Fetching description from NVD…
Every new exploit,
on the radar.
Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.
monitoring live11241 results
Fetching description from NVD…
Show 1 repositories
A high-severity prompt injection flaw in Claude AI proves that even the smartest language models can be turned into weapons — all with a few lines of code.
Fetching description from NVD…
Show 1 repositories
Fetching description from NVD…
Show 1 repositories
CVE-2025-52078 - Unauthenticated Arbitrary File Upload - Writebot SaaS React Template
Fetching description from NVD…
Show 1 repositories
CVE-2025-50675: Insecure install folder permissions in GPMAW bioinformatics software
Fetching description from NVD…
Show 1 repositories
Information & PoC for CVE-2024-45200, Mario Kart 8 Deluxe's "KartLANPwn" buffer overflow vulnerability
Fetching description from NVD…
Show 4 repositories
Webmin <=1.984, CVE-2022-0824 Post-Auth Reverse Shell PoC
Exploit POC for CVE-2022-0824
CVE-2022-0824, CVE-2022-0829, File Manger privilege exploit
Webmin CVE-2022-0824 增强版漏洞利用工具 - 支持命令执行和反向Shell双模式
Fetching description from NVD…
Show 1 repositories
Fetching description from NVD…
Show 1 repositories
📄Official disclosure of CVE-2022-4556 — Stored Cross-Site Scripting (XSS) vulnerability in SOGo Webmail v5.7.1, discovered by Ashkan Rafiee and Mostafa Abbasi.…
Fetching description from NVD…
Show 1 repositories
Stored XSS in a CMS platform leads to remote code execution (CVE-2025-50754)
Fetching description from NVD…
Show 1 repositories
CVE-2025-8517: Session Fixation in Vvveb CMS v1.0.6.1
Fetching description from NVD…
Show 1 repositories
Fetching description from NVD…
Show 1 repositories
Fetching description from NVD…
Show 2 repositories
HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload
Fetching description from NVD…
Show 1 repositories
Authenticated users can upload arbitrary files (e.g. .html, .svg) as profile images in OpenPLC Runtime. These files are publicly accessible without authenticat…
Fetching description from NVD…
Show 1 repositories
A critical Remote Code Execution (RCE) vulnerability (CVE-2025-51820) has been discovered in the Shopping Portal v1.0.
Fetching description from NVD…
Show 1 repositories
CSRF can create fake users by tricking an authenticated user into submitting a malicious request. The web app trusts the session, allowing unauthorized account…
Fetching description from NVD…
Show 1 repositories
Technical Details and Exploit for CVE-2025-50472
Fetching description from NVD…
Show 1 repositories
Exploit SQL injection in projectworlds Online Admissions System v1.0
Fetching description from NVD…
Show 3 repositories
CVE‑2025‑5394 WP Alone ≤ 7.8.3
Alone – Charity Multipurpose Non-profit WordPress Theme <= 7.8.3 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation
Alone – Charity Multipurpose Non-profit WordPress Theme <= 7.8.3 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation
Fetching description from NVD…
Show 1 repositories
Fetching description from NVD…
Show 1 repositories
CVE-2024-2782 Proof-of-Concept
Fetching description from NVD…
Show 1 repositories
CVE-2024-2771 Proof-of-Concept
Fetching description from NVD…
Show 1 repositories
Tribell Edge Sandbox Escape - PoCs of Edge's legacy vulnerabilities BadgeUpdateManager / TileFlyoutUpdateManager / ToastNotificationManager to exploit cross-bo…
Fetching description from NVD…
Show 1 repositories
CVE-2024-2053
Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.