Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.
monitoring live11207 results
Fetching description from NVD…
Auto exploitation tool for CVE-2024-24401.
Auto exploitation tool for CVE-2024-24401
Fetching description from NVD…
CVE-2025-68705 RustFS Path Traversal Vulnerability Check
Fetching description from NVD…
cve-2016-16113
Fetching description from NVD…
CVE-2025-3464: LPE exploit for ASUS AsIO3.sys
Fetching description from NVD…
weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、C…
Some codes for bypassing Oracle WebLogic CVE-2018-2628 patch
Weblogic 反序列化漏洞(CVE-2018-2628)
CVE-2018-2628 & CVE-2018-2893
CVE-2018-2628
WebLogic WLS核心组件反序列化漏洞多线程批量检测脚本 CVE-2018-2628-MultiThreading
漏洞利用工具
Fetching description from NVD…
PoC for PhpSpreadsheet XSS
Fetching description from NVD…
Fetching description from NVD…
Fetching description from NVD…
Fetching description from NVD…
Fetching description from NVD…
Proof-of-Concept (PoC) for CVE-2025-29306, a Remote Code Execution vulnerability in FoxCMS. This Python script scans single or multiple targets, executes comma…
Mass Exploit for CVE-2025-29306
This tiny lab simulates the core idea behind CVE-2025-29306: unsafe use of `unserialize()` on attacker-controlled input leading to remote code execution.
Fetching description from NVD…
PoC for CVE-2025-69194, a Path Traversal vulnerability in GNU Wget2 <= 2.2.0. This vulnerability allows attackers to achieve arbitrary file write or overwrite …
Fetching description from NVD…
Public disclosure and technical details for CVE-2025-65354 (SQL Injection)
POC for CVE-2025-65354
Fetching description from NVD…
Vatilon-based IP cameras expose internal web directories without authentication, leading to information disclosure.
Fetching description from NVD…
PoC for CVE-2025-37164
Detection for CVE-2025-37164
Exploit for the CVE-2025-37164
Fetching description from NVD…
CVE-2025-61246: SQL Injection vulnerability PoC in Online Shopping System PHP
Fetching description from NVD…
Responsible disclosure write-up for CVE-2025-14175 involving weak cryptographic algorithm support in the SSH server of TP-Link TL-WR820N.
Fetching description from NVD…
KiotViet Sync <= 1.8.5 - Unauthenticated Arbitrary File Upload
Fetching description from NVD…
WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeover
WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeover
Fetching description from NVD…
Fetching description from NVD…
CVE-2025-14998 Wordpress Plugin - Branda – White Label & Branding, Free Login Page Customizer <= 3.4.24 - Unauthenticated Privilege Escalation via Account Take…
Fetching description from NVD…
PoC for CVE-2025-2011 - SQLi in Depicter plugin <= 3.6.1
Exploit for CVE-2025-2011
Fetching description from NVD…
PoC CVE-2023-28205: Apple WebKit Use-After-Free Vulnerability
PoC CVE-2023-28205: Apple WebKit Use-After-Free Vulnerability
Fetching description from NVD…
POC of DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite
Fetching description from NVD…
Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.