Fetching description from NVD…
Every new exploit,
on the radar.
Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.
monitoring live11131 results
Fetching description from NVD…
Show 3 repositories
Proof of Concept for CVE-2026-23745: Arbitrary File Overwrite vulnerability in node-tar (versions < 7.5.3).
Mirror of isaacs/node-tar pinned at 8bb83f7 — the commit before the CVE-2026-23745 fix. Demo target for autonomous vulnerability patching. Do not install from …
Fetching description from NVD…
Show 8 of 9 repositories
PoC exploit for GLPI - Command injection using a third-party library script
Unauthenticated RCE in GLPI 10.0.2
Modified for GLPI Offsec Lab: call_user_func, array_map, passthru
Script in Ruby for the CVE-2022-35914 - RCE in GLPI
Fetching description from NVD…
Show 8 of 10 repositories
A self-contained testbed for Django CVE-2025-64459. Demonstrates QuerySet.filter() parameter injection via dictionary expansion using Docker.
Vulnerability: SQL Injection via QuerySet and Q() keyword argument unpacking. CVE ID: CVE-2025-64459 Severity: Critical (CVSS 9.1) Affected Versions: Django 5.…
check if vulnerable python-django version to CVE-2025-64459 bug
CVE-2025-64459-hunter
demo application showing off SQL Injection exploit in django 5.2.7
Fetching description from NVD…
Show 8 repositories
Weblogic CVE-2023-21839 RCE (无需Java依赖一键RCE)
CVE-2024-20931, this is the bypass of the patch of CVE-2023-21839
CVE-2023-21839工具
CVE-2023-21839 Python版本
Reproducible Docker lab for CVE-2024-21182 — Oracle WebLogic T3/IIOP OpaqueReference JNDI injection → unauthenticated RCE (CVE-2023-21839 patch-bypass family).…
A testing tool for CobaltStrike-RCE:CVE-2022-39197; Weblogic-RCE:CVE-2023-21839; MinIO:CVE-2023-28432
Fetching description from NVD…
Show 1 repositories
Fetching description from NVD…
Show 1 repositories
CVE-2026-53361 AF_UNIX GC vs MSG_PEEK use-after-free container escape
Fetching description from NVD…
Show 1 repositories
RustDesk < 1.4.9 - Missing Session-Scope Enforcement Allows Out-of-Scope Control Message Injection
Fetching description from NVD…
Show 1 repositories
Found a 0-Day in Ghidra: Shared Project File Became a Code Execution Vector
Fetching description from NVD…
Show 1 repositories
Persistent XSS in Typemill CMS: the Markdown parser lets javascript: URIs through unfiltered. Writeup + PoC.
Fetching description from NVD…
Show 5 repositories
Detect, assess, and respond to supply chain attacks across npm/yarn and Python (pip/poetry/uv). Claude Code skill + standalone scripts. Built during axios RAT …
Starlette Host-Header URL Confusion Lab (X41-2026-002) - CVE-2026-48710
Detection scanner for CVE-2026-48710 - Host-header auth bypass in Starlette/FastAPI
OXDEV-77637 repro fixture: uv workspace whose transitive CVE (starlette 0.25.0 / CVE-2026-48710) is dropped when the lean clone omits workspace-member pyprojec…
CVE-2026-48710漏洞验证代码
Fetching description from NVD…
Show 3 repositories
Python program to dump all the databases, exploiting NagiosXI sqli vulnerability
Fixes broken syntax in the POC, automates the API_Token retrieval, stores the token as a variable and pipes into the fixed POC.
Fetching description from NVD…
Show 1 repositories
AegisAgent - Runtime security gateway & privilege governance for AI agents. Cryptographic tool-call provenance (CoreBreak/CVE-2026-18830/18236/64650 defense), …
Fetching description from NVD…
Show 1 repositories
Fetching description from NVD…
Show 1 repositories
Fetching description from NVD…
Show 1 repositories
RAGFlow 三洞审计工具 (CVE-2026-28797 / CVE-2026-24770 / CVE-2025-69286)
Fetching description from NVD…
Show 1 repositories
RAGFlow 三洞审计工具 (CVE-2026-28797 / CVE-2026-24770 / CVE-2025-69286)
Fetching description from NVD…
Show 1 repositories
spring retry 1.3.x fix with niche toolkit for CVE-2026-41710
Fetching description from NVD…
Show 1 repositories
CVE-2026-2764, but with wasm
Fetching description from NVD…
Show 3 repositories
A Pwn2Own 2024 SpiderMonkey JIT Bug: From Integer Range Inconsistency to Bound Check Elimination then RCE
Reproducing CVE-2024-29943 for Windows, based on https://github.com/bjrjk/CVE-2024-29943
CVE-2024-29943, but with wasm
Fetching description from NVD…
Show 1 repositories
Rediscovered CVE-2020-25279, a critical vulnerability in the Shannon baseband used in Samsung Exynos chipsets
Fetching description from NVD…
Show 8 of 19 repositories
CVE-2023-0386在ubuntu22.04上的提权
CVE-2023-0386 analysis and Exp
Vulnerabilities Exploitation On Ubuntu 22.04
非常简单的CVE-2023-0386's exp and analysis.Use c and sh.
CVE-2023-0386 EXP
Fetching description from NVD…
Show 1 repositories
CVE-2026-5201: Heap-based buffer overflow in gdk-pixbuf JPEG loader (CWE-122, CVSS 7.5)
Fetching description from NVD…
Show 1 repositories
CVE-2021-47881: Local stack buffer overflow in dataSIMS Avionics ARINC 664-1 v4.5.3 (CWE-121)
Fetching description from NVD…
Show 1 repositories
CVE-2026-34348 - Draft or TODO
Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.