Every new exploit,
on the radar.

Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.

monitoring live
11134CVEs tracked
26046PoC repositories
6New in 24h
352PoC updated in 7 days
filters
All New Fresh PoC Hot Multi PoC Critical High

11134 results

PoCs 1 ★ 0 Last push 2026-08-01 (2 months, 1 week ago)

Fetching description from NVD…

Show 1 repositories
aj2108/CVE-2026-8239

CVE-2026-8239 is an Insecure Direct Object Reference (IDOR) vulnerability affecting Concrete CMS 9.5.0 and earlier.

★ 0 · 2026-08-01
PoCs 1 ★ 1 Last push 2026-08-01 (2 months, 1 week ago)

Fetching description from NVD…

Show 1 repositories
MinhHK68/CVE-2026-13152

CVE-2026-13152: Custom Fields Account Registration For WooCommerce Unauthenticated Privilege Escalation PoC & Advisory by Huynh Kien Minh (MinhHK).

★ 1 · 2026-08-01
PoCs 1 ★ 0 Last push 2026-07-31 (2 months, 1 week ago)

Fetching description from NVD…

Show 1 repositories
LazyTitan33/CVE-2026-67599_ClearOS_RCE

Authenticated Blind OS Command Injection in ClearOS

★ 0 · 2026-07-31
PoCs 1 ★ 0 Last push 2026-07-31 (2 months, 1 week ago)

Fetching description from NVD…

Show 1 repositories
byt3quester/CVE-2022-22706-poc
★ 0 · 2026-07-31
PoCs 1 ★ 0 Last push 2026-07-31 (2 months, 1 week ago)

Fetching description from NVD…

Show 1 repositories
PoCs 1 ★ 0 Last push 2026-07-31 (2 months, 1 week ago)

Fetching description from NVD…

Show 1 repositories
aj2108/CVE-2026-8347

CVE-2026-8347 is an Insecure Direct Object Reference (IDOR) combined with a wrong authorization level vulnerability in Concrete CMS versions 9.5.0 and earlier.…

★ 0 · 2026-07-31
PoCs 2 ★ 6 Last push 2026-07-31 (2 months, 1 week ago)

Fetching description from NVD…

Show 2 repositories
Nxploited/CVE-2026-47668

DbGate Unauthenticated Remote Code Execution

★ 6 · 2026-05-26
s-vx/CVE-2026-47668

Unauthenticated RCE in DBGate <= 7.1.8

★ 0 · 2026-07-31
PoCs 2 ★ 1 Last push 2026-07-31 (2 months, 1 week ago)

Fetching description from NVD…

Show 2 repositories
pssec-io/CVE-2026-41179

POC for CVE-2026-41179

★ 1 · 2026-06-28
s-vx/CVE-2026-41179

RCE in rclone

★ 0 · 2026-07-31
PoCs 1 ★ 2 Last push 2026-07-31 (2 months, 1 week ago)

Fetching description from NVD…

Show 1 repositories
runtimeverification/kernel-c-to-rust-spike

Hardening kernel C parsers via Rust rewrite + differential fuzzing + formal verification. First target: UVC (CVE-2024-53104).

★ 2 · 2026-07-31
PoCs 2 ★ 0 Last push 2026-07-31 (2 months, 1 week ago)

Fetching description from NVD…

Show 2 repositories
moisei-dev/go-dbmigrate

Fork of jfrog/go-dbmigrate with pgx/v5 upgrade (CVE-2026-32286)

★ 0 · 2026-04-15
slashid/baton-retool

SlashID fork of conductorone/baton-retool — pgx/v5 port (CVE-2026-32286, CVE-2026-41889); retire when upstream ships pgx/v5

★ 0 · 2026-07-31
PoCs 1 ★ 1 Last push 2026-07-31 (2 months, 1 week ago)

Fetching description from NVD…

Show 1 repositories
Hasan-Al-Hussein/android-workprofile-exploit

Controlled defensive analysis of CVE-2025-22442 work-profile provisioning, policy timing, and enterprise isolation.

