Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.
monitoring live11207 results
Fetching description from NVD…
A fast, simple scanner for detecting CVE-2025-66470 - XSS vulnerability in NiceGUI's ui.interactive_image component.
Fetching description from NVD…
Vulnerable ThinkPHP 8.0.4 test environment for CVE-2024-44902 nuclei template validation
Fetching description from NVD…
Fetching description from NVD…
MonstaFTP Unauthenticated File Upload
Detection for CVE-2025-34299
Docker test environment for CVE-2025-34299 - Monsta FTP Pre-Auth RCE vulnerability
Fetching description from NVD…
Fetching description from NVD…
Unauthenticated RCE PoC in Microsoft Windows Server Update Service (WSUS) - CVE-2025-59287 & CVE-2023-35317
Fetching description from NVD…
Fetching description from NVD…
poc for cve-2025-53772
Fetching description from NVD…
Fetching description from NVD…
Algernon v1.17.4 is affected by a Cross-Site Scripting (XSS) vulnerability that allows attackers to execute arbitrary code via a crafted payload into a filenam…
Fetching description from NVD…
CVE-2015-9331的poc
Fetching description from NVD…
Security research — PoC for local root privilege escalation on macOS Mavericks 10.9.
Fetching description from NVD…
Fetching description from NVD…
CVE-2025-55449 EXP
AstrBot老版本RCE
Fetching description from NVD…
PoC for CVE-2025-65271 | Found by me
Fetching description from NVD…
D-link AX1500 Vulnerability
Fetching description from NVD…
Fetching description from NVD…
Fetching description from NVD…
These PoC python scripts test the Kemp LoadMaster for remote code execution.
Fetching description from NVD…
CVE-2022-33171: TypeORM SQL Injection Vulnerability
Fetching description from NVD…
RCE exploit for a .NET JSON deserialization vulnerability in Telerik UI for ASP.NET AJAX.
Telerik UI for ASP.NET AJAX File upload and .NET deserialisation exploit (CVE-2017-11317, CVE-2017-11357, CVE-2019-18935)
[CVE-2019-18935] Telerik UI for ASP.NET AJAX (RadAsyncUpload Handler) .NET JSON Deserialization
TelerikUI Vulnerability Scanner (CVE-2019-18935)
CVE-2019-18935
This project for CVE-2019-18935
Fetching description from NVD…
This is a proof-of-concept demonstrating CVE-2020-8158, a critical prototype pollution vulnerability in TypeORM versions < 0.2.25.
Fetching description from NVD…
Security Advisory – CVE-2025-65300
Fetching description from NVD…
CVE-2024-41570: Havoc C2 0.7 Teamserver SSRF exploit
Havoc SSRF to RCE
Automated Reverse Shell Exploit via WebSocket | Havoc-C2-SSRF with RCE
This is a modified version of the CVE-2024-41570 SSRF PoC from @chebuya chained with the auth RCE exploit from @hyperreality. This exploit executes code remote…
This is a Chained RCE in the Havoc C2 framework using github.com/chebuya and github.com/IncludeSecurity pocs
Expanded Exploit based on CVE-2024-41570
Fetching description from NVD…
Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.