Every new exploit,
on the radar.

Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.

monitoring live

CVE-2026-40224

CVE-2026-105306

CVE-2023-5536

CVE-2026-84411

CVE-2026-108592

CVE-2026-107806

CVE-2026-106445

CVE-2026-104335

CVE-2026-103690

CVE-2026-102428

CVE-2025-9548

CVE-2025-69872

CVE-2025-20730

CVE-2021-42023

14 contacts in last 24h

11131CVEs tracked

26046PoC repositories

14New in 24h

362PoC updated in 7 days

filters

All New Fresh PoC Hot Multi PoC Critical High

11131 results

CVE-2026-9082

CRITICALMULTI PoC

CVSS 9.8 CRITICAL CWE-89 Published 2026-05-20 PoCs 12 ★ 23 Last push 2026-08-07 (2 months ago)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Drupal core allows SQL Injection. This issue affects Drupal core: from 8.9.0 before 10.4.10, from 10.5.0 before 10.5.10, from 10.6.0 before 10.6.9, from 11.0.0 before 11.1.10, from 11.2.0 before 11.2.12, from 11.3.0 before 11.3.10.

Top PoC: https://github.com/7h30th3r0n3/CVE-2026-9082-Drupal-PoC

Show 8 of 12 repositories

7h30th3r0n3/CVE-2026-9082-Drupal-PoC

Drupal Core PostgreSQL SQL Injection PoC - CVE-2026-9082. Ethical PoC for the Drupal vulnerability allowing anonymous SQL injection through the JSON:API module…

★ 23 · 2026-05-21

ambionics/cve-2026-9082-drupal-postgresql-rce

★ 11 · 2026-05-27

N45HT/drupal-cve-2026-9082-checker

Drupal CVE-2026-9082 Blind SQL Injection Checker

★ 8 · 2026-05-24

HORKimhab/CVE-2026-9082

CVE-2026-9082 | SA-CORE-2026-004

★ 2 · 2026-05-21

ridhinva/drupal-jsonapi-sqli-scanner

Scanner: CVE-2026-9082 Drupal PostgreSQL SQLi via JSON:API — Python scanner for unauthenticated SQLi leading to RCE (CISA KEV)

★ 2 · 2026-08-07

0xBlackash/CVE-2026-9082

CVE-2026-9082

★ 1 · 2026-06-04

ywh-jfellus/CVE-2026-9082

PoC for CVE-2026-9082 (Drupal SA-CORE-2026-004) Drupal Core SQLi

★ 1 · 2026-05-21

sourcecode347/CVE-2026-9082-Mass_Scanner

Mass Scanner For Drupal Exploit CVE-2026-9082

★ 1 · 2026-06-16

CVE-2026-1731

MULTI PoC

PoCs 5 ★ 37 Last push 2026-08-07 (2 months ago)

Fetching description from NVD…

Top PoC: https://github.com/win3zz/CVE-2026-1731

Show 5 repositories

win3zz/CVE-2026-1731

CVE-2026-1731 - Critical command injection vulnerability in BeyondTrust Remote Support and Privileged Remote Access due to unsafe Bash arithmetic evaluation in…

★ 37 · 2026-02-11

jakubie07/CVE-2026-1731

CVE-2026-1731 PoC

★ 6 · 2026-05-02

cybrdude/cve-2026-1731-scanner

Passive vulnerability scanner for CVE-2026-1731 — BeyondTrust RS/PRA pre-auth RCE (CVSS 9.9). Educational & defensive use only.

★ 4 · 2026-02-16

hex0user/CVE-2026-1731

CVE-2026-1731 — BeyondTrust Remote Code Execution Vulnerability

★ 1 · 2026-02-22

ridhinva/beyondtrust-rce-scanner

Scanner: CVE-2026-1731 BeyondTrust Remote Support Pre-auth RCE — Python checker for actively exploited vulnerability (CISA KEV)

★ 0 · 2026-08-07

CVE-2026-0300

MULTI PoC

PoCs 10 ★ 22 Last push 2026-08-07 (2 months ago)

Fetching description from NVD…

Top PoC: https://github.com/p3Nt3st3r-sTAr/CVE-2026-0300-POC

Show 8 of 10 repositories

p3Nt3st3r-sTAr/CVE-2026-0300-POC

★ 22 · 2026-05-07

matad0r-maghribi/CVE-2026-0300-PANOS

Security Research and Proof-of-Concept (PoC) for CVE-2026-0300 : Unauthenticated Remote Code Execution (RCE) in Palo Alto Networks PAN-OS User-ID Portal.

