Fetching description from NVD…
Show 1 repositories
★ 0 · 2026-04-08
Every new exploit,
on the radar.
Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.
monitoring liveCVE-2026-97657
CVE-2026-94504
CVE-2026-92805
CVE-2026-77770
CVE-2026-74580
CVE-2026-15667
CVE-2026-14962
CVE-2026-107692
CVE-2026-104748
CVE-2025-13224
CVE-2025-12433
CVE-2021-30517
CVE-2018-4125
CVE-2026-86086
14 contacts in last 24h
11184CVEs tracked
26133PoC repositories
33New in 24h
333PoC updated in 7 days
filters
11184 results
Fetching description from NVD…
Show 2 repositories
JohannesLks/CVE-2026-23398
icmp_tag_validation() NULL deref
★ 1 · 2026-04-05
zpol/cve-2026-23398-poc
Functional LAB with CVE-2026-23398 PoC
★ 1 · 2026-04-08
Fetching description from NVD…
Show 1 repositories
Hann1bl3L3ct3r/CVE-2026-4406
The Gravity Forms plugin for WordPress (tested through version 2.9.28) is vulnerable to unauthenticated reflected cross-site scripting (XSS) via the `form_ids`…
★ 0 · 2026-04-08
Fetching description from NVD…
Show 1 repositories
Hann1bl3L3ct3r/CVE-2026-4112
Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attac…
★ 1 · 2026-04-08
Fetching description from NVD…
Show 1 repositories
VABISMO/cve-2026-25994_PJSIP
PJSIP cve-2026-25994 BUFFER OVERFLOW POC
★ 2 · 2026-04-08
Fetching description from NVD…
Show 1 repositories
★ 0 · 2026-04-08
Fetching description from NVD…
Show 2 repositories
kirinse/cve-2023-42115
This module exploits a vulnerability in the target service identified as CVE-2023-42115.
★ 9 · 2024-09-02
★ 1 · 2026-04-08
Fetching description from NVD…
Show 1 repositories
★ 0 · 2026-04-08
Fetching description from NVD…
Show 1 repositories
zebbernCVE/CVE-2026-39371
Advisory for rwsdk sdk ⌯⌲ 5000 weekly downloads
★ 0 · 2026-04-08
Fetching description from NVD…
Show 1 repositories
JivaSecurity/DOLIBARR-RCE-CVE-2026-22666
dol_eval_standard() whitelist bypass eval() RCE, affecting Dolibarr 23.0.0 and below by jiva (jivasecurity.com)
★ 0 · 2026-04-08
Fetching description from NVD…
Show 1 repositories
sm1ee/CVE-2026-39324
CVE-2026-39324: Rack Session auth bypass PoC
★ 0 · 2026-04-07
Fetching description from NVD…
Show 1 repositories
0xBlackash/CVE-2025-13315
CVE-2025-13315
★ 0 · 2026-04-07
Fetching description from NVD…
Show 1 repositories
Chocapikk/Windfall
Windfall - Unauthenticated RCE exploit chain for Windmill & Nextcloud Flow (CVE-2026-29059). Path traversal + credential leak + PostgreSQL heap dump + Nextclou…
★ 18 · 2026-04-07
Fetching description from NVD…
Show 1 repositories
rockmelodies/CVE-2026-23524
Laravel Reverb 为 Laravel 应用提供实时 WebSocket 通信后端。在 1.6.3 及更早版本中，Reverb 将来自 Redis 通道的数据直接传递给 PHP 的 unserialize() 函数，且未对可实例化的类进行限制，导致用户面临远程代码执行风险。
★ 0 · 2026-04-07
Fetching description from NVD…
Show 5 repositories
guiimoraes/CVE-2025-15467
Command Execution PoC for OpenSSL Stack buffer overflow CVE-2025-15467
★ 15 · 2026-02-25
balgan/CVE-2025-15467
Working DoS for CVE-2025-15467 and a docker container to test against
★ 8 · 2026-01-28
mr-r3b00t/CVE-2025-15467
discovery tool (powershell)
★ 1 · 2026-02-03
materaj2/cve-2025-15467
Exploit script for cve-2025-15467
★ 0 · 2026-03-14
★ 0 · 2026-04-07
Fetching description from NVD…
Show 1 repositories
★ 0 · 2026-04-07
Fetching description from NVD…
Show 2 repositories
★ 3 · 2026-04-01
★ 0 · 2026-04-07
Fetching description from NVD…
Show 2 repositories
n0n4m3x41/CVE-2026-22738-POC
PoC for CVE-2026-22738
★ 13 · 2026-04-02
rockmelodies/CVE-2026-22738
SpEL Injection via Unescaped Filter Key in SimpleVectorStore Leads to Remote Code Execution
★ 2 · 2026-04-07
Fetching description from NVD…
Show 1 repositories
★ 0 · 2026-04-07
Fetching description from NVD…
Show 2 repositories
★ 96 · 2026-04-07
nikallass/CVE-2024-43468_mTLS_go
CVE-2024-43468 SCCM SQL Injection Exploit (mTLS unextractable client cert from MacOS keychain version)
★ 5 · 2025-01-17
Fetching description from NVD…
Show 1 repositories
★ 0 · 2026-04-07
Fetching description from NVD…
Show 1 repositories
★ 0 · 2026-04-07
Fetching description from NVD…
Show 1 repositories
★ 0 · 2026-04-07
Fetching description from NVD…
Show 8 of 24 repositories
Esonhugh/ingressNightmare-CVE-2025-1974-exps
IngressNightmare POC. world first non-blind remote execution exploitation with multi-advanced exploitation methods. allow on disk exploitation. CVE-2025-24514 …
★ 98 · 2025-05-06
sandumjacob/IngressNightmare-POCs
CVE-2025-1974
★ 91 · 2025-04-02
★ 53 · 2025-03-25
zwxxb/CVE-2025-1974
Poc for Ingress RCE
★ 8 · 2025-04-01
hi-unc1e/CVE-2025-1974-poc
PoC of CVE-2025-1974, modified from the world-first PoC~
★ 4 · 2025-03-27
1w4y/IngressNightmare-RCE-POC
PoC for CVE-2025-1974: Critical RCE in Ingress-NGINX (<v1.12.1) via unsafe config injection. Exploitable from the pod network without credentials, enabling cod…
★ 1 · 2025-03-26
rjhaikal/POC-IngressNightmare-CVE-2025-1974
POC IngressNightmare (CVE-2025-1974), modified from https://github.com/yoshino-s/CVE-2025-1974
★ 1 · 2025-03-28
Rubby2001/CVE-2025-1974-go
Exploit CVE-2025-1974 with a single file.
★ 1 · 2025-04-10
Fetching description from NVD…
Show 1 repositories
sbani/CVE-2014-8731-PoC
CVE-2014-8731 - PHPMemcachedAdmin RCE - Proof of Concept
★ 0 · 2026-04-06
Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.