Every new exploit,
on the radar.

Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.

monitoring live
11131CVEs tracked
26046PoC repositories
14New in 24h
363PoC updated in 7 days
filters
All New Fresh PoC Hot Multi PoC Critical High

11131 results

PoCs 1 ★ 0 Last push 2026-08-11 (2 months ago)

Fetching description from NVD…

Show 1 repositories
1amUnvalid/CVE-2025-10951
★ 0 · 2026-08-11
PoCs 3 ★ 23 Last push 2026-08-11 (2 months ago)

Fetching description from NVD…

Show 3 repositories
Jvr2022/CVE-2026-23745

Proof of Concept for CVE-2026-23745: Arbitrary File Overwrite vulnerability in node-tar (versions < 7.5.3).

★ 23 · 2026-01-17
OndrejDrapalik/node-tar-cve-demo

Mirror of isaacs/node-tar pinned at 8bb83f7 — the commit before the CVE-2026-23745 fix. Demo target for autonomous vulnerability patching. Do not install from …

★ 1 · 2026-08-11
CVE-2022-35914
MULTI PoC
PoCs 9 ★ 52 Last push 2026-08-11 (2 months ago)

Fetching description from NVD…

Show 8 of 9 repositories
cosad3s/CVE-2022-35914-poc
★ 52 · 2024-01-02
senderend/CVE-2022-35914

PoC exploit for GLPI - Command injection using a third-party library script

★ 4 · 2024-10-17
Lzer0Kx01/CVE-2022-35914
★ 2 · 2022-10-09
0xGabe/CVE-2022-35914

Unauthenticated RCE in GLPI 10.0.2

★ 2 · 2022-11-06
noxlumens/CVE-2022-35914_poc

Modified for GLPI Offsec Lab: call_user_func, array_map, passthru

★ 2 · 2024-08-25
6E6L6F/CVE-2022-35914
★ 1 · 2022-10-12
Johnermac/CVE-2022-35914

Script in Ruby for the CVE-2022-35914 - RCE in GLPI

★ 0 · 2023-03-07
btar1gan/exploit_CVE-2022-35914
★ 0 · 2024-09-20
CVE-2025-64459
MULTI PoC
PoCs 10 ★ 2 Last push 2026-08-11 (2 months ago)

Fetching description from NVD…

Show 8 of 10 repositories
omarkurt/django-connector-CVE-2025-64459-testbed

A self-contained testbed for Django CVE-2025-64459. Demonstrates QuerySet.filter() parameter injection via dictionary expansion using Docker.

★ 2 · 2025-11-21
0xCyberstan/CVE-2025-64459-Poc

Vulnerability: SQL Injection via QuerySet and Q() keyword argument unpacking. CVE ID: CVE-2025-64459 Severity: Critical (CVSS 9.1) Affected Versions: Django 5.…

★ 2 · 2025-12-01
nunpa/CVE-2025-64459

check if vulnerable python-django version to CVE-2025-64459 bug

★ 1 · 2025-11-13
Z3YR0xX/CVE-2025-64459
★ 0 · 2025-12-05
purehate/CVE-2025-64459-hunter

CVE-2025-64459-hunter

★ 0 · 2026-02-15
joshualent/django-cve-2025-64459

demo application showing off SQL Injection exploit in django 5.2.7

★ 0 · 2026-06-23
CVE-2023-21839
HOTMULTI PoC
PoCs 8 ★ 240 Last push 2026-08-11 (2 months ago)

Fetching description from NVD…

Show 8 repositories
DXask88MA/Weblogic-CVE-2023-21839
★ 240 · 2023-02-26
ASkyeye/CVE-2023-21839

Weblogic CVE-2023-21839 RCE (无需Java依赖一键RCE)

★ 116 · 2026-08-11
dinosn/CVE-2024-20931

CVE-2024-20931, this is the bypass of the patch of CVE-2023-21839

★ 61 · 2024-02-06
Firebasky/CVE-2023-21839

CVE-2023-21839工具

★ 26 · 2023-03-11
houqe/POC_CVE-2023-21839

CVE-2023-21839 Python版本

★ 19 · 2023-04-21
dinosn/CVE-2024-21182

Reproducible Docker lab for CVE-2024-21182 — Oracle WebLogic T3/IIOP OpaqueReference JNDI injection → unauthenticated RCE (CVE-2023-21839 patch-bypass family).…

