Every new exploit,
on the radar.

Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.

monitoring live
11151CVEs tracked
26077PoC repositories
5New in 24h
307PoC updated in 7 days
filters
All New Fresh PoC Hot Multi PoC Critical High

11151 results

CVE-2023-34040
PoCs 4 ★ 46 Last push 2026-05-04 (5 months, 1 week ago)

Fetching description from NVD…

Top PoC: https://github.com/Contrast-Security-OSS/Spring-Kafka-POC-CVE-2023-34040
Show 4 repositories
Contrast-Security-OSS/Spring-Kafka-POC-CVE-2023-34040

POC for Spring Kafka Deserialization Vulnerability CVE-2023-34040

★ 46 · 2026-05-04
pyn3rd/CVE-2023-34040

Spring-Kafka-Deserialization-Remote-Code-Execution

★ 31 · 2023-10-08
huyennhat-dev/cve-2023-34040
★ 1 · 2024-05-27
buiduchoang24/CVE-2023-34040

In Spring for Apache Kafka 3.0.9 and earlier and versions 2.9.10 and earlier, a possible deserialization attack vector existed, but only if unusual configurati…

★ 0 · 2024-04-24
CVE-2026-42778
PoCs 1 ★ 0 Last push 2026-05-04 (5 months, 1 week ago)

Fetching description from NVD…

Top PoC: https://github.com/Akinfue/CVE-2026-42778-POC
Show 1 repositories
Akinfue/CVE-2026-42778-POC

CVE-2026-42778 EUVD-2026-26492 Deserialization of Untrusted Data (CWE-502)

★ 0 · 2026-05-04
CVE-2026-39387
PoCs 1 ★ 0 Last push 2026-05-04 (5 months, 1 week ago)

Fetching description from NVD…

Top PoC: https://github.com/xp1tr/CVE-2026-39387
Show 1 repositories
xp1tr/CVE-2026-39387

BoidCMS <= 2.1.2 RCE Exploit

★ 0 · 2026-05-04
CVE-2026-39440
PoCs 1 ★ 0 Last push 2026-05-04 (5 months, 1 week ago)

Fetching description from NVD…

Top PoC: https://github.com/3ele-projects/cve-2026-39440-funnelforms-fix
Show 1 repositories
3ele-projects/cve-2026-39440-funnelforms-fix
★ 0 · 2026-05-04
CVE-2020-15215
PoCs 1 ★ 16 Last push 2026-05-04 (5 months, 1 week ago)

Fetching description from NVD…

Top PoC: https://github.com/NishantIyer/CVE-2020-15215-Discord-POC
Show 1 repositories
NishantIyer/CVE-2020-15215-Discord-POC
★ 16 · 2026-05-04
CVE-2026-6379
PoCs 1 ★ 0 Last push 2026-05-04 (5 months, 1 week ago)

Fetching description from NVD…

Top PoC: https://github.com/dinosn/cve-2026-6379
Show 1 repositories
dinosn/cve-2026-6379

Lab kit for CVE-2026-6379 — WP Photo Album Plus < 9.1.11.001 unauthenticated SQL injection. Docker lab + time-based blind PoC. For authorized security research…

★ 0 · 2026-05-04
CVE-2026-27778
PoCs 1 ★ 0 Last push 2026-05-04 (5 months, 1 week ago)

Fetching description from NVD…

Top PoC: https://github.com/KimJ6/PoC-Simulator_CVE-2026-27778
Show 1 repositories
KimJ6/PoC-Simulator_CVE-2026-27778

Created with StackBlitz ⚡️

★ 0 · 2026-05-04
CVE-2025-55188
PoCs 2 ★ 32 Last push 2026-05-04 (5 months, 1 week ago)

Fetching description from NVD…

Top PoC: https://github.com/hunters-sec/CVE-2025-55188-7z-exploit
Show 2 repositories
hunters-sec/CVE-2025-55188-7z-exploit

7z exploit POC versions prior to 25.01

★ 32 · 2025-08-11
lunbun/CVE-2025-55188

Proof-of-concept of CVE-2025-55188: 7-Zip arbitrary file write

★ 10 · 2026-05-04
CVE-2019-13132
PoCs 1 ★ 0 Last push 2026-05-04 (5 months, 1 week ago)

Fetching description from NVD…

Top PoC: https://github.com/dinosn/cve-2019-13132-lab
Show 1 repositories
dinosn/cve-2019-13132-lab

CVE-2019-13132 — libzmq CURVE INITIATE stack overflow → RCE. Working exploit + Docker lab.

