Fetching description from NVD…
Every new exploit,
on the radar.
Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.
monitoring live11394 results
Fetching description from NVD…
Show 2 repositories
A project demonstrating an app that is vulnerable to Spring Security authorization bypass CVE-2022-31692
Demonstration of CVE-2022-31692 authorization bypass in Spring Security
Fetching description from NVD…
Show 1 repositories
Under Construction :) Please come back later
Fetching description from NVD…
Show 1 repositories
CVE-2022-40635: Groovy Sandbox Bypass in CrafterCMS
Fetching description from NVD…
Show 1 repositories
CVE-2022-40634: FreeMarker Server-Side Template Injection in CrafterCMS
Fetching description from NVD…
Show 2 repositories
CVE-2023-37478 showcases how a difference in npm and pnpm install packages that could be exploited by a well crafted tar.gz packge. This repo shows a demo.
Fetching description from NVD…
Show 1 repositories
KD Coming Soon <= 1.7 - Unauthenticated PHP Object Injection via cetitle
Fetching description from NVD…
Show 1 repositories
Fetching description from NVD…
Show 1 repositories
Qode Essential Addons <= 1.5.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation
Fetching description from NVD…
Show 1 repositories
Fetching description from NVD…
Show 1 repositories
Swift Performance Lite <= 2.3.6.14 - Missing Authorization to Unauthenticated Settings Export
Fetching description from NVD…
Show 1 repositories
bash script for automated discovery and exploitation of machines with the CVE-2022-39986 vulnerability
Fetching description from NVD…
Show 1 repositories
A dylib injection vulnerability in XMachOViewer 0.04 allows attackers to compromise integrity. By exploiting this, unauthorized code can be injected into the p…
Fetching description from NVD…
Show 1 repositories
Asana Desktop 2.1.0 on macOS allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings s…
Fetching description from NVD…
Show 1 repositories
CVE-2023-49002
Fetching description from NVD…
Show 8 of 10 repositories
cve-2021-21985 exploit
VMWARE VCENTER SERVER VIRTUAL SAN HEALTH CHECK PLUG-IN RCE (CVE-2021-21985)
CVE-2021-21985 Checker.
CVE-2021-21985 vmware 6.7-9.8 RCE
Multiple vulnerabilities in the vSphere Client (HTML5) were privately reported to VMware. Updates and workarounds are available to address these vulnerabilitie…
Fetching description from NVD…
Show 4 repositories
CVE-2021-30461
VOIP RCE
CVE-2021-30461
Fetching description from NVD…
Show 1 repositories
Microweber version 2.0.4 vulnerable to "Uploading Malicious Files"
Fetching description from NVD…
Show 1 repositories
Fetching description from NVD…
Show 1 repositories
Fetching description from NVD…
Show 1 repositories
CVE-2020-8250: Privilege Escalation via Command Injection in Pulse Secure VPN Linux Client
Fetching description from NVD…
Show 1 repositories
CVE-2020-8249: Buffer Overflow in Pulse Secure VPN Linux Client
Fetching description from NVD…
Show 1 repositories
CVE-2020-8248: Privilege Escalation via Zip Wildcard Exploit in Pulse Secure VPN Linux Client
Fetching description from NVD…
Show 1 repositories
CVE-2020-8254: Zip Slip in Pulse Secure VPN Windows Client
Fetching description from NVD…
Show 1 repositories
CVE-2021-20253: Privilege Escalation via Job Isolation Escape in Ansible Tower
Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.