Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.
monitoring live11151 results
Fetching description from NVD…
Exploit for CVE-2026-33725 - Remote Code Execution and Arbitrary File Read via H2 JDBC INIT Injection in EE Serialization Import
Fetching description from NVD…
Fetching description from NVD…
A spoofing vulnerability exists in Microsoft SharePoint Server due to improper input validation. An unauthenticated attacker can send a specially crafted HTTP …
Fetching description from NVD…
CVE-2026-40487 - Postiz <= 2.21.5 - Arbitrary File Upload via MIME-Type Spoofing → Stored XSS → Account Takeover
Fetching description from NVD…
Sanitized advisory for CVE-2025-51846 affecting CryptPad WebSocket handling.
Fetching description from NVD…
An unauthenticated data extraction vulnerability in Kyocera printers, which allows for recovery of cleartext address book and domain joined passwords
Kyocera cred dumper based on CVE-2022-1026
NSE port of CVE-2022-1026 exploit for mass identification and exploitation
An unauthenticated data extraction vulnerability in Kyocera printers, which allows for recovery of cleartext address book and domain joined passwords.
Improved Golang Version of Rapid7 PoC for CVE-2022-1026
Fetching description from NVD…
Fetching description from NVD…
This repository contains a Python script that checks WordPress websites for the CVE-2022-3590 vulnerability, which exploits an unauthenticated blind Server-Si…
Based on CVE-2022-3590, WordPress <= 6.9.1 - Unauthenticated Blind SSRF via XML-RPC Pingback Discovery proof of concept (PoC)
Fetching description from NVD…
Fetching description from NVD…
Fetching description from NVD…
CVE-2026-0006: Heap buffer overflow PoC for libopenapv (Android APV codec) - CVSS 9.8
Fetching description from NVD…
SQL Injection vulnerability in NASA EOSDIS MODAPS due to improper input validation in the `category` parameter. This flaw allows attackers to manipulate backen…
Fetching description from NVD…
A PoC for demonstrating CVE-2026-25604
Fetching description from NVD…
A PoC for demonstrating CVE-2026-26903
Fetching description from NVD…
(RCE) vulnerability discovered in Ghost CMS (specifically affecting versions 0.7.2 through 6.19.0)
Fetching description from NVD…
POCs for CVE-2026-32604 and CVE-2026-32613 which allow post-auth RCE and credential theft in Spinnaker
Fetching description from NVD…
Fetching description from NVD…
有关CVE-2026-25049做了一个模拟沙盒来理解
CVE-2026-25049
Fetching description from NVD…
rt26cx21x64.sys exploit (Realtek PCIe GbE/2.5GbE/5GbE family)
Fetching description from NVD…
CVE-2026-2600 PoC - ElementsKit Elementor Addons <= 3.7.9 Stored XSS (Contributor+)
Fetching description from NVD…
Proof of Concept exploitation of CVE-2026-5760 - RCE in SGLang 0.5.9 via malicious GGUF
Fetching description from NVD…
repo for cve-2026-3008
Fetching description from NVD…
Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)
Fetching description from NVD…
The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account role when the Membership Addon is enabled, leading…
CVE-2025-2563
CVE-2025-2563 PoC
Fetching description from NVD…
CVE-2023-45802 - Apache HTTP/2 Memory Exhaustion DoS Apache versions: 2.4.17 through 2.4.57 Target: Apache/2.4.52 (Ubuntu) - VULNERABLE MehranTurk (M.T) WARNIN…
Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.