Fetching description from NVD…
Show 1 repositories
XSS to RCE in RenderTune v1.1.4 exploit
Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.
monitoring live11270 results
Fetching description from NVD…
XSS to RCE in RenderTune v1.1.4 exploit
Fetching description from NVD…
Fetching description from NVD…
Just a local Dos bug in Linux kernel
Fetching description from NVD…
Fetching description from NVD…
Fetching description from NVD…
Explorations of CVE-2024-49368 + Exploit Development
Fetching description from NVD…
Sistema NetAdmin IAM 4 é vulnerável a Cross Site Scripting (XSS), no endpoint /BalloonSave.ashx
Fetching description from NVD…
CVE-2024-40443 - A SQL Injection vulnerability in Computer Laboratory Management System v1.0 allows attackers to execute arbitrary SQL commands
Fetching description from NVD…
Fetching description from NVD…
Magical Addons For Elementor <= 1.2.1 - Authenticated (Subscriber+) Server-Side Request Forgery
Fetching description from NVD…
Automatic Translation <= 1.0.4 - Unauthenticated Arbitrary File Upload
Fetching description from NVD…
Fetching description from NVD…
WP Dropbox Dropins <= 1.0 - Unauthenticated Arbitrary File Upload
Fetching description from NVD…
WP Sessions Time Monitoring Full Automatic <= 1.0.9 - Unauthenticated SQL Injection
Fetching description from NVD…
Fetching description from NVD…
Exploits Jetpack < 13.9.1 broken access control (CVE-2024-9926).
WARNING: This is a vulnerable application to test the exploit for the Jetpack < 13.9.1 broken access control (CVE-2024-9926). Run it at your own risk!
Fetching description from NVD…
Token Login <= 1.0.3 - Authenticated (Subscriber+) Privilege Escalation
Fetching description from NVD…
Fetching description from NVD…
Ajar in5 Embed <= 3.1.3 - Unauthenticated Arbitrary File Upload
Fetching description from NVD…
WPLMS Learning Management System for WordPress <= 4.962 – Unauthenticated Arbitrary File Read and Deletion
Fetching description from NVD…
Stacks Mobile App Builder <= 5.2.3 - Authentication Bypass via Account Takeover
Fetching description from NVD…
Fetching description from NVD…
User Toolkit <= 1.2.3 - Authenticated (Subscriber+) Authentication Bypass
Fetching description from NVD…
SurveyJS: Drag & Drop WordPress Form Builder <= 1.9.136 - Authenticated (Subscriber+) Arbitrary File Upload
Fetching description from NVD…
WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.4 - Unauthenticated Arbitrary Shortcode Execution
Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.