Every new exploit,
on the radar.

Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.

monitoring live
11131CVEs tracked
26046PoC repositories
14New in 24h
363PoC updated in 7 days
filters
All New Fresh PoC Hot Multi PoC Critical High

11131 results

PoCs 3 ★ 11 Last push 2026-08-13 (1 month, 4 weeks ago)

Fetching description from NVD…

Show 3 repositories
z1ph1us/MilkSad-Mnemonic-Generator

This tool generates BIP-39 mnemonic phrases derived from Unix timestamps, exploring the 'Milk Sad' vulnerability's implications (CVE-2023-39910)

★ 11 · 2025-06-04
demining/RAMnesia-Attack

RAMnesia Attack: A Scientific Investigation of WireTap Threats to Bitcoin Infrastructure, Hardware Vulnerabilities (CVE-2025-6202, CVE-2023-39910), and Cryptan…

★ 1 · 2026-02-07
Xaxis/bitcoin-security

Educational study of Bitcoin key entropy: weak-RNG wallet enumeration (Milk Sad / CVE-2023-39910 class) vs. the infeasibility of brute-forcing a good key.

★ 0 · 2026-08-13
PoCs 2 ★ 0 Last push 2026-08-13 (1 month, 4 weeks ago)

Fetching description from NVD…

Show 2 repositories
HORKimhab/CVE-2026-4020

CVE-2026-4020 - Draft

★ 0 · 2026-06-22
faizdotid/CVE-2026-4020
★ 0 · 2026-08-13
PoCs 1 ★ 0 Last push 2026-08-13 (1 month, 4 weeks ago)

Fetching description from NVD…

Show 1 repositories
HORKimhab/CVE-2026-53413

CVE-2026-53413 - Draft or TODO

★ 0 · 2026-08-13
PoCs 1 ★ 1 Last push 2026-08-13 (1 month, 4 weeks ago)

Fetching description from NVD…

Show 1 repositories
judgedbykira/CVE-2026-25938-FUXA-Unauthenticated-RCE

An explanation and PoC to exploit CVE-2026-25938 Unauthenticated RCE Vulnerability on FUXA

★ 1 · 2026-08-13
PoCs 1 ★ 0 Last push 2026-08-13 (1 month, 4 weeks ago)

Fetching description from NVD…

Show 1 repositories
CVSS 8.8 HIGH CWE-269 Published 2026-05-28 PoCs 2 ★ 0 Last push 2026-08-13 (1 month, 4 weeks ago)

Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Show 2 repositories
PoCs 1 ★ 0 Last push 2026-08-13 (1 month, 4 weeks ago)

Fetching description from NVD…

Show 1 repositories
jobusa755-a11y/CVE-2026-65640-

WordPress Core <= 7.0.3 - Authenticated (Author+) Remote Code Execution via Malicious File Upload

★ 0 · 2026-08-13
PoCs 1 ★ 1 Last push 2026-08-13 (1 month, 4 weeks ago)

Fetching description from NVD…

Show 1 repositories
nullwhisper/CVE-2026-14282

GoDAM WordPress plugin <= 1.12.2 unauthenticated file upload RCE (CVE-2026-14282)

★ 1 · 2026-08-13
PoCs 1 ★ 0 Last push 2026-08-13 (1 month, 4 weeks ago)

Fetching description from NVD…

Show 1 repositories
nullwhisper/CVE-2026-14840
★ 0 · 2026-08-13
PoCs 1 ★ 2 Last push 2026-08-12 (1 month, 4 weeks ago)

Fetching description from NVD…

Show 1 repositories
aramosf/CVE-2026-24031

CVE-2026-24031 Dovecot 2.4.0/3.1.0 SQL authentication bypass (auth bypass + user enumeration) PoC

★ 2 · 2026-08-12
PoCs 1 ★ 0 Last push 2026-08-12 (1 month, 4 weeks ago)

Fetching description from NVD…

Show 1 repositories
kagancapar/CVE-2026-54984

CVE-2026-54984 / ZDI-26-543: Windows ICC file parsing out-of-bounds write (CWE-122, CVSS 7.8)

★ 0 · 2026-08-12
PoCs 1 ★ 1 Last push 2026-08-12 (1 month, 4 weeks ago)

Fetching description from NVD…

Show 1 repositories
Boreas37/CVE-2026-73034-PoC

CVE-2026-73034 — DB-GPT v0.8.1 unauth path traversal → arbitrary file write as root via user-id header. Verified + fix diff

★ 1 · 2026-08-12
PoCs 1 ★ 4 Last push 2026-08-12 (1 month, 4 weeks ago)

Fetching description from NVD…

Show 1 repositories
Boreas37/CVE-2026-33267-PoC

CVE-2026-33267 — Apache Traffic Server @ header internal-metadata spoof (CVSS 10.0). Verified: @ headers leak to plugins on 10.1.2, stripped on 10.1.4

★ 4 · 2026-08-12
PoCs 1 ★ 0 Last push 2026-08-12 (1 month, 4 weeks ago)

Fetching description from NVD…

Show 1 repositories
guard-wait/CVE-2026-64563_EXP

关于CVE-2026-64563未完全验证的一种利用思路

★ 0 · 2026-08-12
PoCs 3 ★ 21 Last push 2026-08-12 (1 month, 4 weeks ago)

