Every new exploit,
on the radar.

Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.

monitoring live
11534CVEs tracked
27579PoC repositories
0New in 24h
344PoC updated in 7 days
filters
All New Fresh PoC Hot Multi PoC Critical High

11534 results

CVE-2019-7192
PoCs 2 ★ 87 Last push 2021-06-10 (5 years, 4 months ago)

Fetching description from NVD…

Top PoC: https://github.com/th3gundy/CVE-2019-7192_QNAP_Exploit
Show 2 repositories
th3gundy/CVE-2019-7192_QNAP_Exploit

QNAP pre-auth root RCE Exploit (CVE-2019-7192 ~ CVE-2019-7195)

★ 87 · 2020-05-24
cycraft-corp/cve-2019-7192-check

Checker for QNAP pre-auth root RCE (CVE-2019-7192 ~ CVE-2019-7195)

★ 13 · 2021-06-10
CVE-2021-26714
PoCs 1 ★ 0 Last push 2021-06-08 (5 years, 4 months ago)

Fetching description from NVD…

Top PoC: https://github.com/PwCNO-CTO/CVE-2021-26714
Show 1 repositories
PwCNO-CTO/CVE-2021-26714

Directory Traversal vulnerability in Enterprise License Manager portal in Mitel MiContact Center Enterprise before 9.4

★ 0 · 2021-06-08
CVE-2017-9554
PoCs 2 ★ 2 Last push 2021-06-08 (5 years, 4 months ago)

Fetching description from NVD…

Top PoC: https://github.com/rfcl/Synology-DiskStation-User-Enumeration-CVE-2017-9554-
Show 2 repositories
rfcl/Synology-DiskStation-User-Enumeration-CVE-2017-9554-

Tiny script to enumerate users using CVE-2017-9554 (forget_passwd.cgi)

★ 2 · 2018-08-28
Ez0-yf/CVE-2017-9554-Exploit-Tool

CVE-2017-9554 Exploit Tool

★ 0 · 2021-06-08
CVE-2021-3572
PoCs 1 ★ 2 Last push 2021-06-07 (5 years, 4 months ago)

Fetching description from NVD…

Top PoC: https://github.com/frenzymadness/CVE-2021-3572
Show 1 repositories
frenzymadness/CVE-2021-3572

A simple repository helping to test CVE-2021-3572 in PyPA/pip

★ 2 · 2021-06-07
CVE-2020-27688
PoCs 1 ★ 1 Last push 2021-06-07 (5 years, 4 months ago)

Fetching description from NVD…

Top PoC: https://github.com/matthiasmaes/CVE-2020-27688
Show 1 repositories
matthiasmaes/CVE-2020-27688

CVE-2020-27688

★ 1 · 2021-06-07
CVE-2021-33879
PoCs 1 ★ 0 Last push 2021-06-06 (5 years, 4 months ago)

Fetching description from NVD…

Top PoC: https://github.com/mmiszczyk/cve-2021-33879
Show 1 repositories
mmiszczyk/cve-2021-33879

GameLoop update MITM

★ 0 · 2021-06-06
CVE-2020-13957
CRITICAL
CVSS 9.8 CRITICAL CWE-863 Published 2020-10-13 PoCs 1 ★ 1 Last push 2021-06-06 (5 years, 4 months ago) Discovered 2026-10-09 03:16

Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous (which could be used for remote code execution) to be configured in a ConfigSet that's uploaded via API without authentication/authorization. The checks in place to prevent such features can be circumvented by using a combination of UPLOAD/CREATE actions.

Top PoC: https://github.com/s-index/CVE-2020-13957
Show 1 repositories
s-index/CVE-2020-13957

Apache Solr RCE CVE-2020-13957

★ 1 · 2021-06-06
CVE-2021-29440
PoCs 1 ★ 4 Last push 2021-06-06 (5 years, 4 months ago)

Fetching description from NVD…

Top PoC: https://github.com/CsEnox/CVE-2021-29440
Show 1 repositories
CsEnox/CVE-2021-29440

Unsafe Twig processing of static pages leading to RCE in Grav CMS 1.7.10

★ 4 · 2021-06-06
CVE-2021-29155
PoCs 1 ★ 3 Last push 2021-06-04 (5 years, 4 months ago)

Fetching description from NVD…

Top PoC: https://github.com/benschlueter/CVE-2021-29155
Show 1 repositories
benschlueter/CVE-2021-29155

Proof of Concept CVE-2021-29155

★ 3 · 2021-06-04
CVE-2021-2173
PoCs 1 ★ 0 Last push 2021-06-04 (5 years, 4 months ago)

Fetching description from NVD…

Top PoC: https://github.com/emad-almousa/CVE-2021-2173
Show 1 repositories
emad-almousa/CVE-2021-2173

CVE-2021-2173

★ 0 · 2021-06-04
CVE-2020-24949
HIGH
CVSS 8.8 HIGH Published 2020-09-03 PoCs 1 ★ 0 Last push 2021-06-03 (5 years, 4 months ago) Discovered 2026-10-09 03:16

Privilege escalation in PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user (not admin) to send a crafted request to the server and perform remote command execution (RCE).

