Every new exploit,
on the radar.

Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.

monitoring live
11534CVEs tracked
27579PoC repositories
0New in 24h
346PoC updated in 7 days
filters
All New Fresh PoC Hot Multi PoC Critical High

11534 results

CVE-2020-9483
PoCs 2 ★ 5 Last push 2021-07-19 (5 years, 3 months ago)

Fetching description from NVD…

Top PoC: https://github.com/Neko-chanQwQ/CVE-2020-9483
Show 2 repositories
Neko-chanQwQ/CVE-2020-9483

PoC of SQL Injection vul(CVE-2020-9483,Apache SkyWalking)

★ 5 · 2021-07-19
shanika04/apache_skywalking

CVE-2020-9483 OR CVE-2020-13921

★ 1 · 2021-01-06
CVE-2019-5782
PoCs 1 ★ 21 Last push 2021-07-18 (5 years, 3 months ago)

Fetching description from NVD…

Top PoC: https://github.com/edxsh/CVE-2019-5782_CVE-2019-13768
Show 1 repositories
edxsh/CVE-2019-5782_CVE-2019-13768

Full chain Chrome 71.0.3578.98 exploit

★ 21 · 2021-07-18
CVE-2020-8277
PoCs 2 ★ 7 Last push 2021-07-15 (5 years, 3 months ago)

Fetching description from NVD…

Top PoC: https://github.com/masahiro331/CVE-2020-8277
Show 2 repositories
masahiro331/CVE-2020-8277
★ 7 · 2020-11-20
AndrewIjano/CVE-2020-8277
★ 0 · 2021-07-15
CVE-2021-34558
PoCs 1 ★ 45 Last push 2021-07-13 (5 years, 3 months ago)

Fetching description from NVD…

Top PoC: https://github.com/alexzorin/cve-2021-34558
Show 1 repositories
alexzorin/cve-2021-34558
★ 45 · 2021-07-13
CVE-2020-25134
HIGH
CVSS 8.8 HIGH CWE-22, CWE-434 Published 2020-09-25 PoCs 1 ★ 1 Last push 2021-07-13 (5 years, 3 months ago) Discovered 2026-10-09 03:16

An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local file inclusion due to the fact that there is an unrestricted possibility of loading any file with an inc.php extension. Inclusion of other files (even though limited to the mentioned extension) can lead to Remote Code Execution. This can occur via /settings/?format=../ URIs to pages/settings.inc.php.

Top PoC: https://github.com/ynsmroztas/CVE-2020-25134
Show 1 repositories
ynsmroztas/CVE-2020-25134

CVE-2020-25134 Authenticated Local File Inclusion in settings/format

★ 1 · 2021-07-13
CVE-2018-3245
HOT
PoCs 3 ★ 172 Last push 2021-07-13 (5 years, 3 months ago)

Fetching description from NVD…

Top PoC: https://github.com/pyn3rd/CVE-2018-3245
Show 3 repositories
pyn3rd/CVE-2018-3245

CVE-2018-3245-PoC

★ 172 · 2021-07-13
jas502n/CVE-2018-3245

CVE-2018-3245

★ 14 · 2018-10-25
ianxtianxt/CVE-2018-3245

CVE-2018-3245

★ 2 · 2019-11-05
CVE-2020-0887
HIGH
CVSS 7.8 HIGH Published 2020-03-12 PoCs 1 ★ 0 Last push 2021-07-12 (5 years, 3 months ago) Discovered 2026-10-09 03:16

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0788, CVE-2020-0877.

Top PoC: https://github.com/vinhthp1712/CVE-2020-0887
Show 1 repositories
vinhthp1712/CVE-2020-0887
★ 0 · 2021-07-12
CVE-2020-24148
CRITICAL
CVSS 9.1 CRITICAL CWE-918 Published 2021-07-07 PoCs 1 ★ 5 Last push 2021-07-12 (5 years, 3 months ago) Discovered 2026-10-09 03:16

Server-side request forgery (SSRF) in the Import XML and RSS Feeds (import-xml-feed) plugin 2.0.1 for WordPress via the data parameter in a moove_read_xml action.

