Every new exploit,
on the radar.
Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.
monitoring live
CVE-2026-91136
CVE-2026-6475
CVE-2026-103889
CVE-2026-40224
CVE-2026-105306
CVE-2023-5536
6 contacts in last 24h
11134CVEs tracked
26046PoC repositories
6New in 24h
354PoC updated in 7 days
filters
11134 results
PoCs 27
★ 1484
Last push 2026-08-02 (2 months, 1 week ago)
Fetching description from NVD…
Show 8 of 27 repositories
Schira4396/VcenterKiller
一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webshell，命令执行或者上传公钥使用SSH免密…
★ 1484 · 2024-04-25
psc4re/NSE-scripts
NSE scripts to detect CVE-2020-1350 SIGRED and CVE-2020-0796 SMBGHOST, CVE-2021-21972, proxyshell, CVE-2021-34473
★ 162 · 2021-08-16
CVSS 6.3 MEDIUM
CWE-79
Published 2026-05-28
PoCs 1
★ 0
Last push 2026-08-02 (2 months, 1 week ago)
A stored cross-site scripting (XSS) vulnerability exists in the notification panel of CTI Transmute in versions prior to the patched release. Notification messages containing user-controlled convert names were rendered in the notification bell dropdown using innerHTML without adequate sanitization. An attacker able to create or influence a convert name that is included in a notification could inject arbitrary JavaScript, which would execute in the browser of an authenticated user when they opened the notification panel. Successful exploitation could allow the attacker to perform actions in the victim's session or access information available to the application in the browser context. The issue was remediated by constructing notification elements through DOM methods and assigning notification message content via textContent instead of innerHTML. This vulnerability was only present on a development branch.
Show 1 repositories
aj2108/CVE-2026-9806
CVE-2026-9806 is a Stored Cross-Site Scripting (Stored XSS) vulnerability affecting CTI Transmute versions prior to the patched release.
★ 0 · 2026-08-02
PoCs 2
★ 2
Last push 2026-08-02 (2 months, 1 week ago)
Fetching description from NVD…
Show 2 repositories
PoCs 2
★ 1
Last push 2026-08-02 (2 months, 1 week ago)
Fetching description from NVD…
Show 2 repositories
j3r1ch0123/CVE-2024-40422
Found this on exploit-db, decided to make my own for practice. This exploit will search out the passwd file and print the contents on a vulnerable system.
★ 1 · 2024-08-06
alpernae/CVE-2024-40422
Python implementation/PoC for CVE-2024-40422. Exploits a critical directory traversal vulnerability in Devika v1's /api/get-browser-snapshot endpoint to read a…
★ 0 · 2026-08-02
CVSS 7.6 HIGH
CWE-79
Published 2026-05-29
PoCs 1
★ 0
Last push 2026-08-02 (2 months, 1 week ago)
A stored Cross-Site Scripting (XSS) vulnerability exists in the Projects component of Mautic 7. When displaying project tags and popovers on administrative detail views (such as campaigns, emails, or forms), user-supplied project names are rendered without proper sanitization. An authenticated user with permissions to create or edit projects can exploit this to inject malicious script payloads. When an administrative user views an entity associated with a compromised project and hovers over its tag, the injected script executes within the context of their active browser session. This could allow an attacker to perform administrative actions on behalf of the victim, alter system configurations, or exfiltrate sensitive data.
Show 1 repositories
aj2108/CVE-2026-9809
CVE-2026-9809 is a Stored Cross-Site Scripting (Stored XSS) vulnerability affecting Mautic 7 (versions 7.0.0 through 7.1.1).
★ 0 · 2026-08-02
CVSS 5.4 MEDIUM
CWE-79
Published 2026-05-29
PoCs 1
★ 0
Last push 2026-08-02 (2 months, 1 week ago)
A stored Cross-Site Scripting (XSS) vulnerability exists in the project selector component of Mautic 7. When rendering selection menus for associating projects with system entities, the application fails to sanitize project names returned via AJAX before injecting them into the DOM as option fields. An authenticated user with permissions to create projects can exploit this to store a malicious script payload in the project's name. When another administrative user subsequently opens an entity editor containing the project selector, the injected script executes within the context of their active browser session. This could allow an attacker to hijack the session, perform unauthorized state coordination, or access organizational data within the dashboard.
Show 1 repositories
aj2108/CVE-2026-9811
CVE-2026-9811 is a Stored Cross-Site Scripting (Stored XSS) vulnerability affecting Mautic 7 (versions 7.0.0 through 7.1.1).
