Fetching description from NVD…
Show 1 repositories
CuteeCat/CVE-2026-73633
CVE-2026-73633（S2-072）概念验证代码
★ 0 · 2026-08-16
Every new exploit,
on the radar.
Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.
monitoring liveCVE-2026-84411
CVE-2026-108592
CVE-2026-107806
CVE-2026-106445
CVE-2026-104335
CVE-2026-103690
CVE-2026-102428
CVE-2025-9548
CVE-2025-69872
CVE-2025-20730
CVE-2021-42023
11 contacts in last 24h
11128CVEs tracked
26034PoC repositories
11New in 24h
352PoC updated in 7 days
filters
11128 results
Fetching description from NVD…
Show 1 repositories
StackOverflowExcept1on/CVE-2021-36393
Error-based blind SQL injection with bit-shifting approach for Moodle 3.10.4
★ 4 · 2026-08-16
Fetching description from NVD…
Show 2 repositories
Boreas37/CVE-2026-73678-PoC
CVE-2026-73678 — MindsDB Minds Platform unauthenticated RCE via scratchpad exec (CVSS 10.0). Verified end-to-end with real LLM
★ 1 · 2026-08-16
Fetching description from NVD…
Show 1 repositories
TheMalwareGuardian/CVE-2026-25250
Analysis and exploit for CVE-2026-25250, a Secure Boot bypass in Horizon DataSys Reboot Restore where shdloader.efi loads Shield.efi without verification.
★ 1 · 2026-08-16
Fetching description from NVD…
Show 2 repositories
NikolajSchlej/Hydroph0bia
Binaries, drivers, PoCs and other stuff on Hydroph0bia vulnerability (CVE-2025-4275)
★ 42 · 2025-06-20
TheMalwareGuardian/CVE-2025-4275
Analysis and exploitation of CVE-2025-4275 (Hydr0ph0bia), a Secure Boot trust-chain weakness where firmware variables are used to introduce attacker-controlled…
★ 0 · 2026-08-16
Fetching description from NVD…
Top PoC: https://github.com/m4rm0k/talkingBen
Show 2 repositories
m4rm0k/talkingBen
planned to be a root kit that is ingrained inside of the UEFI bootloader, but first does priviliage escalation and will be constantly update with probably a c2…
★ 0 · 2025-10-28
TheMalwareGuardian/CVE-2025-3052
Research on CVE-2025-3052, an Insyde firmware vulnerability that exposes an arbitrary write primitive capable of modifying security-critical pointers.
★ 0 · 2026-08-16
Fetching description from NVD…
Show 1 repositories
★ 0 · 2026-08-16
Fetching description from NVD…
Show 2 repositories
jasonbernier/CVE-2025-5781
CVE-2025-5781 FreePBX Exploit POC
★ 0 · 2026-08-11
iamrajkumar1995/cve-2025-5781_FreePBX
In August 2025, a critical vulnerability was disclosed in the FreePBX Endpoint module. CVE-2025–57819 allows an unauthenticated attacker to exploit SQL injecti…
★ 0 · 2026-08-16
Fetching description from NVD…
Show 3 repositories
fr4nkxixi/CVE-2022-24481-POC
POC for CLFS CVE-2022-24481
★ 14 · 2023-05-14
★ 0 · 2026-02-25
★ 0 · 2026-08-16
Fetching description from NVD…
Show 1 repositories
SaiTeja-Erukude/CVE-2026-47103-python-statemachine-rce
Python StateMachine 3.0.0 < 3.2.0 RCE via unsafe SCXML <data expr> evaluation and Python eval() injection.
★ 0 · 2026-08-16
uproot dynamically generates Python class source code from ROOT TStreamerInfo records in a file and compiles it at runtime. Some file-controlled streamer metadata fields (for example, streamer element names) are interpolated into the generated Python source without safe quoting via repr() or the !r format specifier. An attacker who can supply a crafted ROOT file can place Python expression-breaking content into a streamer metadata field. When uproot generates and invokes the corresponding reader method, the injected Python expression is evaluated in the context of the process opening the file, resulting in arbitrary Python code execution in applications that open or process attacker-controlled ROOT files with affected uproot code paths.
Show 1 repositories
SaiTeja-Erukude/CVE-2026-9147-uproot-rce
uproot <= 5.7.4 code injection via unsafe Python source generation from ROOT TStreamerInfo metadata.