Top PoC: https://github.com/dwisiswant0/CVE-2020-24148
Show 1 repositories
dwisiswant0/CVE-2020-24148

CVE-2020-24148 Proof-of-Concept

★ 5 · 2021-07-12
CVE-2020-1956
HIGH
CVSS 8.8 HIGH CWE-78 Published 2020-05-22 PoCs 1 ★ 0 Last push 2021-07-09 (5 years, 3 months ago) Discovered 2026-10-09 03:16

Apache Kylin 2.3.0, and releases up to 2.6.5 and 3.0.1 has some restful apis which will concatenate os command with the user input string, a user is likely to be able to execute any os command without any protection or validation.

Top PoC: https://github.com/b510/CVE-2020-1956
Show 1 repositories
b510/CVE-2020-1956

CVE-2020-1956

★ 0 · 2021-07-09
CVE-2019-14530
PoCs 2 ★ 4 Last push 2021-07-08 (5 years, 3 months ago)

Fetching description from NVD…

Top PoC: https://github.com/sec-it/exploit-CVE-2019-14530
Show 2 repositories
sec-it/exploit-CVE-2019-14530

OpenEMR < 5.0.2 - (Authenticated) Path Traversal - Local File Disclosure

★ 4 · 2021-07-08
Wezery/CVE-2019-14530

OpenEMR security issue

★ 0 · 2019-08-14
CVE-2018-15139
PoCs 1 ★ 2 Last push 2021-07-08 (5 years, 3 months ago)

Fetching description from NVD…

Top PoC: https://github.com/sec-it/exploit-CVE-2018-15139
Show 1 repositories
sec-it/exploit-CVE-2018-15139

OpenEMR < 5.0.1.4 - (Authenticated) File upload - Remote command execution

★ 2 · 2021-07-08
CVE-2021-3281
PoCs 1 ★ 2 Last push 2021-07-05 (5 years, 3 months ago)

Fetching description from NVD…

Top PoC: https://github.com/lwzSoviet/CVE-2021-3281
Show 1 repositories
lwzSoviet/CVE-2021-3281
★ 2 · 2021-07-05
CVE-2020-7115
CRITICAL
CVSS 9.8 CRITICAL CWE-306 Published 2020-06-03 PoCs 1 ★ 1 Last push 2021-07-03 (5 years, 3 months ago) Discovered 2026-10-09 03:16

The ClearPass Policy Manager web interface is affected by a vulnerability that leads to authentication bypass. Upon successful bypass an attacker could then execute an exploit that would allow to remote command execution in the underlying operating system. Resolution: Fixed in 6.7.13-HF, 6.8.5-HF, 6.8.6, 6.9.1 and higher.

Top PoC: https://github.com/Retr02332/CVE-2020-7115
Show 1 repositories
Retr02332/CVE-2020-7115

Create your malicious engine in seconds

★ 1 · 2021-07-03
CVE-2017-13208
PoCs 1 ★ 1 Last push 2021-07-01 (5 years, 3 months ago)

Fetching description from NVD…

Top PoC: https://github.com/idanshechter/CVE-2017-13208-Scanner
Show 1 repositories
idanshechter/CVE-2017-13208-Scanner
★ 1 · 2021-07-01
CVE-2021-35956
PoCs 1 ★ 1 Last push 2021-07-01 (5 years, 3 months ago)

Fetching description from NVD…

Top PoC: https://github.com/tcbutler320/CVE-2021-35956
Show 1 repositories
tcbutler320/CVE-2021-35956

Proof of Concept Exploit for CVE-2021-35956, AKCP sensorProbe - 'Multiple' Cross Site Scripting (XSS)

★ 1 · 2021-07-01
CVE-2012-1889
PoCs 2 ★ 3 Last push 2021-06-28 (5 years, 4 months ago)

Fetching description from NVD…

Top PoC: https://github.com/whu-enjoy/CVE-2012-1889
Show 2 repositories
whu-enjoy/CVE-2012-1889

这里保存着我学习CVE-2012-1889这个漏洞的利用所用到的文件

★ 3 · 2016-11-17
l-iberty/cve-2012-1889
★ 1 · 2021-06-28
CVE-2021-32537
PoCs 1 ★ 55 Last push 2021-06-26 (5 years, 4 months ago)

Fetching description from NVD…

Top PoC: https://github.com/0vercl0k/CVE-2021-32537
Show 1 repositories
0vercl0k/CVE-2021-32537

PoC for CVE-2021-32537: an out-of-bounds memory access that leads to pool corruption in the Windows kernel.