★ 4 · 2026-05-06

qassam-315/PAN-OS-User-ID-Buffer-Overflow-PoC

A research-grade Proof-of-Concept (PoC) for CVE-2026-0300, targeting the Buffer Overflow vulnerability in Palo Alto Networks PAN-OS User-ID™ Authentication Por…

★ 3 · 2026-05-06

ridhinva/panos-captive-portal-rce

Scanner: CVE-2026-0300 PAN-OS User-ID Captive Portal Buffer Overflow RCE — Python CLI for detecting actively exploited BOF vulnerability in Palo Alto firewalls…

★ 2 · 2026-08-07

mr-r3b00t/CVE-2026-0300

a honeypot for CVE-2026-0300

★ 1 · 2026-05-06

shizuku198411/CVE-2026-0300

PAN-OS CVE-2026-0300 Non-Destructive Exposure Survey Tool

★ 1 · 2026-05-06

0xBlackash/CVE-2026-0300

CVE-2026-0300

★ 1 · 2026-05-06

TailwindRG/cve-2026-0300-audit

Read-only audit tooling for CVE-2026-0300 (PAN-OS User-ID Authentication Portal exposure)

★ 0 · 2026-05-06

CVE-2026-55957

PoCs 1 ★ 0 Last push 2026-08-07 (2 months ago)

Fetching description from NVD…

Top PoC: https://github.com/mdvpat/CVE-2026-55957-PoC

Show 1 repositories

mdvpat/CVE-2026-55957-PoC

Reproducible Docker lab for the Apache Tomcat JNDIRealm GSSAPI authentication bypass

★ 0 · 2026-08-07

CVE-2025-68645

MULTI PoC

PoCs 7 ★ 3 Last push 2026-08-07 (2 months ago)

Fetching description from NVD…

Top PoC: https://github.com/MaxMnMl/zimbramail-CVE-2025-68645-poc

Show 7 repositories

MaxMnMl/zimbramail-CVE-2025-68645-poc

CVE-2025-68645 - A Local File Inclusion (LFI) vulnerability in the Webmail Classic UI of Zimbra Collaboration

★ 3 · 2026-01-04

codeb0ssx/CVE-2025-68645-PoC

Academic proof-of-concept demonstrating CVE-2025-68645 for authorized security research.

★ 2 · 2025-12-30

0xBlackash/CVE-2025-68645

CVE-2025-68645

★ 2 · 2026-04-24

HarisAidhin/Poc_CVE-2025-68645

Zimbra Path Traversal (CVE-2025-68645) - Unauthenticated file read vulnerability in Zimbra Collaboration Suite

★ 1 · 2026-05-06

faysalferdous/CVE-2025-68645-Exploiting-Zimbra-Webmail-LFI-Vulnerability

★ 0 · 2026-02-10

Crow5-oss/CVE-2025-68645

★ 0 · 2026-02-21

Ashwesker/Ashwesker-CVE-2025-68645

POC BLH Magelang CSIRT 2026 by babyrootkid

★ 0 · 2026-08-07

CVE-2026-41242

PoCs 2 ★ 0 Last push 2026-08-07 (2 months ago)

Fetching description from NVD…

Top PoC: https://github.com/4chech/CVE-2026-41242

Show 2 repositories

4chech/CVE-2026-41242

some simple node.js web app with PoC code for CVE-2026-41242

★ 0 · 2026-04-26

Giangdurian/CVE-2026-41242

★ 0 · 2026-08-07

CVE-2026-67822

PoCs 1 ★ 0 Last push 2026-08-07 (2 months ago)

Fetching description from NVD…

Top PoC: https://github.com/Hunt-Benito/go-without-bounds-cve-2026-67822-stack-overflow-in-tenda-w6-s-wifissidset

Show 1 repositories

Hunt-Benito/go-without-bounds-cve-2026-67822-stack-overflow-in-tenda-w6-s-wifissidset

★ 0 · 2026-08-07

CVE-2026-0049

PoCs 1 ★ 0 Last push 2026-08-07 (2 months ago)

Fetching description from NVD…

Top PoC: https://github.com/R3n3r0/CVE-2026-0049

Show 1 repositories

R3n3r0/CVE-2026-0049

★ 0 · 2026-08-07

CVE-2026-70638

PoCs 1 ★ 0 Last push 2026-08-07 (2 months ago)

Fetching description from NVD…

Top PoC: https://github.com/Hunt-Benito/one-multiply-too-many-cve-2026-70638-llama-cpp-android-jni-integer-overflow

