Fetching description from NVD…
Show 1 repositories
Reflected XSS vulnerability in MikroTik Hotspot login page
Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.
monitoring live11138 results
Fetching description from NVD…
Reflected XSS vulnerability in MikroTik Hotspot login page
Fetching description from NVD…
EasyStore Joomla Pre-Auth SQL Injection via filter_sortby Direction (CVE-2026-65761, CVSS 9.3)
Proof of Concept for CVE-2026-65761 - EasyStore Pro Unauthenticated SQL Injection via `filter_sortby`
Fetching description from NVD…
PoC exploit for Below privilege escalation (CVE-2025-27591) allowing local root access via symlink manipulation in world-writable log directory.
Fetching description from NVD…
Isolated regression and security-control lab for CVE-2026-59891 in @sigstore/oci
Fetching description from NVD…
Fetching description from NVD…
Wing FTP Server Remote Code Execution (RCE) Exploit (CVE-2025-47812)
Simple exploit for Wing FTP Server RCE (CVE-2025-47812) to run commands and get a reverse shell. For educational use only.
Wing FTP Server RCE via Lua Injection
CVE-2025-47812 POC
Unauthenticated remote code execution vulnerability in Wing FTP Server <= 7.4.3.
Fetching description from NVD…
exploit
CVE-2025-6019: udisks2 XFS Resize TOCTOU Privilege Escalation
Script-only privilege escalation chain using CVE-2025-6019 and UDisks2 (no filesystem image included).
Full BadUSB attack chain: keystroke-injection payload delivery, C2 client, privilege escalation (CVE-2025-6019), and systemd persistence on Linux.
Fetching description from NVD…
A PoC for CVE-2026-64725
Fetching description from NVD…
Exploit script for CVE-2020-7961
Security research on Liferay CE 7.0.3 GA4: pre-auth RCE as root (CVE-2020-7961 class) reproduced end-to-end, plus 16 more findings — 8+ with no known CVE. Agen…
Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services (JSONWS)
CVE-2020–7961 Mass exploit for Script Kiddies
Fetching description from NVD…
Exploit for cryptographic Issue vulnerability on IBERMATICA RPS [CVE-2023-3350]
Unsafe use of Python's eval() on server-received data in the vector_in() function in amazon-redshift-python-driver before 2.1.14 allows a rogue server or man-in-the-middle actor to execute arbitrary code on the client. To remediate this issue, users should upgrade to version 2.1.14.
Fetching description from NVD…
CVE-2026-53264 - Draft or Todo
Fetching description from NVD…
Security Advisory: Out-of-Bounds Read in facil.io MIME Parser leads to Server crash
Fetching description from NVD…
Security Advisory: Negative Chunk-Size Parsing Causes Memory Corruption in facil.io
Fetching description from NVD…
Security Advisory: Infinite Loop DoS in facil.io MIME Parser (Partial Boundary)
Fetching description from NVD…
Reproducer for CVE-2026-48203: Apache Camel camel-solr SolrParam./SolrField. header injection enabling Solr document-field injection and SSRF via the shards pa…
Fetching description from NVD…
CVE-2026-14856 TastyIgniter v4.3.0
Fetching description from NVD…
Covered CVEs: CVE-2026-28755, CVE-2026-42926, CVE-2026-9256, CVE-2026-42055, CVE-2026-42533
Fetching description from NVD…
Python Apache Killer (Range Header DoS CVE-2011-3192)
CVE-2011-3192 - Remote Apache DOS for Apache versions 1.3.x, 2.0.64 and below and 2.2.19 and below. Developed in 2011 by Antonius (ev1lut10n / w1sdom)
This Repository use to test Apache Killer (cve-2011-3192).
Fetching description from NVD…
CVE-2026-27577 - Draft or Todo
Fetching description from NVD…
Fetching description from NVD…
BlackLotus aka CVE-2023-24932 Detection/Remediation Scripts for Intune, ConfigMgr, and generic use
English translation
Standalone assessment and servicing for the Secure Boot 2011 to 2023 certificate rollover (CVE-2023-24932 / KB5025885). Assess-only by default; no dependencies…
Fetching description from NVD…
Proof of Concept CVE-2025-24990 (Agere Systems's driver)
CVE-2025-24990 Research writeup
Fetching description from NVD…
Reproducer for CVE-2026-48204: Apache Camel camel-mongodb-gridfs gridfs.* header injection overriding the GridFS operation (enumerate/read/delete files) from a…
Fetching description from NVD…
Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.