★ 1 · 2026-07-31
PoCs 1 ★ 0 Last push 2026-07-31 (2 months, 1 week ago)

Fetching description from NVD…

Show 1 repositories
ilizavr/CVE-2022-24355

Tplink wr841 v10 rce exploit without authorisation

★ 0 · 2026-07-31
PoCs 1 ★ 1 Last push 2026-07-31 (2 months, 1 week ago)

Fetching description from NVD…

Show 1 repositories
ilizavr/CVE-2022-30024

Tplink wr841 v10 rce exploit

★ 1 · 2026-07-31
CVE-2020-11023
MULTI PoC
PoCs 6 ★ 4 Last push 2026-07-31 (2 months, 1 week ago)

Fetching description from NVD…

Show 6 repositories
Cybernegro/CVE-2020-11023

CVE-2020-11023 PoC for bug bounty.

★ 4 · 2024-01-03
honeyb33z/cve-2020-11023-scanner
★ 4 · 2025-01-31
Snorlyd/https-nj.gov---CVE-2020-11023

Vulnearability Report of the New Jersey official site

★ 1 · 2022-05-23
GarlicB/jquery35-local-agent

Offline jQuery CVE-2020-11023 remediation kit for legacy Spring/JSP - Node.js built-ins only (no npm, no internet)

★ 1 · 2026-07-31
andreassundstrom/cve-2020-11023-demonstration

Demonstration of CVE-2020-11023

★ 0 · 2024-04-13
asoka666/Cve-2020-11023
★ 0 · 2026-07-14
CVE-2021-26855
HOTMULTI PoC
PoCs 51 ★ 247 Last push 2026-07-31 (2 months, 1 week ago)

Fetching description from NVD…

Show 8 of 51 repositories
Flangvik/SharpProxyLogon

C# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode injection

★ 247 · 2021-03-31
hosch3n/ProxyVulns

[ProxyLogon] CVE-2021-26855 & CVE-2021-27065 Fixed RawIdentity Bug Exploit. [ProxyOracle] CVE-2021-31195 & CVE-2021-31196 Exploit Chains. [ProxyShell] CVE-2021…

★ 175 · 2022-10-21
dwisiswant0/proxylogscan

A fast tool to mass scan for a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin (…

★ 166 · 2022-03-02
p0wershe11/ProxyLogon

ProxyLogon(CVE-2021-26855+CVE-2021-27065) Exchange Server RCE(SSRF->GetWebShell)

★ 123 · 2021-03-17
cert-lv/exchange_webshell_detection

Detect webshells dropped on Microsoft Exchange servers exploited through "proxylogon" group of vulnerabilites (CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, …

★ 98 · 2021-03-16
h4x0r-dz/CVE-2021-26855
★ 98 · 2021-03-09
hackerschoice/CVE-2021-26855

PoC of proxylogon chain SSRF(CVE-2021-26855) to write file by testanull, censored by github

★ 59 · 2021-03-11
alt3kx/CVE-2021-26855_PoC
★ 53 · 2021-03-12
PoCs 2 ★ 10 Last push 2026-07-31 (2 months, 1 week ago)

Fetching description from NVD…

Show 2 repositories
ZephrFish/CVE-2021-28480_HoneyPoC3

DO NOT RUN THIS.

★ 10 · 2026-07-31
Threonic/CVE-2021-28480
★ 0 · 2022-03-30
CVE-2021-22986
MULTI PoC
PoCs 15 ★ 91 Last push 2026-07-31 (2 months, 1 week ago)

