Fetching description from NVD…
Show 2 repositories
Unauthenticated RCE in dedoc/scramble — PoC, Nmap NSE & Nuclei template.
Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.
monitoring live11138 results
Fetching description from NVD…
Unauthenticated RCE in dedoc/scramble — PoC, Nmap NSE & Nuclei template.
Fetching description from NVD…
Testing auto-merge CVE-2026-1999 variant
authz test (CVE-2026-1999 siblings)
Fetching description from NVD…
CVE-2023-26039 - ZoneMinder. Any authenticated user can construct an api command to execute any shell command as the web user.
Fetching description from NVD…
Academic proof-of-concept demonstrating CVE-2026-46442 for authorized security research.
Vulnerability Title
WordPress KeepInMind CVE-2026-9271 Exploit - Tool detecting stored XSS in KeepInMind plugin v0.8.4.2 and below. Built by Sudeepa Wanigarathna, it simulates CSS…
Fetching description from NVD…
TM4WEB Vulnerability - CVE-2022-35497
Fetching description from NVD…
TM4Web Vulnerability - CVE-2022-35499
Fetching description from NVD…
Reproducer for CVE-2026-48205: Apache Camel camel-dns dns.* header injection redirecting DNS queries to an attacker-controlled resolver (SSRF via DNS) and enab…
Fetching description from NVD…
Fetching description from NVD…
CyberPanel v2.4.3 XSS Chain to RCE-CVE-2026-41472
Fetching description from NVD…
Fetching description from NVD…
Reproducer for CVE-2026-47323: Apache Camel CXF/Knative HeaderFilterStrategy missing inbound filtering, enabling Camel control-header injection (RCE via camel-…
Fetching description from NVD…
🔐 CVE-2026-57821 - Apache Fineract SQL Injection Toolkit 📚 Two Python scripts for authorized security testing: verifier.py (safe detection, no extraction) and …
Fetching description from NVD…
CVE-2026-55579 – Unauthenticated RCE in Pheditor via hardcoded default password "admin". Full Python exploit with file upload & terminal execution. No dependen…
Fetching description from NVD…
PoC tools for CVE-2026-58457: Unauthenticated OS Command Injection leading to remote root on Shenzhen Aitemi M300 Wi-Fi Repeater (MT02). Includes exploit, vali…
Fetching description from NVD…
PoC for CVE-2026-13585
Fetching description from NVD…
LPE exploit for CVE-2023-36802
Exploit for CVE-2023-36802 targeting MSKSSRV.SYS driver
PoC for CVE-2023-36802 Microsoft Kernel Streaming Service Proxy
CVE-2023-36802 ITW case
Reverse engineering and vulnerability research on CVE-2023-36802, focusing on object type confusion in mksssrv.sys.
Old CVE, but new way to leak everything.
Fetching description from NVD…
Fetching description from NVD…
Improper Access Control in Mysterium Node before v1.36.0
Fetching description from NVD…
Fetching description from NVD…
Complete exploitation toolkit for CVE-2026-3180 - WordPress Contest Gallery SQL Injection vulnerability. Features automated data extraction, WAF bypass, revers…
Fetching description from NVD…
CVE-2026-50343 InstallService StaticPluginMap EoP - standard user to SYSTEM
Fetching description from NVD…
Proof of concept for CVE-2026-54992, an MSMQ remote-read integer overflow
Fetching description from NVD…
Fetching description from NVD…
CVE Realtek SD card reader. CVE-2022-25477, CVE-2022-25478, CVE-2022-25479, CVE-2022-25480, CVE-2024-40432, CVE-2024-40431
Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.