Show 1 repositories

Hunt-Benito/one-multiply-too-many-cve-2026-70638-llama-cpp-android-jni-integer-overflow

★ 0 · 2026-08-07

CVE-2026-64640

PoCs 1 ★ 0 Last push 2026-08-07 (2 months ago)

Fetching description from NVD…

Top PoC: https://github.com/oscerd/CVE-2026-64640

Show 1 repositories

oscerd/CVE-2026-64640

Reproducer for CVE-2026-64640 — Apache Polaris Iceberg REST register/register-view vends storage credentials and reads an attacker-chosen metadata location bef…

★ 0 · 2026-08-07

CVE-2026-15430

PoCs 1 ★ 21 Last push 2026-08-07 (2 months ago)

Fetching description from NVD…

Top PoC: https://github.com/BlackSnufkin/AxHunter

Show 1 repositories

BlackSnufkin/AxHunter

PoCs for Wellbia XIGNCODE3 anti-cheat xhunter driver family - xhunter1.sys v2023.12.7.78 and xhunter2.sys v2026.6.1.192 (CVE-2026-15430, CVE-2026-3609).

★ 21 · 2026-08-07

CVE-2026-11961

PoCs 1 ★ 1 Last push 2026-08-07 (2 months ago)

Fetching description from NVD…

Top PoC: https://github.com/JohenLastGen-JLG/CVE-2026-11961

Show 1 repositories

JohenLastGen-JLG/CVE-2026-11961

CVE-2026-11961 — UserRegistration: WordPress User Registration <= 5.2.2 Privilege Escalation. Misconfigured Membership Roles → Unauthenticated Admin Creation →…

★ 1 · 2026-08-07

CVE-2024-24210

PoCs 1 ★ 1 Last push 2026-08-07 (2 months ago)

Fetching description from NVD…

Top PoC: https://github.com/ha6ker-hu/CVE-2024-24210

Show 1 repositories

ha6ker-hu/CVE-2024-24210

Security Research Report

★ 1 · 2026-08-07

CVE-2021-26708

PoCs 3 ★ 28 Last push 2026-08-07 (2 months ago)

Fetching description from NVD…

Top PoC: https://github.com/jordan9001/vsock_poc

Show 3 repositories

jordan9001/vsock_poc

Investigating the bug behind CVE-2021-26708

★ 28 · 2021-02-16

kungaocode/vulnerability-analysis-

Automated reproduction and analysis of CVE-2021-26708 — a use-after-free vulnerability in the Linux kernel's AF_VSOCK subsystem (v5.10.12). Includes PoC exploi…

★ 1 · 2026-08-07

azpema/CVE-2021-26708

★ 0 · 2021-06-12

CVE-2026-44613

PoCs 1 ★ 1 Last push 2026-08-07 (2 months ago)

Fetching description from NVD…

Top PoC: https://github.com/HORKimhab/CVE-2026-44613

Show 1 repositories

HORKimhab/CVE-2026-44613

CVE-2026-44613

★ 1 · 2026-08-07

CVE-2026-70559

PoCs 1 ★ 1 Last push 2026-08-07 (2 months ago)

Fetching description from NVD…

Top PoC: https://github.com/codeb0ssx/CVE-2026-70559-PoC

Show 1 repositories

codeb0ssx/CVE-2026-70559-PoC

CVE-2026-70559

★ 1 · 2026-08-07

CVE-2025-52464

PoCs 1 ★ 1 Last push 2026-08-06 (2 months ago)

Fetching description from NVD…

Top PoC: https://github.com/msdmehdipour/meshtastic-cve-2025-52464-poc

Show 1 repositories

msdmehdipour/meshtastic-cve-2025-52464-poc

Software-only proof of concept for CVE-2025-52464 in Meshtastic Direct Messages

★ 1 · 2026-08-06

CVE-2026-38053

PoCs 1 ★ 2 Last push 2026-08-06 (2 months ago)

Fetching description from NVD…

Top PoC: https://github.com/Crypte1/CVE-2026-38053---Remove-PPL

Show 1 repositories

Crypte1/CVE-2026-38053---Remove-PPL

BYOVD Remove PPL for 24H2 and 25H2

★ 2 · 2026-08-06

CVE-2024-6387

HOTMULTI PoC

PoCs 96 ★ 527 Last push 2026-08-06 (2 months ago)

