Fetching description from NVD…
Every new exploit,
on the radar.
Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.
monitoring live11270 results
Fetching description from NVD…
Show 1 repositories
Exploit For: CVE-2024-40111: Stored Cross-Site Scripting (XSS) in Automad 2.0.0-alpha.4
Fetching description from NVD…
Show 1 repositories
Exploit For: CVE-2024-39123: Stored XSS in Calibre-web 0.6.21
Fetching description from NVD…
Show 2 repositories
InVesalius discovered CVE. CVE-2024-42845, CVE-2024-44825
Exploit For: CVE-2024-42845: Remote Code Execution (RCE) in Invesalius 3.1
Fetching description from NVD…
Show 1 repositories
POC of CVE-2024-57487 & CVE-2024-57488
Fetching description from NVD…
Show 1 repositories
Stored Cross Site Scripting vulnerability in Microweber < 2.0.9
Fetching description from NVD…
Show 1 repositories
ARPrice <= 4.0.3 - Authenticated (Subscriber+) PHP Object Injection
Fetching description from NVD…
Show 1 repositories
Stored Cross Site Scripting vulnerability in Microweber < 2.0.9
Fetching description from NVD…
Show 1 repositories
Stored Cross Site Scripting vulnerability in Microweber < 2.0.9
Fetching description from NVD…
Show 1 repositories
Exploit For: CVE-2024-36840: SQL Injection Vulnerability in Boelter Blue System Management (Version 1.3)
Fetching description from NVD…
Show 1 repositories
CF Internal Link Shortcode <= 1.1.0 - Unauthenticated SQL Injection
Fetching description from NVD…
Show 1 repositories
Fetching description from NVD…
Show 1 repositories
WP SuperBackup <= 2.3.3 - Unauthenticated Arbitrary File Upload
Fetching description from NVD…
Show 1 repositories
WP SuperBackup <= 2.3.3 - Missing Authorization to Unauthenticated Back-Up File Download
Fetching description from NVD…
Show 1 repositories
Fancy Product Designer <= 6.4.3 - Unauthenticated SQL Injection
Fetching description from NVD…
Show 2 repositories
HashiCorp Consul exploit with python. (CVE-2021-41805)
A proof-of-concept for CVE-2021-41805 which is a vulnerability in HashiCorp Consul Enterprise allowing for Remote Code Execution (RCE) with escalated privilege…
Fetching description from NVD…
Show 1 repositories
Exploit by Chirag Artani for CVE-2024-11613 in WordPress File Upload
Fetching description from NVD…
Show 1 repositories
CVE-2024-56433 - shadow-utils Default subordinate ID for local users creates risk of collision
Fetching description from NVD…
Show 1 repositories
Fetching description from NVD…
Show 1 repositories
Ultimate Gift Cards for WooCommerce <= 3.0.6 - Missing Authorization to Infinite Money Glitch
Fetching description from NVD…
Show 2 repositories
Error Log Viewer By WP Guru <= 1.0.1.3 - Missing Authorization to Unauthenticated Arbitrary File Read
Fetching description from NVD…
Show 1 repositories
PoC of CVE-2025-22510
Fetching description from NVD…
Show 1 repositories
Appsplate <= 2.1.3 - Unauthenticated SQL Injection
Fetching description from NVD…
Show 1 repositories
Host PHP Info <= 1.0.4 - Missing Authorization to Unauthenticated Sensitive Information Disclosure
Fetching description from NVD…
Show 1 repositories
Post Saint: ChatGPT, GPT4, DALL-E, Stable Diffusion, Pexels, Dezgo AI Text & Image Generator <= 1.3.1 - Missing Authorization to Authenticated (Subscriber+) Ar…
Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.