching description from NVD…
CVE-2025-41242
Fetching description from NVD…
AURORA demo target — deliberately vulnerable lockfiles (CVE-2019-10744, CVE-2018-18074, CVE-2020-26160)
Fetching description from NVD…
AURORA demo target — deliberately vulnerable lockfiles (CVE-2019-10744, CVE-2018-18074, CVE-2020-26160)
Fetching description from NVD…
1day vuln research I guess
Ollama CVE-2026-7482 Heap OOB read reproduction and black-box impact notes
Fetching description from NVD…
Project Date : Feb 2026 / Memory corruption vulnerability within the kernel driver of MiniTool. Demonstrates a debugger-assisted arbitrary kernel write primiti…
Fetching description from NVD…
Project Date : Oct 2025 / PoC implementation for CVE-2025-54110 a Kernel-Level Integer Overflow Vulnerability in the Windows `NtQueryDirectoryObject` system ca…
Fetching description from NVD…
One IPv6 ND option with length zero. One missing check. Daemon walks backward and lives in the loop. Reported to OpenBSD, fixed, CVE assigned.
Fetching description from NVD…
https://medium.com/@mansoorr/exploiting-cve-2020-25213-wp-file-manager-wordpress-plugin-6-9-3f79241f0cd8
Python exploit for RCE in Wordpress
Python Interactive Exploit for WP File Manager Vulnerability. The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upl…
CVE-2020-25213 Wordpress File Manager 6.7 Plugin 0day exploit
Will write a python script for exploiting this vulnerability
Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.