Fetching description from NVD…

Show 3 repositories
masasron/CopyEscape-CVE-2026-17106

PoC repository for the blog post CopyEscape: Taking Over Docker Hosts with docker cp

★ 21 · 2026-08-09
HackSpeak/CVE-2026-17106

CopyEscape (CVE-2026-17106) docker cp container-to-host arbitrary file write PoC mirror — Imperva Ron Masas, MIT; for authorized security testing

★ 1 · 2026-08-11
686f6c61/POC-CopyEscape-CVE-2026-17106

PoC funcional de CVE-2026-17106 (CopyEscape): carrera TOCTOU en docker cp que permite escritura arbitraria en el host Docker. Laboratorio Docker + monitor inot…

★ 1 · 2026-08-12
PoCs 1 ★ 10 Last push 2026-08-12 (1 month, 4 weeks ago)

Fetching description from NVD…

Show 1 repositories
aramosf/CVE-2026-68398

CVE-2026-68398 Ubuntu PPPoL2TP use-after-free local privilege escalation

★ 10 · 2026-08-12
PoCs 1 ★ 13 Last push 2026-08-12 (1 month, 4 weeks ago)

Fetching description from NVD…

Show 1 repositories
QM4RS/CVE-2026-0075

CVE-2026-0075 — Android ContactsProvider information disclosure via JSON error side-channel, including PoC, root-cause analysis, and patch details.

★ 13 · 2026-08-12
PoCs 1 ★ 1 Last push 2026-08-12 (1 month, 4 weeks ago)

Fetching description from NVD…

Show 1 repositories
SneakyNachos/CVE-2026-2766-but-with-wasm

CVE-2026-2766, but with wasm

★ 1 · 2026-08-12
PoCs 1 ★ 0 Last push 2026-08-12 (1 month, 4 weeks ago)

Fetching description from NVD…

Show 1 repositories
leoelsolh/CVE-2026-69263

MCP environment-variable blocklist bypass leads to unauthenticated RCE in Flowise 3.1.1

★ 0 · 2026-08-12
PoCs 1 ★ 0 Last push 2026-08-12 (1 month, 4 weeks ago)

Fetching description from NVD…

Show 1 repositories
AC8999/CVE-2026-27344

Missing Authorization in inseriswiss inseri core inseri-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects inseri …

★ 0 · 2026-08-12
PoCs 1 ★ 0 Last push 2026-08-12 (1 month, 4 weeks ago)

Fetching description from NVD…

Show 1 repositories
IlhomjonR/CVE-2026-70376

CVE-2026-70376 — Pluck CMS site-wide CSRF (fail-open Referer check) → RCE via double-extension upload. CWE-352/434, CVSS 8.0. Advisory + PoC by @IlhomjonR.

★ 0 · 2026-08-12
PoCs 1 ★ 0 Last push 2026-08-12 (1 month, 4 weeks ago)

Fetching description from NVD…

Show 1 repositories
PoCs 3 ★ 9 Last push 2026-08-12 (1 month, 4 weeks ago)

Fetching description from NVD…

Show 3 repositories
hnytgl/CVE-2026-42588

CVE-2026-42588 - Apache ActiveMQ Jolokia 远程代码执行漏洞利用 (RCE Exploit)

★ 3 · 2026-06-09
gentleman567/POC

Store vulnerability POC files including CVE-2026-42588 Spring RCE xml payload

★ 0 · 2026-08-12
PoCs 2 ★ 6 Last push 2026-08-12 (1 month, 4 weeks ago)

Fetching description from NVD…

Show 2 repositories
thewhiteh4t/cve-2026-27483

MindsDB Path Traversal to RCE PoC

★ 6 · 2026-03-07
nabhan-mohy/cve-2026-27483-lab

A containerized enterprise-style lab for researching and defending against CVE-2026-27483.

★ 1 · 2026-08-12
CVE-2016-6662
MULTI PoC
PoCs 6 ★ 28 Last push 2026-08-12 (1 month, 4 weeks ago)

Fetching description from NVD…

Show 6 repositories
MAYASEVEN/CVE-2016-6662

From SQL injection to root shell with CVE-2016-6662 by MaYaSeVeN

★ 28 · 2017-07-22
Ashrafdev/MySQL-Remote-Root-Code-Execution

0ldSQL_MySQL_RCE_exploit.py (ver. 1.0) (CVE-2016-6662) MySQL Remote Root Code Execution / Privesc PoC Exploit For testing purposes only. Do no harm.

★ 9 · 2026-08-12
meersjo/ansible-mysql-cve-2016-6662

Simple ansible playbook to patch mysql servers against CVE-2016-6662

★ 1 · 2016-09-19
boompig/cve-2016-6662
★ 1 · 2017-03-20
konstantin-kelemen/mysqld_safe-CVE-2016-6662-patch

MySQL server CVE-2016-6662 patch playbook

★ 0 · 2016-09-15
KosukeShimofuji/CVE-2016-6662

research CVE-2016-6662

★ 0 · 2016-09-16
< Prev Page 62 / 446 Next >

Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.