★ 0 · 2026-05-04
CVE-2022-4543
PoCs 2 ★ 3 Last push 2026-05-04 (5 months, 1 week ago)

Fetching description from NVD…

Top PoC: https://github.com/sunichi/cve-2022-4543-wrapper
Show 2 repositories
sunichi/cve-2022-4543-wrapper
★ 3 · 2023-11-22
ngtuonghung/CVE-2022-4543-EntryBleed
★ 0 · 2026-05-04
CVE-2025-69985
PoCs 2 ★ 3 Last push 2026-05-04 (5 months, 1 week ago)

Fetching description from NVD…

Top PoC: https://github.com/joshuavanderpoll/CVE-2025-69985
Show 2 repositories
joshuavanderpoll/CVE-2025-69985

CVE-2025-69985: FUXA ≤1.2.8 Auth Bypass + RCE via /api/runscript

★ 3 · 2026-02-25
kaleth4/CVE-2025-69985
★ 0 · 2026-05-04
CVE-2025-47987
PoCs 2 ★ 1 Last push 2026-05-04 (5 months, 1 week ago)

Fetching description from NVD…

Top PoC: https://github.com/Kryptoenix/CVE-2025-47987_PoC
Show 2 repositories
Kryptoenix/CVE-2025-47987_PoC
★ 1 · 2025-08-28
kaleth4/CVE-2025-47987
★ 0 · 2026-05-04
CVE-2026-42167
MULTI PoC
PoCs 6 ★ 31 Last push 2026-05-04 (5 months, 1 week ago)

Fetching description from NVD…

Top PoC: https://github.com/ZeroPathAI/proftpd-CVE-2026-42167-poc
Show 6 repositories
ZeroPathAI/proftpd-CVE-2026-42167-poc

POCs to demonstrate CVE-2026-42167 in ProFTPD

★ 31 · 2026-04-29
dinosn/proftpd-CVE-2026-42167-analysis

Independent reproduction, code-level root-cause analysis, and realistic-exposure write-up for CVE-2026-42167 (ProFTPD mod_sql is_escaped_text() bypass).

★ 3 · 2026-04-29
jimmexploit/CVE-2026-42167-PoC

ProFTPD SQL injection PoC

★ 1 · 2026-05-02
Sl4cK0TH/CVE-2026-42167-PoC

Pre-Auth RCE in ProFTPD via mod_sql is_escaped_text() bypass (CVE-2026-42167)

★ 0 · 2026-05-02
efeanilarslan/CVE-2026-42167-Exploit

Python exploit for CVE-2026-42167 (ProFTPD mod_sql). Features automated file scanning and timing-based blind data exfiltration.

★ 0 · 2026-05-02
kaleth4/CVE-2026-42167
★ 0 · 2026-05-04
CVE-2026-36355
PoCs 1 ★ 0 Last push 2026-05-03 (5 months, 1 week ago)

Fetching description from NVD…

Top PoC: https://github.com/totekuh/CVE-2026-36355
Show 1 repositories
totekuh/CVE-2026-36355

CVE-2026-36355: Realtek rtl819x Jungle SDK - Unauthenticated Kernel Memory Read/Write via Debug ioctls

★ 0 · 2026-05-03
CVE-2025-60503
PoCs 1 ★ 0 Last push 2026-05-03 (5 months, 1 week ago)

Fetching description from NVD…

Top PoC: https://github.com/H4zaz/CVE-2025-60503
Show 1 repositories
H4zaz/CVE-2025-60503

XSS vulnerability on ultimatefosters

★ 0 · 2026-05-03
CVE-2026-34753
PoCs 1 ★ 0 Last push 2026-05-03 (5 months, 1 week ago)

Fetching description from NVD…

Top PoC: https://github.com/Dhiaelhak-Rached/CVE-2026-34753
Show 1 repositories
Dhiaelhak-Rached/CVE-2026-34753
★ 0 · 2026-05-03
CVE-2026-10110
PoCs 1 ★ 0 Last push 2026-05-03 (5 months, 1 week ago)

Fetching description from NVD…

Top PoC: https://github.com/Xmyronn/CVE-2026-10110-SQLi
Show 1 repositories
Xmyronn/CVE-2026-10110-SQLi
★ 0 · 2026-05-03
CVE-2019-6250
PoCs 2 ★ 1 Last push 2026-05-03 (5 months, 1 week ago)