★ 3 · 2026-06-02
Romanc9/Gui-poc-test

A testing tool for CobaltStrike-RCE:CVE-2022-39197; Weblogic-RCE:CVE-2023-21839; MinIO:CVE-2023-28432

★ 2 · 2023-12-05
PoCs 1 ★ 0 Last push 2026-08-11 (2 months ago)

Fetching description from NVD…

Show 1 repositories
PoCs 1 ★ 26 Last push 2026-08-11 (2 months ago)

Fetching description from NVD…

Show 1 repositories
sgkdev/bad_garbage

CVE-2026-53361 AF_UNIX GC vs MSG_PEEK use-after-free container escape

★ 26 · 2026-08-11
PoCs 1 ★ 1 Last push 2026-08-11 (2 months ago)

Fetching description from NVD…

Show 1 repositories
sn0x-sharma/CVE-2026-57850

RustDesk < 1.4.9 - Missing Session-Scope Enforcement Allows Out-of-Scope Control Message Injection

★ 1 · 2026-08-11
PoCs 1 ★ 1 Last push 2026-08-11 (2 months ago)

Fetching description from NVD…

Show 1 repositories
sn0x-sharma/CVE-2026-18718

Found a 0-Day in Ghidra: Shared Project File Became a Code Execution Vector

★ 1 · 2026-08-11
PoCs 1 ★ 2 Last push 2026-08-11 (2 months ago)

Fetching description from NVD…

Show 1 repositories
sn0x-sharma/CVE-2026-44401

Persistent XSS in Typemill CMS: the Markdown parser lets javascript: URIs through unfiltered. Writeup + PoC.

★ 2 · 2026-08-11
CVE-2026-48710
MULTI PoC
PoCs 5 ★ 3 Last push 2026-08-11 (2 months ago)

Fetching description from NVD…

Show 5 repositories
eris-ths/supply-chain-guard

Detect, assess, and respond to supply chain attacks across npm/yarn and Python (pip/poetry/uv). Claude Code skill + standalone scripts. Built during axios RAT …

★ 3 · 2026-07-02
xtremebeing/starlette-host-header-lab

Starlette Host-Header URL Confusion Lab (X41-2026-002) - CVE-2026-48710

★ 1 · 2026-05-27
Bhanunamikaze/BadHost-CVE-2026-48710-Exploit

Detection scanner for CVE-2026-48710 - Host-header auth bypass in Starlette/FastAPI

★ 1 · 2026-05-29
sb-ox/repro-OXDEV-77637-uv-workspace

OXDEV-77637 repro fixture: uv workspace whose transitive CVE (starlette 0.25.0 / CVE-2026-48710) is dropped when the lean clone omits workspace-member pyprojec…

★ 0 · 2026-08-03
CuteeCat/CVE-2026-48710

CVE-2026-48710漏洞验证代码

★ 0 · 2026-08-11
PoCs 3 ★ 1 Last push 2026-08-11 (2 months ago)

Fetching description from NVD…

Show 3 repositories
Hamibubu/CVE-2023-48084

Python program to dump all the databases, exploiting NagiosXI sqli vulnerability

★ 1 · 2024-03-01
bucketcat/CVE-2023-48084

Fixes broken syntax in the POC, automates the API_Token retrieval, stores the token as a variable and pipes into the fixed POC.

★ 0 · 2024-03-23
MettHK/CVE-2023-48084-Revised
★ 0 · 2026-08-11
PoCs 1 ★ 0 Last push 2026-08-11 (2 months ago)

Fetching description from NVD…

Show 1 repositories
huzjie/aegisagent

AegisAgent - Runtime security gateway & privilege governance for AI agents. Cryptographic tool-call provenance (CoreBreak/CVE-2026-18830/18236/64650 defense), …

★ 0 · 2026-08-11
PoCs 1 ★ 0 Last push 2026-08-11 (2 months ago)

Fetching description from NVD…

Show 1 repositories
PoCs 1 ★ 0 Last push 2026-08-11 (2 months ago)

Fetching description from NVD…

Show 1 repositories
LazyBear8372/CVE-2023-41898_Lab
★ 0 · 2026-08-11
PoCs 1 ★ 1 Last push 2026-08-11 (2 months ago)

