Every new exploit,
on the radar.

Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.

monitoring live
11151CVEs tracked
26077PoC repositories
8New in 24h
314PoC updated in 7 days
filters
All New Fresh PoC Hot Multi PoC Critical High

11151 results

PoCs 1 ★ 0 Last push 2026-05-12 (5 months ago)

Fetching description from NVD…

Show 1 repositories
RajeshTiwiva/CVE-2010-2039

CSRF (Cross-Site Request Forgery) vulnerability in gpEasy 1.5-16.3

★ 0 · 2026-05-12
PoCs 1 ★ 0 Last push 2026-05-12 (5 months ago)

Fetching description from NVD…

Show 1 repositories
murrez/ASUS-AiCloud-RCE

SETROOTCERTIFICATE (write /etc/cert.pem.1) + APPLYAPP (RC_SERVICE execution). Refs: CVE-2025-2492, CVE-2024-12912, CVE-2025-59366; runZero; routersploit; ASUS …

★ 0 · 2026-05-12
PoCs 1 ★ 0 Last push 2026-05-12 (5 months ago)

Fetching description from NVD…

Show 1 repositories
murrez/ASUS-AiCloud-RCE

SETROOTCERTIFICATE (write /etc/cert.pem.1) + APPLYAPP (RC_SERVICE execution). Refs: CVE-2025-2492, CVE-2024-12912, CVE-2025-59366; runZero; routersploit; ASUS …

★ 0 · 2026-05-12
PoCs 1 ★ 0 Last push 2026-05-12 (5 months ago)

Fetching description from NVD…

Show 1 repositories
MJ-bin/POC_CVE-2024-4322

POC_CVE-2024-4322

★ 0 · 2026-05-12
PoCs 1 ★ 4 Last push 2026-05-11 (5 months ago)

Fetching description from NVD…

Show 1 repositories
hakaioffsec/CVE-2026-4802

Arbitrary command execution on Cockpit

★ 4 · 2026-05-11
CVSS 7.5 HIGH CWE-248, CWE-1321 Published 2026-05-12 PoCs 1 ★ 0 Last push 2026-05-11 (5 months ago)

[email protected] and lower versions are vulnerable to denial of service via uncaught exception. By sending a multipart/form-data request with a field name that collides with an inherited Object.prototype property such as __proto__, constructor, or toString, the parser invokes .push() on the inherited prototype value rather than an array, throwing a TypeError that propagates as an uncaught exception and crashes the process. Impact: any service accepting multipart uploads via multiparty is affected. Workarounds: none. Upgrade to [email protected] or higher.

Show 1 repositories
Ser0n-ath/multiparty-CVE-2026-8161

Proof of concept of CVE-2026-8161 (Multiparty)

★ 0 · 2026-05-11
PoCs 1 ★ 0 Last push 2026-05-11 (5 months ago)

Fetching description from NVD…

Show 1 repositories
EntroVyx/CVE-2026-33657

EspoCRM 9.3.3 - Stored HTML Injection in Email Notifications

★ 0 · 2026-05-11
PoCs 1 ★ 2 Last push 2026-05-11 (5 months ago)

Fetching description from NVD…

Show 1 repositories
UmbertoDellaMonica/Linksys-WRT54GL-Exploitation

From Solder to Shell: Full Hardware Exploitation of the Linksys WRT54GL Router (CVE-2022-43973)

★ 2 · 2026-05-11
PoCs 1 ★ 0 Last push 2026-05-11 (5 months ago)

Fetching description from NVD…

Show 1 repositories
meh098/CVE-2026-24072-Analysis

Analysis of CVE-2026-24072

★ 0 · 2026-05-11
PoCs 4 ★ 1 Last push 2026-05-11 (5 months ago)

Fetching description from NVD…

Show 4 repositories
AmesianX/CVE-2021-21220
★ 1 · 2021-09-15
JacobTaylor3/CVE-2021-21220
★ 0 · 2026-04-01
JacobTaylor3/C2-and-Post-Exploitation-Framework

