Fetching description from NVD…
Show 1 repositories
★ 2 · 2026-03-04
Every new exploit,
on the radar.
Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.
monitoring liveCVE-2026-96230
CVE-2026-92392
CVE-2026-83834
CVE-2026-76519
CVE-2026-74034
CVE-2026-67281
CVE-2026-109506
CVE-2026-107081
CVE-2026-105133
CVE-2026-97657
CVE-2026-94504
CVE-2026-92805
CVE-2026-77770
CVE-2026-74580
14 contacts in last 24h
11193CVEs tracked
26153PoC repositories
22New in 24h
340PoC updated in 7 days
filters
11193 results
Fetching description from NVD…
Top PoC: https://github.com/0xcronos/CVE
Show 1 repositories
0xcronos/CVE
CVE-2025-70995
★ 0 · 2026-03-04
Fetching description from NVD…
Show 5 repositories
Barakat/CVE-2019-16098
Local privilege escalation PoC exploit for CVE-2019-16098
★ 200 · 2019-09-13
Offensive-Panda/NT-AUTHORITY-SYSTEM-CONTEXT-RTCORE
This exploit rebuilds and exploit the CVE-2019-16098 which is in driver Micro-Star MSI Afterburner 4.6.2.15658 (aka RTCore64.sys and RTCore32.sys) allows any a…
★ 34 · 2024-08-05
★ 6 · 2023-09-02
VortexCry-Organization/VortexCry-Ransomware-Release
# VortexCry-Ransomware VortexCry is an advanced ransomware that utilizes multi-stage process injection (such as Process Hollowing and APC Injection) and kernel…
★ 1 · 2026-02-24
CrowTheArchfiend/RTCore64-probe
A tiny cpp program to test reading memory using a vulnerable RTCore64.sys driver/device (CVE-2019-16098). It tries to read a "secret" from its own memory usin…
★ 0 · 2026-03-04
Fetching description from NVD…
Show 1 repositories
rav1010/CVE-2026-27636
Freescout-passive-scanner
★ 1 · 2026-03-04
Fetching description from NVD…
Show 1 repositories
DaRkZ2012/qualcomm-vulnerability-scanner
A tool to scan Android devices for the recently exploited Qualcomm flaw CVE-2026-21385, providing a simple and efficient way to identify vulnerable devices and…
★ 3 · 2026-03-04
Fetching description from NVD…
Show 1 repositories
★ 13 · 2026-03-03
Fetching description from NVD…
Show 3 repositories
Nxploited/CVE-2025-39459
Real Estate 7 <= 3.5.2 - Unauthenticated Privilege Escalation
★ 1 · 2026-02-27
TheBl4ckPh4nt0m/CVE-2025-39459
Unauthenticated Privilege Escalation
★ 1 · 2026-02-28
RootHarpy/CVE-2025-39459-Nuclei-Template
The Real Estate 7 WordPress theme is vulnerable to Privilege Escalation in all versions up to, and including, 3.5.2. This makes it possible for unauthenticated…
★ 0 · 2026-03-03
Fetching description from NVD…
Show 1 repositories
★ 4 · 2026-03-03
Fetching description from NVD…
Top PoC: https://github.com/watchtowrlabs/watchTowr-vs-BMC-Footprints-RCE-CVE-2025-71257-CVE-2025-71260
Show 1 repositories
Fetching description from NVD…
Show 2 repositories
TheGamingGallifreyan/LiberationPlay-CVE-2025-24132-AirBourne-POC
POC for CVE-2025-24132 (AirBourne). Currently just triggers the overflow and causes a crash
★ 8 · 2026-03-03
★ 3 · 2025-05-14
Fetching description from NVD…
Show 1 repositories
★ 1 · 2026-03-02
Fetching description from NVD…
Show 1 repositories
hakaioffsec/Centreon-Exploits-2026
Centreon exploits CVE-2026-2749, CVE-2026-2751 and CVE-2026-2750
★ 9 · 2026-03-02
Fetching description from NVD…
