Fetching description from NVD…
Show 1 repositories
CVE-2025-67246
Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.
monitoring live11193 results
Fetching description from NVD…
CVE-2025-67246
Fetching description from NVD…
Fetching description from NVD…
WordPress的News and Blog Designer Bundle插件在1.1及之前所有版本中,存在通过template参数导致的本地文件包含漏洞。该漏洞使得未经身份验证的攻击者能够包含并执行服务器上的任意.php文件,从而运行这些文件中的任何PHP代码。在允许上传和包含.php文件类型的场景下,攻击者可…
Fetching description from NVD…
CVE-2025-9501
Fetching description from NVD…
A PoC for CVE-2025-40019 in ESSIV module. (exploit WIP)
A Proof Of Concept for CVE-2025-40019
Fetching description from NVD…
Proof-of-Concept for exploiting CVE-2025-1910, a local privilege escalation within Watchguard's Mobile VPN with SSL client.
Fetching description from NVD…
CVE-2025-68428 Proof of Concept
Asset-wide detection tool for identifying jsPDF usage related to CVE-2025-68428 Detection only — no exploitation
Fetching description from NVD…
Fetching description from NVD…
Fetching description from NVD…
Privilege Escalation using nodes/proxy (create action allowed) and nodes/status (update/patch actions allowed)
Fetching description from NVD…
Fetching description from NVD…
Fetching description from NVD…
A Cross-Site Request Forgery (CSRF) vulnerability exists in the administrator profile update functionality of CarRentalMS v2.0. The affected endpoint does not …
Fetching description from NVD…
Kernel Information Disclosure
Fetching description from NVD…
The WP Page Permalink Extension plugin (<= 1.5.4) allows authenticated users with insufficient privileges to trigger the AJAX action cwpp_trigger_flush_rewrite…
Fetching description from NVD…
A XSS vulnerability exists in in React Router's meta()/<Meta> APIs in Framework Mode when generating script:ld+json tags which could allow arbitrary JavaScript…
Fetching description from NVD…
Druva inSync Windows Client 6.6.3 - Local Privilege Escalation (PowerShell) RCE
Local Priviledge Escalation for Druva
Fetching description from NVD…
This repository contains a Proof of Concept (PoC) exploit for the Stored Cross-Site Scripting (XSS) vulnerability in Termix, which can lead to Local File Inclu…
Fetching description from NVD…
Proof of concept of CVE-2024-47554
Fetching description from NVD…
POC for CVE-2025-54918 and a technical demonstration.
Simulated exploitation and mitigation of CVE-2025-54918 (Windows NTLM flaw). Includes detection scripts, Ansible patching, and CI/CD hardening. Demonstrates pr…
Fetching description from NVD…
PoC for AMD Ryzen driver.
Fetching description from NVD…
Local privilege escalation exploit for CVE-2025-0886.
Fetching description from NVD…
#exec cmd=... (CVE-2025-58098) argument injection
Fetching description from NVD…
CVE-2025-52694 Critical SQL Injection in Advantech IoTSuite/SaaS-Composer
Fetching description from NVD…
PoC for CVE-2025-53020 - HPACK bombing for Apache HTTPD.
Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.