CVE-2021-21220 Exploitation infrastructure

★ 0 · 2026-05-11
borahll/CVE-2021-21220
★ 0 · 2026-05-07
PoCs 1 ★ 0 Last push 2026-05-11 (5 months ago)

Fetching description from NVD…

Show 1 repositories
Xmyronn/CVE-2026-10289-XSS
★ 0 · 2026-05-11
CVE-2018-25031
MULTI PoC
PoCs 15 ★ 3 Last push 2026-05-11 (5 months ago)

Fetching description from NVD…

Show 8 of 15 repositories
mathis2001/CVE-2018-25031

CVE-2018-25031 tests

★ 3 · 2026-05-11
afine-com/CVE-2018-25031

.json and .yaml files used to exploit CVE-2018-25031

★ 2 · 2025-09-15
rafaelcintralopes/SwaggerUI-CVE-2018-25031

Exploit Swagger UI - User Interface (UI) Misrepresentation of Critical Information (CVE-2018-25031)

★ 2 · 2023-04-14
LUCASRENAA/CVE-2018-25031
★ 0 · 2023-11-16
hev0x/CVE-2018-25031-PoC

PoC of CVE-2018-25031

★ 0 · 2024-01-03
johnlaurance/CVE-2018-25031-test2
★ 0 · 2024-02-23
geozin/POC-CVE-2018-25031

A simple POC (CVE-2018-25031

★ 0 · 2024-05-16
h2oa/CVE-2018-25031
★ 0 · 2024-05-21
PoCs 1 ★ 0 Last push 2026-05-11 (5 months ago)

Fetching description from NVD…

Show 1 repositories
bugresearch/CVE-2026-6274

CVE-2026-6274 - Redline WR3200 Broken Authentication

★ 0 · 2026-05-11
PoCs 1 ★ 0 Last push 2026-05-11 (5 months ago)

Fetching description from NVD…

Show 1 repositories
0xBlackash/CVE-2026-42569

CVE-2026-42569

★ 0 · 2026-05-11
PoCs 1 ★ 1 Last push 2026-05-11 (5 months ago)

Fetching description from NVD…

Show 1 repositories
canomer/CVE-2026-36980-Kernel-BSOD-DoS-PoC

Project Date : Feb 2026 / Discovered a buffer overflow vulnerability in the IOCTL handler of the kernel driver. The vulnerability allows an unprivileged local …

★ 1 · 2026-05-11
CVE-2024-48990
HOTMULTI PoC
PoCs 20 ★ 105 Last push 2026-05-11 (5 months ago)

Fetching description from NVD…

Show 8 of 20 repositories
makuga01/CVE-2024-48990-PoC

PoC for CVE-2024-48990

★ 105 · 2024-11-20
pentestfunctions/CVE-2024-48990-PoC-Testing

Testing POC for use cases

★ 26 · 2024-11-24
Serner77/CVE-2024-48990-Automatic-Exploit

Automated local privilege escalation exploit for CVE-2024-48990 (needrestart v3.7), leveraging PYTHONPATH hijacking to gain root access.

★ 9 · 2025-10-29
ns989/CVE-2024-48990

Exploit for CVE-2024-48990 (Local Privilege Escalation in needrestart < 3.8)

★ 5 · 2024-11-22
ally-petitt/CVE-2024-48990-Exploit

My exploit for CVE-2024-48990. Full details of how I made this are on my blog.

★ 5 · 2024-11-25
czeti/CVE-2024-48990_needrestart

Exploit for CVE-2024-48990 - Privilege Escalation in Needrestart 3.7-3. For eductional purposes only

★ 5 · 2025-02-16
Cyb3rFr0g/CVE-2024-48990-PoC

My take on the needrestart Python CVE-2024-48990

★ 2 · 2024-11-24
o-sec/CVE-2024-48990

an exploit for CVE-2024-48990 ( Local Privilege Escalation ) in needrestart

★ 2 · 2025-12-16
PoCs 1 ★ 0 Last push 2026-05-11 (5 months ago)