Fetching description from NVD…

Top PoC: https://github.com/xaitax/CVE-2024-6387_Check

Show 8 of 96 repositories

xaitax/CVE-2024-6387_Check

CVE-2024-6387_Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH

★ 527 · 2026-05-29

zgzhang/cve-2024-6387-poc

a signal handler race condition in OpenSSH's server (sshd)

★ 497 · 2024-07-01

acrono/cve-2024-6387-poc

32-bit PoC for CVE-2024-6387 — mirror of the original 7etsuo/cve-2024-6387-poc

★ 376 · 2024-07-01

Karmakstylez/CVE-2024-6387

Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (CVE-2024-6387)

★ 196 · 2024-08-22

lflare/cve-2024-6387-poc

MIRROR of the original 32-bit PoC for CVE-2024-6387 "regreSSHion" by 7etsuo/cve-2024-6387-poc

★ 128 · 2024-07-25

l0n3m4n/CVE-2024-6387

PoC - Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (Scanner and Exploit)

★ 114 · 2024-07-05

filipi86/CVE-2024-6387-Vulnerability-Checker

This Python script checks for the CVE-2024-6387 vulnerability in OpenSSH servers. It supports multiple IP addresses, URLs, CIDR ranges, and ports. The script c…

★ 102 · 2024-07-10

xonoxitron/regreSSHion

CVE-2024-6387 (regreSSHion) Exploit (PoC), a vulnerability in OpenSSH's server (sshd) on glibc-based Linux systems.

★ 71 · 2024-07-02

CVE-2026-43626

PoCs 1 ★ 1 Last push 2026-08-06 (2 months ago)

Fetching description from NVD…

Top PoC: https://github.com/Vladimir-tokarev-cyera/llama-cpp-security-patches

Show 1 repositories

Vladimir-tokarev-cyera/llama-cpp-security-patches

Security patches for unpatched llama.cpp vulnerabilities (CVE-2026-43626 through CVE-2026-43632) — Cyera Research

★ 1 · 2026-08-06

CVE-2026-18649

PoCs 1 ★ 4 Last push 2026-08-06 (2 months ago)

Fetching description from NVD…

Top PoC: https://github.com/0xSemizzz/CVE-2026-18649

Show 1 repositories

0xSemizzz/CVE-2026-18649

Proof of concept for CVE-2026-18649, a remote denial of service vulnerability in GStreamer's H.264 RTP depayloader (rtph264depay).

★ 4 · 2026-08-06

CVE-2026-17543

PoCs 2 ★ 1 Last push 2026-08-06 (2 months ago)

Fetching description from NVD…

Top PoC: https://github.com/Hunt-Benito/e-is-for-exploit-cve-2026-17543-php-pgsql-sql-injection-backslash-breakout

Show 2 repositories

Hunt-Benito/e-is-for-exploit-cve-2026-17543-php-pgsql-sql-injection-backslash-breakout

★ 1 · 2026-08-06

pratham220/CVE-2026-17543-PHP-Exposure-Validator

Safe PowerShell validator for PHP CVE-2026-17543 exposure via HTTP headers and non-destructive login-form probes.

★ 0 · 2026-08-06

CVE-2025-8045

PoCs 1 ★ 7 Last push 2026-08-06 (2 months ago)

Fetching description from NVD…

Top PoC: https://github.com/kuzeyardabulut/CVE-2025-8045

Show 1 repositories

kuzeyardabulut/CVE-2025-8045

Dirty Pagetable Exploit for CVE-2025-8045

★ 7 · 2026-08-06

CVE-2026-70553

PoCs 1 ★ 1 Last push 2026-08-06 (2 months ago)

Fetching description from NVD…

Top PoC: https://github.com/woshidashabi1126/CVE-2026-70553-PoC

Show 1 repositories

woshidashabi1126/CVE-2026-70553-PoC

★ 1 · 2026-08-06

CVE-2026-56164

PoCs 2 ★ 12 Last push 2026-08-06 (2 months ago)

Fetching description from NVD…

Top PoC: https://github.com/sentinel-aidefense/CVE-2026-56164-EXP

Show 2 repositories

sentinel-aidefense/CVE-2026-56164-EXP

CVE-2026-56164 EOP Exploit

★ 12 · 2026-07-15

sam00/POC-CVE-2026-56164-exploit

CVE-2026-56164 is a critical missing-authentication vulnerability affecting on-premises Microsoft SharePoint Server. It allows unauthenticated, remote attacker…

★ 2 · 2026-08-06

Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.

Every new exploit,on the radar.

Every new exploit,
on the radar.