Show 2 repositories
★ 5 · 2026-03-01
★ 1 · 2026-03-02
Fetching description from NVD…
Show 1 repositories
JarvisDing-sdu/Yasa-CVE-2023-46229
Python exploit for CVE-2023-46229 with Yasa
★ 1 · 2026-03-02
Fetching description from NVD…
Show 1 repositories
Jaycelation/CVE-2026-25645
Insecure Temp File Reuse in extract_zipped_paths()
★ 0 · 2026-03-02
Fetching description from NVD…
Show 2 repositories
dodiorne/cve-2022-31813
tester for cve-2022-31813
★ 1 · 2025-05-21
★ 0 · 2026-03-02
Fetching description from NVD…
Show 1 repositories
★ 0 · 2026-03-02
Fetching description from NVD…
Show 8 of 12 repositories
★ 100 · 2025-07-10
0xbigshaq/CVE-2025-25257
FortiWeb CVE-2025-25257 exploit
★ 64 · 2025-07-11
TheStingR/CVE-2025-25257
Public PoC for CVE-2025-25257: FortiWeb pre-auth SQLi to RCE
★ 5 · 2025-10-30
0xgh057r3c0n/CVE-2025-25257
PoC for CVE-2025-25257, a critical unauthenticated SQL injection in FortiWeb. Exploits SQLi via the Authorization header to write a webshell and gain RCE. No l…
★ 2 · 2025-07-15
aitorfirm/CVE-2025-25257
Exploiting the CVE-2025-25257 vulnerability in FortiWeb. This repository demonstrates secure pre-authenticated SQL injection.
★ 1 · 2025-07-18
★ 1 · 2025-07-12
mrmtwoj/CVE-2025-25257
CVE‑2025‑25257 is a critical pre-authentication SQL injection vulnerability affecting Fortinet FortiWeb’s
★ 1 · 2025-07-19
segfault-it/CVE-2025-25257
A working (at least for me :] ) exploit for CVE-2025-25257
★ 1 · 2025-09-21
Fetching description from NVD…
Show 1 repositories
khayashi4337/lodash.template-fixed
Fork of lodash.template with CVE-2021-23337 fix (command injection via variable option)
★ 0 · 2026-03-01
Fetching description from NVD…
Show 2 repositories
Nxploited/CVE-2025-68860
WordPress Mobile builder Plugin <= 1.4.2 is vulnerable to a high priority Broken Authentication
★ 2 · 2025-12-31
★ 0 · 2026-03-01
Fetching description from NVD…
Fetching description from NVD…
Show 2 repositories
AdityaBhatt3010/CVE-2026-27579-CORS-Misconfiguration-Leading-to-Authenticated-Data-Exposure
CVE-2026-27579 - CORS Misconfiguration – Arbitrary Origin with Credentials → Authenticated Cross-Origin Account Data Exposure
★ 3 · 2026-03-01
Fetching description from NVD…
Show 1 repositories
AdityaBhatt3010/CVE-2026-23842-Denial-of-Service-via-Database-Connection-Pool-Exhaustion-version-1.2.10
CVE-2026-23842 — High severity Denial-of-Service vulnerability caused by SQLAlchemy connection pool exhaustion in concurrent get_response() calls in ChatterBot…
★ 2 · 2026-03-01
Fetching description from NVD…
Show 1 repositories
cwjchoi01/CVE-2025-66678
CVE-2025-66678
★ 2 · 2026-03-01
Fetching description from NVD…
Show 5 repositories
abbarhissarh/CVE-2020-29607
A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows an admin privileged user to gain access in the host through the "manage files"…
★ 6 · 2022-06-04
0xN7y/CVE-2020-29607
Exploit forCVE-2020-29607
★ 1 · 2023-11-24
estebanzarate/CVE-2020-29607-Pluck-CMS-4.7.13-Authenticated-File-Upload-RCE-PoC
Authenticated remote code execution in Pluck CMS before 4.7.13.
★ 1 · 2026-02-28
★ 0 · 2025-02-12
★ 0 · 2025-10-27
Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.