Fetching description from NVD…
Show 1 repositories
★ 0 · 2026-08-18
Every new exploit,
on the radar.
Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.
monitoring liveCVE-2026-84411
CVE-2026-108592
CVE-2026-107806
CVE-2026-106445
CVE-2026-104335
CVE-2026-103690
CVE-2026-102428
CVE-2025-9548
CVE-2025-69872
CVE-2025-20730
CVE-2021-42023
11 contacts in last 24h
11128CVEs tracked
26034PoC repositories
11New in 24h
354PoC updated in 7 days
filters
11128 results
Fetching description from NVD…
Top PoC: https://github.com/jiegec/LoongBleed
Show 2 repositories
jiegec/LoongBleed
LoongBleed (aka LoongLeak) is a hardware vulnerability similar to ZenBleed (CVE-2023-20593) affecting Loongson LA464/LA664 processors.
★ 17 · 2026-08-18
sbaresearch/stop-zenbleed-win
PowerShell script to apply Zenbleed (CVE-2023-20593) MSR workaround on Windows
★ 8 · 2023-07-31
Fetching description from NVD…
Show 1 repositories
HORKimhab/CVE-2026-19650-CVE-2026-19478
CVE-2026-19650, CVE-2026-19478 - Draft or TODO
★ 0 · 2026-08-17
Fetching description from NVD…
Show 1 repositories
HORKimhab/CVE-2026-15826-CVE-2026-15748
CVE-2026-15826, CVE-2026-15748
★ 0 · 2026-08-17
Fetching description from NVD…
Show 2 repositories
★ 10 · 2021-04-30
ahm3dgg/cve-2018-8611
CVE-2018-8611 PrivEsc Exploit
★ 1 · 2026-08-17
Fetching description from NVD…
Show 1 repositories
IlhomjonR/CVE-2026-71518
CVE-2026-71518 — Typemill <2.26.0 unauthenticated authorization bypass in media file download (path-equivalent URL variants). Advisory + PoC.
★ 1 · 2026-08-17
Fetching description from NVD…
Show 1 repositories
securifera/CVE-2026-20217
ZendTo unauthenticated ClamAV CVE-2026-20217 RCE and default-profile root escalation reproduction
★ 1 · 2026-08-17
Fetching description from NVD…
Show 1 repositories
lucauL2dlek/java-sms-aye
This is a way to create Using code-breaking and compiler shortcuts to switch between presets in CVE-2014-1106691, however on desktop shortcuts can be made with…
★ 0 · 2026-08-17
Fetching description from NVD…
Show 2 repositories
Nxploited/CVE-2026-13714
Realtyna Organic IDX plugin + WPL Real Estate < 5.3.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution
★ 1 · 2026-08-02
★ 0 · 2026-08-17
Fetching description from NVD…
Show 1 repositories
toanln-cov/CVE-2026-74251
Unauthenticated SQL Injection via Attribute Filter in Phoca Cart - CVSS 9.3
★ 0 · 2026-08-17
Fetching description from NVD…
Show 1 repositories
Jvr2022/CVE-2026-40345
A poc and write-up for CVE-2026-40345
★ 6 · 2026-08-17
Fetching description from NVD…
Show 1 repositories
katekeiroz-dev/golang-x-text
golang.org/x/text v0.33.0 backport of CVE-2026-56852 (GO-2026-5970) for Go 1.24
★ 0 · 2026-08-17
Fetching description from NVD…
Show 1 repositories
Lulztigre/cve-2026-41042
POC for CVE-2026-41042
★ 0 · 2026-08-17
Fetching description from NVD…
Show 1 repositories
★ 0 · 2026-08-17
Fetching description from NVD…
Top PoC: https://github.com/bao7uo/dp_crypto
Show 7 repositories
bao7uo/dp_crypto
Base64-based encryption oracle exploit for CVE-2017-9248 (Telerik UI for ASP.NET AJAX dialog handler)
★ 178 · 2020-12-22
capt-meelo/Telewreck
A Burp extension to detect and exploit versions of Telerik Web UI vulnerable to CVE-2017-9248.
