Every new exploit,
on the radar.

Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.

monitoring live
11138CVEs tracked
26048PoC repositories
10New in 24h
360PoC updated in 7 days
filters
All New Fresh PoC Hot Multi PoC Critical High

11138 results

PoCs 1 ★ 0 Last push 2026-07-28 (2 months, 1 week ago)

Fetching description from NVD…

Show 1 repositories
praksokchea/CVE-2025-6563

Reflected XSS vulnerability in MikroTik Hotspot login page

★ 0 · 2026-07-28
PoCs 2 ★ 1 Last push 2026-07-28 (2 months, 2 weeks ago)

Fetching description from NVD…

Show 2 repositories
shinthink/CVE-2026-65761

EasyStore Joomla Pre-Auth SQL Injection via filter_sortby Direction (CVE-2026-65761, CVSS 9.3)

★ 1 · 2026-07-24
ywh-jfellus/CVE-2026-65761

Proof of Concept for CVE-2026-65761 - EasyStore Pro Unauthenticated SQL Injection via `filter_sortby`

★ 0 · 2026-07-28
PoCs 1 ★ 2 Last push 2026-07-28 (2 months, 2 weeks ago)

Fetching description from NVD…

Show 1 repositories
Diabl0xE/CVE-2025-27519

PoC exploit for Below privilege escalation (CVE-2025-27591) allowing local root access via symlink manipulation in world-writable log directory.

★ 2 · 2026-07-28
PoCs 1 ★ 0 Last push 2026-07-28 (2 months, 2 weeks ago)

Fetching description from NVD…

Show 1 repositories
gyubin02/cve-2026-59891-control-lab

Isolated regression and security-control lab for CVE-2026-59891 in @sigstore/oci

★ 0 · 2026-07-28
PoCs 1 ★ 0 Last push 2026-07-28 (2 months, 2 weeks ago)

Fetching description from NVD…

Show 1 repositories
0xdak/CVE-2025-71389_exploit
★ 0 · 2026-07-28
CVE-2025-47812
MULTI PoC
PoCs 18 ★ 54 Last push 2026-07-28 (2 months, 2 weeks ago)

Fetching description from NVD…

Show 8 of 18 repositories
4m3rr0r/CVE-2025-47812-poc

Wing FTP Server Remote Code Execution (RCE) Exploit (CVE-2025-47812)

★ 54 · 2025-07-14
0xcan1337/CVE-2025-47812-poC

Simple exploit for Wing FTP Server RCE (CVE-2025-47812) to run commands and get a reverse shell. For educational use only.

★ 13 · 2025-07-01
0xgh057r3c0n/CVE-2025-47812

Wing FTP Server RCE via Lua Injection

★ 3 · 2025-07-02
r0otk3r/CVE-2025-47812
★ 2 · 2025-07-27
shadowgit30/CVE-2025-47812

CVE-2025-47812 POC

★ 2 · 2026-02-18
estebanzarate/CVE-2025-47812-Wing-FTP-Server-7.4.3-Unauthenticated-RCE-PoC

Unauthenticated remote code execution vulnerability in Wing FTP Server <= 7.4.3.

★ 2 · 2026-02-19
blindma1den/CVE-2025-47812
★ 1 · 2025-07-17
0xjuarez/CVE-2025-47812
★ 1 · 2026-02-24
CVE-2025-6019
MULTI PoC
PoCs 11 ★ 70 Last push 2026-07-28 (2 months, 2 weeks ago)

Fetching description from NVD…

Show 8 of 11 repositories
And-oss/CVE-2025-6019-exploit

exploit

★ 4 · 2025-06-23
neko205-mx/CVE-2025-6019_Exploit
★ 3 · 2025-06-29
JM00NJ/CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation

CVE-2025-6019: udisks2 XFS Resize TOCTOU Privilege Escalation

★ 3 · 2026-07-20
symphony2colour/CVE-2025-6019-udisks-lpe-no-image

Script-only privilege escalation chain using CVE-2025-6019 and UDisks2 (no filesystem image included).

★ 1 · 2026-02-21
JustThinkingHard/HID-Attack

Full BadUSB attack chain: keystroke-injection payload delivery, C2 client, privilege escalation (CVE-2025-6019), and systemd persistence on Linux.

