Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.
monitoring live11207 results
Fetching description from NVD…
Exploit Code for CVE-2024-39930 gogs ssh server RCE
Gogs Under Attack: Unpacking the Critical SSH Vulnerability (CVE-2024–39930)
Fetching description from NVD…
Context of CVE-2021-26291 minimal replicator
Fetching description from NVD…
Fetching description from NVD…
Fetching description from NVD…
Fetching description from NVD…
Fetching description from NVD…
Fetching description from NVD…
LiteSpeed Cache plugin for WordPress that could enable unauthenticated users to escalate their privileges
PoC for XSS vulnerability in the LiteSpeed Cache WordPress plugin (CVE-2023-40000) allowing elevated privileges. Includes code, explanations, and mitigations.
That's a PoC of cve-2023-40000. Wordpress LiteSpeed Cache exploit.
Fetching description from NVD…
An unauthenticated privilege escalation problem tracked as CVE-2024-32444 (CVSS score: 9.8).
Fetching description from NVD…
Cityworks deserialization of untrusted data vulnerability Detection
Fetching description from NVD…
MitM attack allowing a malicious interloper to impersonate a legitimate server when a client attempts to connect to it
Patch Manual para a correção das CVE-2025-26465-e-CVE-2025-26466, para sistemas sem update do OpenSSH
Fetching description from NVD…
POC to test CVE-2024-39929 against EXIM mail servers
Detection method for Exim vulnerability CVE-2024-39929
Fetching description from NVD…
CVE-2024-7593 Ivanti Virtual Traffic Manager 22.2R1 / 22.7R2 Admin Panel Authentication Bypass PoC [EXPLOIT]
Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass a…
Fetching description from NVD…
CVE-2025-24016: Wazuh Unsafe Deserialization Remote Code Execution (RCE)
Wazuh 8.4 CVE-2025-24016
CVE-2025-24016: RCE in Wazuh server! Remote Code Execution
A critical RCE vulnerability has been identified in the Wazuh server due to unsafe deserialization in the wazuh-manager package. This bug affects Wazuh version…
Detection for CVE-2025-24016 - Deserialization of Untrusted Data Vulnerability in the Wazuh software
CVE-2025-24016: RCE in Wazuh server! Remote Code Execution
Fetching description from NVD…
Detection for CVE-2024-57378
Fetching description from NVD…
Detection for CVE-2025-52914
Fetching description from NVD…
Detection for CVE-2025-8875 & CVE-2025-8876
Fetching description from NVD…
Detection for CVE-2025-4427 and CVE-2025-4428
Fetching description from NVD…
Detection for CVE-2025-7775
Version detection PowerShell
Fetching description from NVD…
Detection for CVE-2025-42944
Fetching description from NVD…
Detection for CVE-2025-26399
Fetching description from NVD…
UAF in linux kernel ≤ 6.12.38 (psock->cork)
Fetching description from NVD…
Apache OFBIZ Path traversal leading to RCE POC[CVE-2024-32113 & CVE-2024-36104]
Apache OfBiz vulns
CVE-2024-32113 Apache OFBIZ Batch Scanning
CVE-2024-32113 & CVE-2024-38856
CVE-2024-32113-Apache-OFBiz<18.12.13-Exploit
Fetching description from NVD…
CVE-2025-61884
Fetching description from NVD…
Apache Kafka客户端未对用户输入进行严格验证和限制，未经身份验证的攻击者可通过构造恶意配置读取环境变量或磁盘任意内容，或向非预期位置发送请求，提升REST API的文件系统/环境/URL访问权限。
Apache Kafka 4.1.0 (KRaft) with Keycloak OAuth2 authentication using Strimzi - bypasses CVE-2025-27817 URL allowlist restriction
Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.