★ 0 · 2026-08-16
Fetching description from NVD…
Show 1 repositories
daemoncibsec/flar3ad
POC of CVE-2026-51031 for arbitrary local file read
★ 0 · 2026-08-16
Fetching description from NVD…
Show 2 repositories
Boreas37/CVE-2026-17544-PoC
CVE-2026-17544 — PHP bcmath bccomp() OOB write (stack smashing). Verified: crash on 8.4.23/8.5.8, fixed in 8.4.24. GHSA-x692-q9x7-8c3f
★ 6 · 2026-08-12
r2qa/CVE-2026-17544
CVE-2026-17544: PHP bcmath OOB write → universal memory-only RCE & disable_functions/open_basedir bypass. Offset-free runtime resolver. Verified on PHP 8.4.x…
★ 0 · 2026-08-15
Fetching description from NVD…
Show 1 repositories
Skorpion96/CVE-2026-40000
A poc for a vulnerability in ZTE File Manager (zte.com.cn.filer) which allows to read arbitrary files from other apps as the privileges of this file manager
★ 1 · 2026-08-15
Fetching description from NVD…
Show 1 repositories
SaiTeja-Erukude/CVE-2026-47117-openmed-rce
OpenMed < 1.5.2 unauthenticated RCE via PII privacy-filter model loading and trust_remote_code=True
★ 0 · 2026-08-15
Fetching description from NVD…
Show 3 repositories
tuo4n8/CVE-2023-22047
Leveraging arbitrary file read to RCE on Oracle PeopleSoft
★ 12 · 2025-04-02
0xTerror/CVE-2023-22047---Oracle-PeopleSoft-LFI
CVE-2023-22047 is a critical unauthenticated Local File Inclusion (LFI) vulnerability in Oracle PeopleSoft Enterprise PeopleTools. This exploit allows an attac…
★ 0 · 2026-08-15
0xTerror/CVE-2023-22047-Oracle-PeopleSoft-LFI
CVE-2023-22047 is a critical unauthenticated Local File Inclusion (LFI) vulnerability in Oracle PeopleSoft Enterprise PeopleTools. This exploit allows an attac…
★ 0 · 2026-08-15
Casdoor versions 2.362.0 and earlier contain a vulnerability that allows an attacker to bypass authentication by supplying an arbitrary signing certificate. The buildSpCertificateStore function extracts the X.509 certificate directly from the incoming SAMLResponse instead of using the trusted pre-configured Identity Provider certificate, allowing an attacker to forge assertions signed with an attacker-controlled key.
Show 2 repositories
★ 0 · 2026-08-03
Kimdir01/CVE-2026-9090-poc
PoC for CVE-2026-9090 — Casdoor SAML signature bypass (CWE-347). Reproduction-only; coordinated via CERT/CC VU#780781.
★ 0 · 2026-08-15
Fetching description from NVD…
Show 1 repositories
Alixploit22/CVE-2026-6440
mencari sebuah kerentanan, wodpres dan mengungah shell di kerentanan wodpres tersebut
★ 0 · 2026-08-15
Fetching description from NVD…
Show 1 repositories
dinosn/cve-2026-71362-magento-lab
One-command Docker lab reproducing CVE-2026-71362 (Adobe Commerce / Magento Open Source customer-session identity-switch account takeover, APSB26-92, CVSS 9.1)…
★ 5 · 2026-08-15
Fetching description from NVD…
Show 1 repositories
★ 0 · 2026-08-15
Fetching description from NVD…
Show 4 repositories
Chocapikk/CVE-2024-45519
Zimbra - Remote Command Execution (CVE-2024-45519)
★ 141 · 2025-04-06
★ 42 · 2024-09-28
sec13b/CVE-2024-45519
Zimbra CVE-2024-45519
★ 0 · 2025-03-08
lionels-cyber/CVE-2024-45519-Zimbra-Real-Fix
Zimbra CVE-2024-45519 real fix - Official patch is incomplete
★ 0 · 2026-08-15
Fetching description from NVD…
Show 1 repositories
★ 0 · 2026-08-15
PaperCut NG/MF contains an observable timing discrepancy in its authentication component. An unauthenticated remote attacker can exploit this vulnerability to perform username enumeration by measuring response times during login attempts. The system executes a password hash comparison only when a valid account is supplied, creating a measurable timing oracle that reveals account existence.
Show 1 repositories
H4zaz/CVE-2026-8794
Username Enumeration via Authentication Timing Side-Channel in PaperCut NG
★ 0 · 2026-08-15
PaperCut NG/MF does not properly restrict excessive authentication attempts within its login component. An unauthenticated remote attacker can exploit this vulnerability to perform unrestricted brute-force or credential-stuffing attacks without triggering account lockout or rate-limiting mechanisms in some configurations.
Show 1 repositories
H4zaz/CVE-2026-8793
Responsible disclosure write-ups for CVE-2026-8793 - PaperCut NG 25.0.11
★ 0 · 2026-08-15
Fetching description from NVD…
Show 3 repositories
4minx/CVE-2026-14266
CVE-2026-14266 - XZ Heap Buffer Overflow PoC Generator for 7-Zip
★ 4 · 2026-08-15
liyuxuan504-byte/CVE-2026-14266
7-Zip XZ Decoder Heap Buffer Overflow - Full analysis, root cause, PoC, and RCE exploitation roadmap
★ 3 · 2026-07-25
★ 0 · 2026-07-17
Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.