★ 0 · 2025-07-08
harshitvarma05/CVE-2025-6019
★ 0 · 2025-09-23
robbin0919/CVE-2025-6019
★ 0 · 2025-12-13
PoCs 1 ★ 1 Last push 2026-07-28 (2 months, 2 weeks ago)

Fetching description from NVD…

Show 1 repositories
altvist/cve-2026-64725-poc

A PoC for CVE-2026-64725

★ 1 · 2026-07-28
CVE-2020-7961
HOTMULTI PoC
PoCs 10 ★ 117 Last push 2026-07-28 (2 months, 2 weeks ago)

Fetching description from NVD…

Show 8 of 10 repositories
mzer0one/CVE-2020-7961-POC
★ 117 · 2020-04-14
ShutdownRepo/CVE-2020-7961

Exploit script for CVE-2020-7961

★ 18 · 2021-01-15
dinosn/liferay-ga4-rce-research

Security research on Liferay CE 7.0.3 GA4: pre-auth RCE as root (CVE-2020-7961 class) reproduced end-to-end, plus 16 more findings — 8+ with no known CVE. Agen…

★ 7 · 2026-07-28
thelostworldFree/CVE-2020-7961-payloads

Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services (JSONWS)

★ 5 · 2020-04-03
CrackerCat/CVE-2020-7961-Mass

CVE-2020–7961 Mass exploit for Script Kiddies

★ 2 · 2021-01-03
pashayogi/CVE-2020-7961-Mass
★ 0 · 2022-05-22
manrop2702/CVE-2020-7961
★ 0 · 2024-03-14
neverhavenamee/CVE-2020-7961
★ 0 · 2025-09-13
PoCs 1 ★ 0 Last push 2026-07-28 (2 months, 2 weeks ago)

Fetching description from NVD…

Show 1 repositories
itres-labs/CVE-2023-3350

Exploit for cryptographic Issue vulnerability on IBERMATICA RPS [CVE-2023-3350]

★ 0 · 2026-07-28
CVE-2026-8838
CRITICAL
CVSS 9.3 CRITICAL CWE-94 Published 2026-05-18 PoCs 2 ★ 0 Last push 2026-07-28 (2 months, 2 weeks ago)

Unsafe use of Python's eval() on server-received data in the vector_in() function in amazon-redshift-python-driver before 2.1.14 allows a rogue server or man-in-the-middle actor to execute arbitrary code on the client. To remediate this issue, users should upgrade to version 2.1.14.

Show 2 repositories
Maxime288/CVE-2026-8838-RCE
★ 0 · 2026-05-19
PoCs 1 ★ 3 Last push 2026-07-28 (2 months, 2 weeks ago)

Fetching description from NVD…

Show 1 repositories
HORKimhab/CVE-2026-53264

CVE-2026-53264 - Draft or Todo

★ 3 · 2026-07-28
PoCs 1 ★ 1 Last push 2026-07-28 (2 months, 2 weeks ago)

Fetching description from NVD…

Show 1 repositories
theopaid/CVE-2026-66729-Out-of-Bounds-Read-in-facil.io-MIME-Parser-leads-to-Server-Crash

Security Advisory: Out-of-Bounds Read in facil.io MIME Parser leads to Server crash

★ 1 · 2026-07-28
PoCs 1 ★ 0 Last push 2026-07-28 (2 months, 2 weeks ago)

Fetching description from NVD…

Show 1 repositories
theopaid/CVE-2026-66731-Negative-Chunk-Size-Parsing-Causes-Memory-Corruption-leading-to-Server-Crash

Security Advisory: Negative Chunk-Size Parsing Causes Memory Corruption in facil.io

★ 0 · 2026-07-28
PoCs 1 ★ 0 Last push 2026-07-28 (2 months, 2 weeks ago)

Fetching description from NVD…

Show 1 repositories
theopaid/CVE-2026-66730-Infinite-Loop-DoS-in-facil.io-MIME-Parser

Security Advisory: Infinite Loop DoS in facil.io MIME Parser (Partial Boundary)