★ 96 · 2018-08-14
blacklanternsecurity/dp_cryptomg
Another tool for exploiting CVE-2017-9248, a cryptographic weakness in Telerik UI for ASP.NET AJAX dialog handler.
★ 61 · 2026-08-17
0xsharz/telerik-scanner-cve-2017-9248
Telerik CVE-2017-9248 Vulnerability Scanner
★ 2 · 2025-08-22
★ 0 · 2019-10-23
oldboysonnt/dp
Exploit CVE-2017-9248 Telerik ReMix from Paul Taylor's script. Exploit Telerik lastest version fixed vuln. ReMix by TinoKa & Shaco JX
★ 0 · 2020-01-21
cehamod/UI_CVE-2017-9248
Base64-based encryption oracle exploit for CVE-2017-9248 (Telerik UI for ASP.NET AJAX dialog handler)
★ 0 · 2023-06-05
Fetching description from NVD…
Show 1 repositories
madfxr/CVE-2024-26581-Checker
[CVE-2024-26581] Vulnerability Checker for BGN Internal
★ 2 · 2026-08-17
Fetching description from NVD…
Show 1 repositories
OmriBaso/SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit
Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path traversal, cert…
★ 108 · 2026-08-16
Fetching description from NVD…
Show 1 repositories
Nel-droid/CVE-2026-71203-PoC
PoC: changedetection.io unauthenticated OpenAPI schema disclosure (CVE-2026-71203, Medium 5.3)
★ 0 · 2026-08-16
Fetching description from NVD…
Show 1 repositories
Nel-droid/CVE-2026-71204-PoC
PoC: changedetection.io settings blind-merge mass assignment (CVE-2026-71204, Medium 6.3)
★ 0 · 2026-08-16
Fetching description from NVD…
Show 1 repositories
Nel-droid/CVE-2026-71205-PoC
PoC: changedetection.io unlimited login brute-force, no rate limiting (CVE-2026-71205, Medium 6.5)
★ 0 · 2026-08-16
Fetching description from NVD…
Show 1 repositories
Nel-droid/CVE-2026-72585-PoC
PoC: Grafana Editor role deletes protected contact points (CVE-2026-72585, Medium 6.5)
★ 0 · 2026-08-16
Fetching description from NVD…
Show 1 repositories
Nel-droid/CVE-2026-71206-PoC
PoC: Shiori JWT CheckToken never re-validates account state (CVE-2026-71206, High 8.2)
★ 0 · 2026-08-16
Fetching description from NVD…
Show 8 of 9 repositories
simplylu/CVE-2021-42574
Generate malicious files using recently published bidi-attack (CVE-2021-42574)
★ 8 · 2023-05-23
maweil/bidi_char_detector
Checks your files for existence of Unicode BIDI characters which can be misused for supply chain attacks. See CVE-2021-42574
★ 6 · 2023-03-28
Moshe-ship/bidi-guard
Scan code for invisible bidirectional Unicode characters (Trojan Source attack prevention, CVE-2021-42574)
★ 5 · 2026-04-04
rakib-nyc/nullorigin
Research-only AI watermark & provenance robustness toolkit: local reverse proxy (OpenAI/Anthropic/Gemini) + CLI stripping C2PA/EXIF/XMP, zero-width & homoglyph…
★ 4 · 2026-08-16
tin-z/solidity_CVE-2021-42574-POC
POC of CVE-2021-42574 for solidity and solc compiler
★ 3 · 2023-02-01
★ 1 · 2021-11-01
★ 1 · 2021-11-01
★ 1 · 2021-12-11
Fetching description from NVD…
Show 1 repositories
minanagehsalalma/zyxel-social-login-bypass-cve-2026-8508
Public writeup, PoC, and emulation materials for CVE-2026-8508 affecting Zyxel captive-portal social login.
★ 0 · 2026-08-16
Fetching description from NVD…
Show 1 repositories
minanagehsalalma/CVE-2026-6837-zyxel-export-cgi-command-injection
Public writeup, PoC, and emulation materials for CVE-2026-6837 affecting Zyxel export-cgi PKCS#12 export handling.
★ 3 · 2026-08-16
Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.