Fetching description from NVD…
Top PoC: https://github.com/George0Papasotiriou/CVE-2026-3030-Prototype-Pollution-in-JSON-Merge-Patch
Every new exploit,
on the radar.
Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.
monitoring liveCVE-2026-91136
CVE-2026-6475
CVE-2026-103889
CVE-2026-40224
CVE-2026-105306
CVE-2023-5536
6 contacts in last 24h
11134CVEs tracked
26046PoC repositories
6New in 24h
359PoC updated in 7 days
filters
11134 results
Fetching description from NVD…
Show 1 repositories
★ 0 · 2026-08-03
Fetching description from NVD…
Show 1 repositories
Fetching description from NVD…
Show 1 repositories
Fetching description from NVD…
Show 1 repositories
Fetching description from NVD…
Top PoC: https://github.com/George0Papasotiriou/CVE-2026-7777-Rust-Use-After-Free-in-Unsafe-Web-Server
Show 1 repositories
Version 3.0.7 of the Securly Chrome Extension downloads config.json over HTTP and compiles server-provided patterns as JavaScript regular expressions via new RegExp() without complexity validation. An on-path attacker can inject specific patterns to cause catastrophic backtracking, resulting in denial of service on all browsing.
Top PoC: https://github.com/George0Papasotiriou/CVE-2026-8888-Printer-Firmware-Unsigned-Update-via-HTTP
Show 1 repositories
Use after free in Input in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Show 1 repositories
Fetching description from NVD…
Top PoC: https://github.com/George0Papasotiriou/CVE-2026-1111-Smart-Contract-Cross-Function-Reentrancy
Show 1 repositories
Fetching description from NVD…
Top PoC: https://github.com/George0Papasotiriou/CVE-2026-2222-MQTT-Broker-CONNECT-Packet-Heap-Overflow
Show 1 repositories
Fetching description from NVD…
Show 1 repositories
Fetching description from NVD…
Top PoC: https://github.com/George0Papasotiriou/CVE-2026-4444-JWT-Algorithm-Confusion-via-kid-Injection
Show 1 repositories
Fetching description from NVD…
Show 1 repositories
Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Top PoC: https://github.com/George0Papasotiriou/CVE-2026-9998-Insecure-Deserialization-in-Blockchain-Oracle
Show 1 repositories
Fetching description from NVD…
Show 1 repositories
Fetching description from NVD…
Top PoC: https://github.com/George0Papasotiriou/CVE-2026-3456-OAuth2-PKCE-Race-Condition-Account-Takeover-
Show 1 repositories
Fetching description from NVD…
Top PoC: https://github.com/George0Papasotiriou/CVE-2026-5432-GraphQL-Batching-Alias-Confusion-SQL-Injection
Show 1 repositories
Fetching description from NVD…
Show 1 repositories
Fetching description from NVD…
Show 1 repositories
Fetching description from NVD…
Show 1 repositories
Fetching description from NVD…
Top PoC: https://github.com/George0Papasotiriou/CVE-2026-2828-WebGPU-Cross-Origin-Pixel-Stealing-via-Timing
Show 1 repositories
Fetching description from NVD…
Show 2 repositories
JoakimBulow/CVE-2026-1337
CVE-2026-1337 - Neo4j - Log Injection
★ 5 · 2026-02-05
George0Papasotiriou/CVE-2026-1337-AI-Coding-Assistant-Prompt-Injection-to-Sandbox-Escape
A prompt injection in a code‑review bot that executes AI‑generated fixes in a sandbox. The sandbox uses a blacklist to prevent dangerous commands, but a polygl…
★ 0 · 2026-08-03
Fetching description from NVD…
Show 7 repositories
jeffaf/cve-2026-32746
CVE-2026-32746 - GNU InetUtils telnetd LINEMODE SLC Buffer Overflow PoC (pre-auth RCE, CVSS 9.8)
★ 30 · 2026-03-20
★ 10 · 2026-03-19
MonkeySeC-sys/Kangaroo
Kangaroo is a exploit built on CVE-2026-32746. i made this for security researchers, IT professionals, DevOps. so they can understand it better. DO NOT USE TH…
★ 2 · 2026-08-02
★ 0 · 2026-03-20
★ 0 · 2026-03-20
★ 0 · 2026-03-20
★ 0 · 2026-05-09
Fetching description from NVD…
Show 1 repositories
theopaid/CVE-2026-66421-OpenClaw-Dashboard-Stored-XSS-via-lastMessage-Session-Field
Security Advisory: Stored Cross-Site Scripting Via Agent Messages Leading To Session Token Theft (openclaw-dashboard)
★ 0 · 2026-08-02
Fetching description from NVD…
Show 1 repositories
theopaid/CVE-2026-66418-OpenClaw-Dashboard-v3.0.0-Stored-XSS-via-Failed-Login-Username-Field
Security Advisory: Unauthenticated Stored Cross-Site Scripting Leading To Administrator Account Takeover (openclaw-dashboard)
★ 1 · 2026-08-02
Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.