★ 0 · 2026-07-28
PoCs 1 ★ 0 Last push 2026-07-28 (2 months, 2 weeks ago)

Fetching description from NVD…

Show 1 repositories
oscerd/CVE-2026-48203

Reproducer for CVE-2026-48203: Apache Camel camel-solr SolrParam./SolrField. header injection enabling Solr document-field injection and SSRF via the shards pa…

★ 0 · 2026-07-28
PoCs 1 ★ 0 Last push 2026-07-28 (2 months, 2 weeks ago)

Fetching description from NVD…

Show 1 repositories
jonastrikex/CVE-2026-14856-TastyIgniter

CVE-2026-14856 TastyIgniter v4.3.0

★ 0 · 2026-07-28
PoCs 1 ★ 0 Last push 2026-07-28 (2 months, 2 weeks ago)

Fetching description from NVD…

Show 1 repositories
ChPratik/NGINX_2026_CVE_Bundle_CTI_Report

Covered CVEs: CVE-2026-28755, CVE-2026-42926, CVE-2026-9256, CVE-2026-42055, CVE-2026-42533

★ 0 · 2026-07-28
PoCs 4 ★ 16 Last push 2026-07-28 (2 months, 2 weeks ago)

Fetching description from NVD…

Show 4 repositories
tkisason/KillApachePy

Python Apache Killer (Range Header DoS CVE-2011-3192)

★ 16 · 2011-10-04
bluedragonsecurity/CVE-2011-3192-apache-exploit

CVE-2011-3192 - Remote Apache DOS for Apache versions 1.3.x, 2.0.64 and below and 2.2.19 and below. Developed in 2011 by Antonius (ev1lut10n / w1sdom)

★ 2 · 2026-07-28
stcmjp/cve-2011-3192

This Repository use to test Apache Killer (cve-2011-3192).

★ 0 · 2020-04-10
futurezayka/CVE-2011-3192
★ 0 · 2023-10-07
PoCs 1 ★ 0 Last push 2026-07-28 (2 months, 2 weeks ago)

Fetching description from NVD…

Show 1 repositories
HORKimhab/CVE-2026-27577

CVE-2026-27577 - Draft or Todo

★ 0 · 2026-07-28
PoCs 1 ★ 0 Last push 2026-07-27 (2 months, 2 weeks ago)

Fetching description from NVD…

Show 1 repositories
TheLiimbo/CVE-2026-51992
★ 0 · 2026-07-27
PoCs 4 ★ 8 Last push 2026-07-27 (2 months, 2 weeks ago)

Fetching description from NVD…

Show 4 repositories
ajf8729/BlackLotus

BlackLotus aka CVE-2023-24932 Detection/Remediation Scripts for Intune, ConfigMgr, and generic use

★ 8 · 2025-05-18
v1ckxy/Orchestrated-Powershell-for-CVE-2023-24932-en

English translation

★ 0 · 2025-12-24
ETS-MSE/secure-boot-cert-servicing

Standalone assessment and servicing for the Secure Boot 2011 to 2023 certificate rollover (CVE-2023-24932 / KB5025885). Assess-only by default; no dependencies…

★ 0 · 2026-07-27
PoCs 2 ★ 57 Last push 2026-07-27 (2 months, 2 weeks ago)

Fetching description from NVD…

Show 2 repositories
moiz-2x/CVE-2025-24990_POC

Proof of Concept CVE-2025-24990 (Agere Systems's driver)

★ 57 · 2025-10-31
sentinel-aidefense/CVE-2025-24990

CVE-2025-24990 Research writeup

★ 0 · 2026-07-27
PoCs 1 ★ 0 Last push 2026-07-27 (2 months, 2 weeks ago)

Fetching description from NVD…

Show 1 repositories
oscerd/CVE-2026-48204

Reproducer for CVE-2026-48204: Apache Camel camel-mongodb-gridfs gridfs.* header injection overriding the GridFS operation (enumerate/read/delete files) from a…

★ 0 · 2026-07-27
PoCs 1 ★ 0 Last push 2026-07-27 (2 months, 2 weeks ago)

Fetching description from NVD…

Show 1 repositories
< Prev Page 78 / 446 Next >

Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.