Fetching description from NVD…

Top PoC: https://github.com/AkashicYiTai/CVE-2019-6250-libzmq
Show 2 repositories
AkashicYiTai/CVE-2019-6250-libzmq
★ 1 · 2024-06-20
dinosn/cve-2019-6250-lab

End-to-end pre-auth RCE lab for CVE-2019-6250 (libzmq <= 4.3.0, ZMTP/2.0 wire-protocol)

★ 0 · 2026-05-03
CVE-2026-5724
PoCs 1 ★ 0 Last push 2026-05-03 (5 months, 1 week ago)

Fetching description from NVD…

Top PoC: https://github.com/tibrn/CVE-2026-5724
Show 1 repositories
tibrn/CVE-2026-5724
★ 0 · 2026-05-03
CVE-2025-24367
MULTI PoC
PoCs 6 ★ 38 Last push 2026-05-02 (5 months, 1 week ago)

Fetching description from NVD…

Top PoC: https://github.com/TheCyberGeek/CVE-2025-24367-Cacti-PoC
Show 6 repositories
TheCyberGeek/CVE-2025-24367-Cacti-PoC

Proof of Concept for CVE-2025-24367

★ 38 · 2025-12-08
matesz44/CVE-2025-24367

CVE-2025-24367: Cacti AuthN Graph Template RCE in posix sh

★ 1 · 2026-01-15
r3vpwnx/CVE-2025-24367

CVE-2025-24367 - Cacti Authenticated Graph Template RCE

★ 0 · 2025-12-12
SoftAndoWetto/CVE-2025-24367-PoC-Cacti

Authenticated RCE PoC for Cacti (CVE‑2025‑24367). Uses graph template injection to write and execute a payload via the “Unix – Logged in Users” template. Inten…

★ 0 · 2025-12-15
ShoshinMaster/CVE-2025-24367
★ 0 · 2026-01-19
dantedansh/CVE-2025-24367-Cacti-Exploit

Script hecho para obtener una webshell gracias a la vulnerabilidad de cacti CVE-2025-24367 en su versión 1.2.28.

★ 0 · 2026-05-02
CVE-2026-7671
PoCs 1 ★ 2 Last push 2026-05-02 (5 months, 1 week ago)

Fetching description from NVD…

Top PoC: https://github.com/CaginKyr/CVE-2026-7671
Show 1 repositories
CaginKyr/CVE-2026-7671

CVE-2026-7671 - OTP Brute Force vulnerability in Tornet Scooter Mobile App 4.75 (CWE-307)

★ 2 · 2026-05-02
CVE-2021-42694
PoCs 2 ★ 18 Last push 2026-05-02 (5 months, 1 week ago)

Fetching description from NVD…

Top PoC: https://github.com/simplylu/CVE-2021-42694
Show 2 repositories
simplylu/CVE-2021-42694

Generate malicious files using recently published homoglyphic-attack (CVE-2021-42694)

★ 18 · 2026-05-02
k271266/CVE-2021-42694
★ 0 · 2025-05-14
CVE-2026-42779
PoCs 1 ★ 11 Last push 2026-05-02 (5 months, 1 week ago)

Fetching description from NVD…

Top PoC: https://github.com/dinosn/CVE-2026-42779
Show 1 repositories
dinosn/CVE-2026-42779

CVE-2026-42779: Apache MINA AbstractIoBuffer.resolveClass() deserialization filter bypass to RCE (CVSS 9.8)

★ 11 · 2026-05-02
CVE-2026-7567
PoCs 1 ★ 1 Last push 2026-05-02 (5 months, 1 week ago)

Fetching description from NVD…

Top PoC: https://github.com/amirhosseinjamshidi64/CVE-2026-7567-POC
Show 1 repositories
amirhosseinjamshidi64/CVE-2026-7567-POC
★ 1 · 2026-05-02
CVE-2018-18441
PoCs 1 ★ 3 Last push 2026-05-02 (5 months, 1 week ago)

Fetching description from NVD…

Top PoC: https://github.com/bayazid-bit/CVE-2018-18441-exploit
Show 1 repositories
bayazid-bit/CVE-2018-18441-exploit

D-Link DCS series Wi-Fi camera expose sensitive information.

★ 3 · 2026-05-02
< Prev Page 126 / 447 Next >

Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.