Fetching description from NVD…

Show 8 of 15 repositories
Al1ex/CVE-2021-22986

CVE-2021-22986 & F5 BIG-IP RCE

★ 91 · 2021-04-03
dorkerdevil/CVE-2021-22986-Poc

This is a Poc for BIGIP iControl unauth RCE

★ 51 · 2021-03-17
S1xHcL/f5_rce_poc

cve-2021-22986 f5 rce 漏洞批量检测 poc

★ 26 · 2021-03-27
Tas9er/CVE-2021-22986

Code By:Tas9er / F5 BIG-IP 远程命令执行漏洞

★ 13 · 2021-03-29
west9b/F5-BIG-IP-POC

CVE-2020-5902 CVE-2021-22986 CVE-2022-1388 POC集合

★ 10 · 2022-07-30
yaunsky/CVE-202122986-EXP

F5 BIG-IP远程代码执行;cve-2021-22986,批量检测;命令执行利用

★ 8 · 2021-03-26
safesword/F5_RCE

CVE-2021-22986 F5 BIG-IP iControl 命令执行漏洞

★ 4 · 2021-03-21
ZephrFish/CVE-2021-22986_Check

CVE-2021-22986 Checker Script in Python3

★ 3 · 2026-07-31
PoCs 3 ★ 47 Last push 2026-07-31 (2 months, 1 week ago)

Fetching description from NVD…

Show 3 repositories
ZephrFish/CVE-2021-22893_HoneyPoC2

DO NOT RUN THIS.

★ 47 · 2026-07-31
orangmuda/CVE-2021-22893

Proof On Concept — Pulse Secure CVE-2021-22893

★ 7 · 2022-02-24
MRLEE123456/CVE-2021-22893

Pulse Connect Secure RCE Vulnerability (CVE-2021-22893)

★ 0 · 2021-04-21
CVE-2020-16898
HOTMULTI PoC
PoCs 15 ★ 209 Last push 2026-07-31 (2 months, 1 week ago)

Fetching description from NVD…

Show 8 of 15 repositories
advanced-threat-research/CVE-2020-16898

CVE-2020-16898 (Bad Neighbor) Microsoft Windows TCP/IP Vulnerability Detection Logic and Rule

★ 209 · 2020-10-26
ZephrFish/CVE-2020-16898

HoneyPoC 2.0: Proof-of-Concept (PoC) script to exploit IPv6 (CVE-2020-16898).

★ 22 · 2026-07-31
0xeb-bp/cve-2020-16898

PoC BSOD for CVE-2020-16898 (badneighbor)

★ 22 · 2020-10-16
momika233/CVE-2020-16898-exp
★ 17 · 2020-10-17
komomon/CVE-2020-16898--EXP-POC

CVE-2020-16898 Windows TCP/IP远程代码执行漏洞 EXP&POC

★ 12 · 2020-10-28
corelight/CVE-2020-16898

A network detection package for CVE-2020-16898 (Windows TCP/IP Remote Code Execution Vulnerability)

★ 9 · 2024-09-03
jiansiting/cve-2020-16898

PoC BSOD for CVE-2020-16898

★ 9 · 2020-10-17
komomon/CVE-2020-16898-EXP-POC

CVE-2020-16898 Windows TCP/IP远程代码执行漏洞 EXP&POC

★ 5 · 2020-10-28
CVE-2020-1350
HOTMULTI PoC
PoCs 15 ★ 280 Last push 2026-07-31 (2 months, 1 week ago)

Fetching description from NVD…

Show 8 of 15 repositories
ZephrFish/CVE-2020-1350_HoneyPoC

HoneyPoC: Proof-of-Concept (PoC) script to exploit SIGRed (CVE-2020-1350). Achieves Domain Admin on Domain Controllers running Windows Server 2000 up to Window…

★ 280 · 2026-07-31
maxpl0it/CVE-2020-1350-DoS

A denial-of-service proof-of-concept for CVE-2020-1350

★ 238 · 2020-07-17
psc4re/NSE-scripts

NSE scripts to detect CVE-2020-1350 SIGRED and CVE-2020-0796 SMBGHOST, CVE-2021-21972, proxyshell, CVE-2021-34473

★ 162 · 2021-08-16
captainGeech42/CVE-2020-1350

Denial of Service PoC for CVE-2020-1350 (SIGRed)

★ 18 · 2020-07-16
T13nn3s/CVE-2020-1350

This Powershell Script is checking if your server is vulnerable for the CVE-2020-1350 Remote Code Execution flaw in the Windows DNS Service

★ 15 · 2023-04-01
connormcgarr/CVE-2020-1350

CVE-2020-1350 Proof-of-Concept

★ 11 · 2020-07-27
corelight/SIGRed

Detection of attempts to exploit Microsoft Windows DNS server via CVE-2020-1350 (AKA SIGRed)

★ 9 · 2020-07-20
zoomerxsec/Fake_CVE-2020-1350

Fake exploit tool, designed to rickroll users attempting to actually exploit.