Top PoC: https://github.com/r90tpass/CVE-2020-24949
Show 1 repositories
r90tpass/CVE-2020-24949

PHPFusion 9.03.50 - Remote Code Execution

★ 0 · 2021-06-03
CVE-2019-13025
PoCs 1 ★ 39 Last push 2021-06-02 (5 years, 4 months ago)

Fetching description from NVD…

Top PoC: https://github.com/x1tan/CVE-2019-13025
Show 1 repositories
x1tan/CVE-2019-13025

Connect Box CH7465LG (CVE-2019-13025)

★ 39 · 2021-06-02
CVE-2018-16167
PoCs 1 ★ 0 Last push 2021-06-02 (5 years, 4 months ago)

Fetching description from NVD…

Top PoC: https://github.com/dnr6419/CVE-2018-16167
Show 1 repositories
dnr6419/CVE-2018-16167

LogonTracer v1.2.0 RCE

★ 0 · 2021-06-02
CVE-2018-6905
PoCs 2 ★ 5 Last push 2021-06-02 (5 years, 4 months ago)

Fetching description from NVD…

Top PoC: https://github.com/pradeepjairamani/TYPO3-XSS-POC
Show 2 repositories
pradeepjairamani/TYPO3-XSS-POC

Typo3 -v9.1.0 Persistent Cross Site Scripting(XSS) Assigned CVE Number: CVE-2018-6905

★ 5 · 2018-04-08
dnr6419/CVE-2018-6905

typo3 install.php XSS

★ 0 · 2021-06-02
CVE-2020-11978
HIGH
CVSS 8.8 HIGH CWE-78 Published 2020-07-17 PoCs 1 ★ 8 Last push 2021-06-01 (5 years, 4 months ago) Discovered 2026-10-09 03:16

An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow which would allow any authenticated user to run arbitrary commands as the user running airflow worker/scheduler (depending on the executor in use). If you already have examples disabled by setting load_examples=False in the config then you are not vulnerable.

Top PoC: https://github.com/pberba/CVE-2020-11978
Show 1 repositories
pberba/CVE-2020-11978

PoC of how to exploit a RCE vulnerability of the example DAGs in Apache Airflow <1.10.11

★ 8 · 2021-06-01
CVE-2017-15950
PoCs 1 ★ 0 Last push 2021-05-31 (5 years, 4 months ago)

Fetching description from NVD…

Top PoC: https://github.com/rnnsz/CVE-2017-15950
Show 1 repositories
rnnsz/CVE-2017-15950
★ 0 · 2021-05-31
CVE-2017-8367
PoCs 1 ★ 0 Last push 2021-05-31 (5 years, 4 months ago)

Fetching description from NVD…

Top PoC: https://github.com/rnnsz/CVE-2017-8367
Show 1 repositories
rnnsz/CVE-2017-8367
★ 0 · 2021-05-31
CVE-2021-27338
PoCs 1 ★ 0 Last push 2021-05-30 (5 years, 4 months ago)

Fetching description from NVD…

Top PoC: https://github.com/Pho03niX/CVE-2021-27338
Show 1 repositories
Pho03niX/CVE-2021-27338
★ 0 · 2021-05-30
CVE-2021-20717
PoCs 1 ★ 1 Last push 2021-05-29 (5 years, 5 months ago)

Fetching description from NVD…

Top PoC: https://github.com/s-index/CVE-2021-20717
Show 1 repositories
s-index/CVE-2021-20717

CVE-2021-20717-EC-CUBE-XSS

★ 1 · 2021-05-29
CVE-2020-14295
PoCs 2 ★ 2 Last push 2021-05-28 (5 years, 5 months ago)

Fetching description from NVD…

Top PoC: https://github.com/0z09e/CVE-2020-14295
Show 2 repositories
0z09e/CVE-2020-14295

Authenticated SQL injection to command execution on Cacti 1.2.12

★ 2 · 2021-04-29
mrg3ntl3m4n/CVE-2020-14295

Proof of Concept for CVE-2020-14295.

★ 0 · 2021-05-28
CVE-2021-33564
PoCs 2 ★ 16 Last push 2021-05-27 (5 years, 5 months ago)

Fetching description from NVD…

Top PoC: https://github.com/mlr0p/CVE-2021-33564
Show 2 repositories
mlr0p/CVE-2021-33564

Argument Injection in Dragonfly Ruby Gem

★ 16 · 2021-05-26
dorkerdevil/CVE-2021-33564

Argument Injection in Dragonfly Ruby Gem exploit (backup)

★ 0 · 2021-05-27
CVE-2021-24027
HOT
PoCs 1 ★ 149 Last push 2021-05-25 (5 years, 5 months ago)

Fetching description from NVD…

Top PoC: https://github.com/CENSUS/whatsapp-mitd-mitm
Show 1 repositories
CENSUS/whatsapp-mitd-mitm

PoC and tools for exploiting CVE-2020-6516 (Chrome) and CVE-2021-24027 (WhatsApp)

★ 149 · 2021-05-25
CVE-2020-6516
HOT
PoCs 1 ★ 149 Last push 2021-05-25 (5 years, 5 months ago)

Fetching description from NVD…

Top PoC: https://github.com/CENSUS/whatsapp-mitd-mitm
Show 1 repositories
CENSUS/whatsapp-mitd-mitm

PoC and tools for exploiting CVE-2020-6516 (Chrome) and CVE-2021-24027 (WhatsApp)

★ 149 · 2021-05-25
CVE-2021-3310
PoCs 1 ★ 1 Last push 2021-05-24 (5 years, 5 months ago)

Fetching description from NVD…

Top PoC: https://github.com/piffd0s/CVE-2021-3310
Show 1 repositories
piffd0s/CVE-2021-3310

Western Digital MyCloud PR4100 Link Resolution Information Disclosure Vulnerability

★ 1 · 2021-05-24
CVE-2020-14372
PoCs 1 ★ 4 Last push 2021-05-22 (5 years, 5 months ago)

Fetching description from NVD…

Top PoC: https://github.com/kukrimate/CVE-2020-14372
Show 1 repositories
kukrimate/CVE-2020-14372

Write-up and proof of concept exploit for CVE-2020-14372

★ 4 · 2021-05-22
< Prev Page 406 / 462 Next >

Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.