Fetching description from NVD…
Show 1 repositories
JS Archive List <= 6.1.5 - Unauthenticated SQL Injection
Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.
monitoring live11207 results
Fetching description from NVD…
JS Archive List <= 6.1.5 - Unauthenticated SQL Injection
Fetching description from NVD…
Fetching description from NVD…
Improper Hostname Verification in EagleEyes Lite Android Application
Fetching description from NVD…
Cleartext Transmission of Sensitive Information in EagleEyes Lite Android Application
Fetching description from NVD…
Improper Certificate Chain Validation in EagleEyes Lite Android Application
Fetching description from NVD…
Microsoft HEIF Extension (msheif_store.dll) OOB-read
Fetching description from NVD…
CVE-2025-57176 - Siklu EtherHaul Series - Unauthenticated Arbitrary File Upload
Fetching description from NVD…
CVE-2025-57174 Unauthenticated Remote Command Execution
Fetching description from NVD…
Fetching description from NVD…
Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion
Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion
Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion
Fetching description from NVD…
Fetching description from NVD…
Shattered is a tool and POC for the new CrushedFTP vulns, CVE Exploit Script: CVE-2025-2825 vs CVE-2025-31161
Authentication Bypass PoC for CVE-2025-2825 – Exploiting CrushFTP 10.x
Fetching description from NVD…
An issue in Datart v.1.0.0-rc.3 allows a remote attacker to execute arbitrary code via the INIT connection parameter.
Fetching description from NVD…
Datart 1.0.0-rc.3 is vulnerable to Directory Traversal in the POST /viz/image interface, since the server directly uses MultipartFile.transferTo() to save the …
Fetching description from NVD…
Demo web server
CVE-2025-34100 test
Fetching description from NVD…
login bypass vulnerability in Liferay Portal (versions 7.3.0–7.4.3.132) and Liferay DXP (various versions from 2024.Q1 to 2025.Q1.6)
Fetching description from NVD…
Introduction to CVE-2023-6933 Vulnerability
Fetching description from NVD…
Vulnerability in PHP Phar files, due to buffer overflow, arises from insufficient length checks on file names within the Phar archive. Malicious actors can cra…
poc-cve-2023-3824
Fetching description from NVD…
exploit script for job manager plugin of wordpress
Evangelos Mourikis POC for CVE-2015-6668 converted for Python 3
CVE-2015-6668, relacionada con el plugin WP Job Manager para WordPress (versiones ≤ 0.7.25).
A small Rust CLI that reproduces the information-disclosure pattern associated with CVE-2015-6668 (Job Manager <= 0.7.25).
Fetching description from NVD…
CSRF vulnerability in FD602GW-DX-R410 router allows remote attackers to reboot the device via a crafted POST request to /boaform/admin/formReboot when an admin…
Fetching description from NVD…
XSS exploit for CVE-2025-8550 in atjiu pybbs ≤6.0.0
Fetching description from NVD…
PoC and exploit scripts for CVE-2023-20048 - Remote Code Execution vulnerability affecting Cisco RV series routers. Includes a vulnerability checker (PoC) and…
A CLI tool for detecting CVE-2023-20048 vulnerability in Cisco Firepower Management Center.
Fetching description from NVD…
Playing with CVE-2010-2883
Fetching description from NVD…
LinkAce Stored Cross-Site Scripting (XSS) on the /system/audit page
Fetching description from NVD…
A stored XSS in the project delete flow allows execution of attacker-controlled JavaScript in an administrator’s browser when the admin attempts to delete a pr…
Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.