★ 7 · 2020-07-19
PoCs 1 ★ 0 Last push 2026-07-30 (2 months, 1 week ago)

Fetching description from NVD…

Show 1 repositories
shinthink/CVE-2026-65883

Aimy Captcha-Less Form Guard Joomla Component PHP Object Injection RCE. clfgd XOR keystream recovery + unserialize(). CVSS 10.0 | CWE-502 | aimy_captcha-less_f…

★ 0 · 2026-07-30
PoCs 1 ★ 0 Last push 2026-07-30 (2 months, 1 week ago)

Fetching description from NVD…

Show 1 repositories
andree554/CVE-2022-24903-Heap-based-buffer-overflow-Hand-On-Lab

CVE-2022-24903 Heap-based buffer overflow

★ 0 · 2026-07-30
PoCs 2 ★ 2 Last push 2026-07-30 (2 months, 1 week ago)

Fetching description from NVD…

Show 2 repositories
bluedragonsecurity/CVE-2005-0575-knet-exploit

CVE-2005-0575 - KNet Web Server 1.04b Remote Buffer Overflow SEH Exploit for x86 Windows XP SP3, this exploit needs some adjustment ! edit the code before run …

★ 2 · 2026-07-30
MayaOfVeil/CVE-2005-0575

Exploit for KNet 1.04b Web Server Buffer Overflow SEH

★ 0 · 2024-01-18
CVE-2025-64446
MULTI PoC
PoCs 13 ★ 33 Last push 2026-07-30 (2 months, 1 week ago)

Fetching description from NVD…

Show 8 of 13 repositories
sensepost/CVE-2025-64446

A scanner for the FortiNet vulnerability CVE-2025-64446

★ 33 · 2025-11-18
soltanali0/CVE-2025-64446-Exploit
★ 14 · 2025-11-15
fevar54/CVE-2025-64446-PoC---FortiWeb-Path-Traversal

PoC de CVE-2025-64446: path traversal a RCE en Fortinet FortiWeb. Solo uso educativo.

★ 7 · 2025-11-14
verylazytech/CVE-2025-64446

CVE-2025-64446 - A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, …

★ 3 · 2025-11-19
CerberusMrXi/FortiWeb-cve-2025-64446-RCE-exploit

Security research tool for FortiWeb CVE-2025-64446 vulnerability. Automated exploitation framework with advanced logging, real-time metrics, proxy debugging, a…

★ 2 · 2026-07-30
AN5I/cve-2025-64446-fortiweb-exploit

Security research tool for detecting and testing CVE-2025-64446 (FortiWeb Path Traversal RCE vulnerability)

★ 1 · 2025-11-21
D3crypT0r/CVE-2025-64446

FortiWeb Unauthenticated RCE via Path Traversal & CGI Auth Bypass

★ 0 · 2025-11-17
PoCs 3 ★ 26 Last push 2026-07-30 (2 months, 1 week ago)

Fetching description from NVD…

Show 3 repositories
mr-r3b00t/NotProxyShellHunter

Check for NotProxyShell CVE-2022-40140 & CVE-2022-41082

★ 26 · 2022-10-02
ZephrFish/NotProxyShellScanner

Python implementation for NotProxyShell aka CVE-2022-40140 & CVE-2022-41082

★ 7 · 2026-07-30
ipsBruno/CVE-2022-40140-SCANNER

A Shodan hunter for CVE-2022-40140

★ 2 · 2022-11-13
< Prev Page 75 / 446 Next >

Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.