Fetching description from NVD…

Show 1 repositories
qianlijaingshan/ragflow-audit

RAGFlow 三洞审计工具 (CVE-2026-28797 / CVE-2026-24770 / CVE-2025-69286)

★ 1 · 2026-08-11
PoCs 1 ★ 1 Last push 2026-08-11 (2 months ago)

Fetching description from NVD…

Show 1 repositories
qianlijaingshan/ragflow-audit

RAGFlow 三洞审计工具 (CVE-2026-28797 / CVE-2026-24770 / CVE-2025-69286)

★ 1 · 2026-08-11
PoCs 1 ★ 0 Last push 2026-08-11 (2 months ago)

Fetching description from NVD…

Show 1 repositories
NicheToolkit/spring-retry-toolkit

spring retry 1.3.x fix with niche toolkit for CVE-2026-41710

★ 0 · 2026-08-11
PoCs 1 ★ 1 Last push 2026-08-11 (2 months ago)

Fetching description from NVD…

Show 1 repositories
SneakyNachos/CVE-2026-2764-but-with-wasm

CVE-2026-2764, but with wasm

★ 1 · 2026-08-11
PoCs 3 ★ 98 Last push 2026-08-11 (2 months ago)

Fetching description from NVD…

Show 3 repositories
bjrjk/CVE-2024-29943

A Pwn2Own 2024 SpiderMonkey JIT Bug: From Integer Range Inconsistency to Bound Check Elimination then RCE

★ 98 · 2025-02-12
seadragnol/CVE-2024-29943

Reproducing CVE-2024-29943 for Windows, based on https://github.com/bjrjk/CVE-2024-29943

★ 2 · 2025-11-25
SneakyNachos/CVE-2024-29943-but-with-wasm

CVE-2024-29943, but with wasm

★ 1 · 2026-08-11
PoCs 1 ★ 0 Last push 2026-08-10 (2 months ago)

Fetching description from NVD…

Show 1 repositories
Gimminse/Firmware-analysis

Rediscovered CVE-2020-25279, a critical vulnerability in the Shannon baseband used in Samsung Exynos chipsets

★ 0 · 2026-08-10
CVE-2023-0386
HOTMULTI PoC
PoCs 19 ★ 417 Last push 2026-08-10 (2 months ago)

Fetching description from NVD…

Show 8 of 19 repositories
xkaneiki/CVE-2023-0386

CVE-2023-0386在ubuntu22.04上的提权

★ 417 · 2023-06-13
chenaotian/CVE-2023-0386

CVE-2023-0386 analysis and Exp

★ 123 · 2023-05-06
sxlmnwb/CVE-2023-0386

Vulnerabilities Exploitation On Ubuntu 22.04

★ 56 · 2023-05-16
puckiestyle/CVE-2023-0386
★ 22 · 2023-12-23
Fanxiaoyao66/CVE-2023-0386

非常简单的CVE-2023-0386's exp and analysis.Use c and sh.

★ 21 · 2023-06-28
veritas501/CVE-2023-0386
★ 10 · 2023-04-20
P4x1s/CVE-2023-0386

CVE-2023-0386 EXP

★ 4 · 2023-05-08
PoCs 1 ★ 13 Last push 2026-08-10 (2 months ago)

Fetching description from NVD…

Show 1 repositories
kagancapar/CVE-2026-5201

CVE-2026-5201: Heap-based buffer overflow in gdk-pixbuf JPEG loader (CWE-122, CVSS 7.5)

★ 13 · 2026-08-10
PoCs 1 ★ 0 Last push 2026-08-10 (2 months ago)

Fetching description from NVD…

Show 1 repositories
kagancapar/CVE-2021-47881

CVE-2021-47881: Local stack buffer overflow in dataSIMS Avionics ARINC 664-1 v4.5.3 (CWE-121)

★ 0 · 2026-08-10
PoCs 1 ★ 0 Last push 2026-08-10 (2 months ago)

Fetching description from NVD…

Show 1 repositories
HORKimhab/CVE-2026-34348

CVE-2026-34348 - Draft or TODO

★ 0 · 2026-08-10
< Prev Page 63 / 446 Next >

Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.