★ 55 · 2021-06-26
CVE-2009-0182
PoCs 1 ★ 0 Last push 2021-06-25 (5 years, 4 months ago)

Fetching description from NVD…

Top PoC: https://github.com/nobodyatall648/CVE-2009-0182
Show 1 repositories
nobodyatall648/CVE-2009-0182

CVE-2009-0182 VUPlayer2.49_LocalBufferOverflow

★ 0 · 2021-06-25
CVE-2019-12744
PoCs 1 ★ 1 Last push 2021-06-24 (5 years, 4 months ago)

Fetching description from NVD…

Top PoC: https://github.com/nobodyatall648/CVE-2019-12744
Show 1 repositories
nobodyatall648/CVE-2019-12744

Remote Command Execution through Unvalidated File Upload in SeedDMS versions <5.1.11

★ 1 · 2021-06-24
CVE-2019-8605
PoCs 1 ★ 0 Last push 2021-06-21 (5 years, 4 months ago)

Fetching description from NVD…

Top PoC: https://github.com/1nteger-c/CVE-2019-8605
Show 1 repositories
1nteger-c/CVE-2019-8605
★ 0 · 2021-06-21
CVE-2020-25627
CVSS 6.1 MEDIUM CWE-79 Published 2020-12-09 PoCs 1 ★ 3 Last push 2021-06-18 (5 years, 4 months ago) Discovered 2026-10-09 03:16

The moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.

Top PoC: https://github.com/HoangKien1020/CVE-2020-25627
Show 1 repositories
HoangKien1020/CVE-2020-25627

Stored XSS via moodlenetprofile parameter in user profile

★ 3 · 2021-06-18
CVE-2020-8300
CVSS 6.5 MEDIUM CWE-284 Published 2021-06-16 PoCs 1 ★ 1 Last push 2021-06-17 (5 years, 4 months ago) Discovered 2026-10-09 03:16

Citrix ADC and Citrix/NetScaler Gateway before 13.0-82.41, 12.1-62.23, 11.1-65.20 and Citrix ADC 12.1-FIPS before 12.1-55.238 suffer from improper access control allowing SAML authentication hijack through a phishing attack to steal a valid user session. Note that Citrix ADC or Citrix Gateway must be configured as a SAML SP or a SAML IdP for this to be possible.

Top PoC: https://github.com/stuartcarroll/CitrixADC-CVE-2020-8300
Show 1 repositories
stuartcarroll/CitrixADC-CVE-2020-8300

Detect Citrix ADC SAML action or SAML iDP Profile config vulnerable to CVE-2020-8300 using Citrix ADC NITRO API

★ 1 · 2021-06-17
CVE-2021-31159
PoCs 1 ★ 3 Last push 2021-06-16 (5 years, 4 months ago)

Fetching description from NVD…

Top PoC: https://github.com/ricardojoserf/CVE-2021-31159
Show 1 repositories
ricardojoserf/CVE-2021-31159

Zoho ManageEngine ServiceDesk Plus MSP - Active Directory User Enumeration (CVE-2021-31159) - https://ricardojoserf.github.io/CVE-2021-31159/

★ 3 · 2021-06-16
CVE-2021-22201
PoCs 1 ★ 1 Last push 2021-06-13 (5 years, 4 months ago)

Fetching description from NVD…

Top PoC: https://github.com/exp1orer/CVE-2021-22201
Show 1 repositories
exp1orer/CVE-2021-22201

CVE-2021–22201 Arbitrary file read on Gitlab

★ 1 · 2021-06-13
CVE-2021-32819
PoCs 1 ★ 10 Last push 2021-06-12 (5 years, 4 months ago)

Fetching description from NVD…

Top PoC: https://github.com/Abady0x1/CVE-2021-32819
Show 1 repositories
Abady0x1/CVE-2021-32819

SquirrellyJS mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuration options, remote c…

★ 10 · 2021-06-12
< Prev Page 405 / 462 Next >

Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.