Fetching description from NVD…
Show 1 repositories
PoC for CVE-2026-26801: SSRF in pdfmake URLResolver.js (>= 0.3.0-beta.2, <= 0.3.5)
Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.
monitoring live11193 results
Fetching description from NVD…
PoC for CVE-2026-26801: SSRF in pdfmake URLResolver.js (>= 0.3.0-beta.2, <= 0.3.5)
Fetching description from NVD…
CVE-2018-6606
Fetching description from NVD…
CVE-2026-25991 | Tandoor Recipes SSRF
Fetching description from NVD…
Fetching description from NVD…
Fetching description from NVD…
Fetching description from NVD…
a PoC for the Nagios CVE-2019-15949 rce in python
Fetching description from NVD…
Fetching description from NVD…
Stored XSS in NotChatbot WebChat <= 1.5.0 (CVE-2026-30048)
Fetching description from NVD…
CVE-2023-52235 PoC SPACEX STARLINK-DNS-Rebinding
Fetching description from NVD…
Sigma Rule for CVE-2025-49666
Fetching description from NVD…
A script to exploit CVE-2020-14144 - GiTea authenticated Remote Code Execution using git hooks
Gitea versions 1.1.0 → 1.12.5 allow authenticated users with "May create git hooks" permission to inject arbitrary shell commands into post-receive hooks. Push…
Fetching description from NVD…
Exploit for CVE-2021-25741 vulnerability
fork on Betep0k/CVE-2021-25741/fork whose images is useless and test on metarget
CVE-2021-25741 POC in Zig
Fetching description from NVD…
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
Fetching description from NVD…
STACK BUFFER OVERFLOW EXPLOIT RESULTING IN REMOTE CODE EXECUTION
Fetching description from NVD…
A security-hardened fork of the abandoned "PostGallery" WordPress plugin. Fixes critical Arbitrary File Upload (CVE-2025-13543) and Guest Access vulnerabilitie…
Disclosure for CVE-2025-13543
Fetching description from NVD…
A security-hardened fork of "Simply Show Hooks". Replaces the compromised original (CVE-2024-6297) and patches unlisted Cross-Site Scripting (XSS) vulnerabilit…
Fetching description from NVD…
Secure fork of Startklar Elementor Addons. Patched CVE-2024-5153 & File Upload vulnerabilities.
Fetching description from NVD…
A security-hardened fork of Crowdsignal Forms. Patches CVE-2025-69015 (Broken Access Control), modernizes for PHP 8.2+, and enforces strict authorization check…
Fetching description from NVD…
A security-patched fork of the legacy ClickFunnels Classic WordPress plugin. Fixes critical Stored XSS vulnerabilities (CVE-2022-4782) while maintaining origin…
Fetching description from NVD…
Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulne…
A secure, zero-trust database management tool for WordPress. Fixes critical SSRF vulnerabilities (CVE-2021-21311) by enforcing local connections only.
Fetching description from NVD…
Unsigned driver loader using CVE-2018-19320
Exploiting ring0 memcpy-like functionality to disable Driver Signing Enforcement (DSE)
CVE-2018-19320 LPE Exploit
Fetching description from NVD…
Proof of concept for CVE-2025-15276 - FontForge SFD File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability
Fetching description from NVD…
An exploit for Apache Struts CVE-2017-9805
CVE 2017-9805
Better Exploit Code For CVE 2017 9805 apache struts
Exploit script for Apache Struts2 REST Plugin XStream RCE (CVE-2017-9805)
An exploit for Apache Struts CVE-2017-9805
cve -2017-9805
CVE-2017-9805 POC
CVE-2017-9805 - Exploit
Fetching description from NVD…
FontForge Splinefont Crafted Filename Command Injection Vulnerability
Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.