★ 0 · 2026-08-02
PoCs 1
★ 2
Last push 2026-08-02 (2 months, 1 week ago)
Fetching description from NVD…
Show 1 repositories
BridgerAlderson/CVE-2026-58424
A flaw in Gitea Open Source Git Server’s approval‑gate logic allows a pull request that originates from a permanent fork to merge without satisfying the reposi…
★ 2 · 2026-08-02
PoCs 2
★ 6
Last push 2026-08-02 (2 months, 1 week ago)
Fetching description from NVD…
Show 2 repositories
PoCs 2
★ 0
Last push 2026-08-02 (2 months, 1 week ago)
Fetching description from NVD…
Show 2 repositories
ClemaX/Gitea-Forgejo-CVE-2025-68937
Directory traversal in Gitea and Forgejo's repository‑template processing allows remote authenticated attackers to process arbitrary files on the filesystem, l…
★ 0 · 2026-02-19
Scratchappy/CVE-2025-68937
Automated PoC exploit for CVE-2025-68937 — Gitea/Forgejo Template Symlink RCE. Any authenticated user can get a shell as the git service user.
★ 0 · 2026-08-02
PoCs 26
★ 559
Last push 2026-08-01 (2 months, 1 week ago)
Fetching description from NVD…
Show 8 of 26 repositories
wmasday/HTC
Hack The CCTV | DVRs; Credentials Exposed | CVE-2018-9995
★ 3 · 2023-07-27
PoCs 1
★ 1
Last push 2026-08-01 (2 months, 1 week ago)
Fetching description from NVD…
Show 1 repositories
CVSS 9.2 CRITICAL
CWE-122
Published 2026-05-22
PoCs 4
★ 3
Last push 2026-08-01 (2 months, 1 week ago)
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression (PCRE) captures (for example, ^/((.*))$) and a replacement string that references multiple such captures (for example, $1$2) in a redirect or arguments context. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Show 4 repositories
PoCs 1
★ 0
Last push 2026-08-01 (2 months, 1 week ago)
Fetching description from NVD…
Show 1 repositories
CVSS 7.1 HIGH
CWE-79
Published 2026-07-20
PoCs 1
★ 0
Last push 2026-08-01 (2 months, 1 week ago)
The Tag Groups is the Advanced Way to Display Your Taxonomy Terms WordPress plugin before 2.2.0 does not properly escape one of its AJAX parameters before reflecting it in the response body served with an HTML content type, allowing unauthenticated attackers to execute arbitrary JavaScript in the browser of a logged-in user with `edit_pages` capability (Editor or higher) who is tricked into following a crafted link.
Show 1 repositories
PoCs 1
★ 1
Last push 2026-08-01 (2 months, 1 week ago)
Fetching description from NVD…
Show 1 repositories
0xmrma/CVE-2026-5061
Consul Template validated where a symlink pointed during template evaluation, but its later dependency fetch read the original path. Retargeting the link betwe…
★ 1 · 2026-08-01
PoCs 1
★ 0
Last push 2026-08-01 (2 months, 1 week ago)
Fetching description from NVD…
Show 1 repositories
0xmrma/CVE-2026-14361
Consul Template's writeToFile helper opened an operator-supplied destination directly and followed linked path components, allowing rendered output to escape t…
★ 0 · 2026-08-01
PoCs 1
★ 0
Last push 2026-08-01 (2 months, 1 week ago)
Fetching description from NVD…
Show 1 repositories
PoCs 55
★ 47
Last push 2026-08-01 (2 months, 1 week ago)
Fetching description from NVD…
Show 8 of 55 repositories
un9nplayer/CVE-2024-24919
This repository contains a proof-of-concept (PoC) exploit for CVE-2024-24919, a critical vulnerability discovered in Check Point SVN. The vulnerability allows …
★ 16 · 2024-06-05
PoCs 1
★ 0
Last push 2026-08-01 (2 months, 1 week ago)
Fetching description from NVD…
Show 1 repositories
PoCs 1
★ 0
Last push 2026-08-01 (2 months, 1 week ago)
Fetching description from NVD…
Show 1 repositories
PoCs 1
★ 0
Last push 2026-08-01 (2 months, 1 week ago)
Fetching description from NVD…
Show 1 repositories
7h30th3r0n3/CVE-2026-53625-GLPI-PoC
GLPI Privilege Escalation via authtype Manipulation PoC - CVE-2026-53625. Ethical PoC for the GLPI vulnerability allowing a Technician to take full control of …
★ 0 · 2026-08-01
PoCs 1
★ 0
Last push 2026-08-01 (2 months, 1 week ago)
Fetching description from NVD…
Show 1 repositories
aj2108/CVE-2026-8237
CVE-2026-8237 is an Insecure Direct Object Reference (IDOR) vulnerability caused by missing authorization checks in Concrete CMS 9.5.0 and earlier.
★ 0 · 2026-08-01
PoCs 1
★ 0
Last push 2026-08-01 (2 months, 1 week ago)
Fetching description from NVD…
Show 1 repositories
PoCs 1
★ 2
Last push 2026-08-01 (2 months, 1 week ago)
Fetching description from NVD…
Show 1 repositories
PoCs 1
★ 0
Last push 2026-08-01 (2 months, 1 week ago)
Fetching description from NVD…
Show 1 repositories
Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.