Fetching description from NVD…

Show 1 repositories
h3rkk/CVE-2024-31680

CVE-2024-31680

★ 0 · 2026-05-11
PoCs 1 ★ 0 Last push 2026-05-11 (5 months ago)

Fetching description from NVD…

Show 1 repositories
HORKimhab/CVE-2025-41242

CVE-2025-41242

★ 0 · 2026-05-11
PoCs 1 ★ 0 Last push 2026-05-11 (5 months ago)

Fetching description from NVD…

Show 1 repositories
mlbrilliance/aurora-demo-lockfile

AURORA demo target — deliberately vulnerable lockfiles (CVE-2019-10744, CVE-2018-18074, CVE-2020-26160)

★ 0 · 2026-05-11
PoCs 1 ★ 0 Last push 2026-05-11 (5 months ago)

Fetching description from NVD…

Show 1 repositories
mlbrilliance/aurora-demo-lockfile

AURORA demo target — deliberately vulnerable lockfiles (CVE-2019-10744, CVE-2018-18074, CVE-2020-26160)

★ 0 · 2026-05-11
PoCs 3 ★ 6 Last push 2026-05-10 (5 months ago)

Fetching description from NVD…

Show 3 repositories
0x0OZ/CVE-2026-7482-PoC

1day vuln research I guess

★ 6 · 2026-05-05
szybnev/CVE-2026-7482

Ollama CVE-2026-7482 Heap OOB read reproduction and black-box impact notes

★ 1 · 2026-05-07
kaleth4/CVE-2026-7482
★ 0 · 2026-05-10
PoCs 1 ★ 2 Last push 2026-05-10 (5 months ago)

Fetching description from NVD…

Show 1 repositories
canomer/CVE-2026-36981-Kernel-EoP-PoC

Project Date : Feb 2026 / Memory corruption vulnerability within the kernel driver of MiniTool. Demonstrates a debugger-assisted arbitrary kernel write primiti…

★ 2 · 2026-05-10
PoCs 1 ★ 11 Last push 2026-05-10 (5 months ago)

Fetching description from NVD…

Show 1 repositories
canomer/CVE-2025-54110-Kernel-EoP-PoC

Project Date : Oct 2025 / PoC implementation for CVE-2025-54110 a Kernel-Level Integer Overflow Vulnerability in the Windows `NtQueryDirectoryObject` system ca…

★ 11 · 2026-05-10
PoCs 1 ★ 0 Last push 2026-05-10 (5 months ago)

Fetching description from NVD…

Show 1 repositories
Rat5ak/CVE-2026-41285-OpenBSD-v6daemons-go-brrr

One IPv6 ND option with length zero. One missing check. Daemon walks backward and lives in the loop. Reported to OpenBSD, fixed, CVE assigned.

★ 0 · 2026-05-10
CVE-2020-25213
MULTI PoC
PoCs 10 ★ 59 Last push 2026-05-10 (5 months ago)

Fetching description from NVD…

Show 8 of 10 repositories
mansoorr123/wp-file-manager-CVE-2020-25213

https://medium.com/@mansoorr/exploiting-cve-2020-25213-wp-file-manager-wordpress-plugin-6-9-3f79241f0cd8

★ 59 · 2020-10-12
BLY-Coder/Python-exploit-CVE-2020-25213

Python exploit for RCE in Wordpress

★ 6 · 2023-03-13
E1tex/Python-CVE-2020-25213

Python Interactive Exploit for WP File Manager Vulnerability. The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upl…

★ 3 · 2023-08-02
kakamband/WPKiller

CVE-2020-25213 Wordpress File Manager 6.7 Plugin 0day exploit

★ 1 · 2020-11-13
forse01/CVE-2020-25213-Wordpress
★ 0 · 2021-03-05
0000000O0Oo/Wordpress-CVE-2020-25213

Will write a python script for exploiting this vulnerability

★ 0 · 2021-03-13
piruprohacking/CVE-2020-25213
★ 0 · 2021-04-03
b1ackros337/CVE-2020-25213
★ 0 · 2022-07-09
< Prev Page 122 / 447 Next >

Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.