Every new exploit,
on the radar.

Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.

monitoring live
11138CVEs tracked
26048PoC repositories
10New in 24h
351PoC updated in 7 days
filters
All New Fresh PoC Hot Multi PoC Critical High

11138 results

PoCs 2 ★ 3 Last push 2026-07-18 (2 months, 3 weeks ago)

Fetching description from NVD…

Show 2 repositories
joshuavanderpoll/CVE-2026-44262

Unauthenticated RCE in dedoc/scramble — PoC, Nmap NSE & Nuclei template.

★ 3 · 2026-05-07
akash-osmsec/CVE-2026-44262-
★ 0 · 2026-07-18
PoCs 2 ★ 0 Last push 2026-07-18 (2 months, 3 weeks ago)

Fetching description from NVD…

Show 2 repositories
jwde/automerge-test

Testing auto-merge CVE-2026-1999 variant

★ 0 · 2026-03-15
manoelprovider20-lgtm/merge-authz-test

authz test (CVE-2026-1999 siblings)

★ 0 · 2026-07-18
PoCs 1 ★ 0 Last push 2026-07-17 (2 months, 3 weeks ago)

Fetching description from NVD…

Show 1 repositories
ungabunga-ctf/CVE-2023-26039

CVE-2023-26039 - ZoneMinder. Any authenticated user can construct an api command to execute any shell command as the web user.

★ 0 · 2026-07-17
PoCs 1 ★ 0 Last push 2026-07-17 (2 months, 3 weeks ago)

Fetching description from NVD…

Show 1 repositories
codeb0ssx/CVE-2026-46442-PoC

Academic proof-of-concept demonstrating CVE-2026-46442 for authorized security research.

★ 0 · 2026-07-17
CVSS 5.9 MEDIUM Published 2026-06-12 PoCs 1 ★ 1 Last push 2026-07-17 (2 months, 3 weeks ago)

Vulnerability Title

Show 1 repositories
CerberusMrXi/WordPress-KeepInMind-CVE-2026-9271-Exploit

WordPress KeepInMind CVE-2026-9271 Exploit - Tool detecting stored XSS in KeepInMind plugin v0.8.4.2 and below. Built by Sudeepa Wanigarathna, it simulates CSS…

★ 1 · 2026-07-17
PoCs 1 ★ 0 Last push 2026-07-17 (2 months, 3 weeks ago)

Fetching description from NVD…

Show 1 repositories
PN-Tester/CVE-2022-35497

TM4WEB Vulnerability - CVE-2022-35497

★ 0 · 2026-07-17
PoCs 1 ★ 0 Last push 2026-07-17 (2 months, 3 weeks ago)

Fetching description from NVD…

Show 1 repositories
PN-Tester/CVE-2022-35499

TM4Web Vulnerability - CVE-2022-35499

★ 0 · 2026-07-17
PoCs 1 ★ 1 Last push 2026-07-17 (2 months, 3 weeks ago)

Fetching description from NVD…

Show 1 repositories
oscerd/CVE-2026-48205

Reproducer for CVE-2026-48205: Apache Camel camel-dns dns.* header injection redirecting DNS queries to an attacker-controlled resolver (SSRF via DNS) and enab…

★ 1 · 2026-07-17
PoCs 1 ★ 1 Last push 2026-07-17 (2 months, 3 weeks ago)

Fetching description from NVD…

Show 1 repositories
bekwiner/cve-2026-47777
★ 1 · 2026-07-17
PoCs 1 ★ 0 Last push 2026-07-17 (2 months, 3 weeks ago)

Fetching description from NVD…

Show 1 repositories
whiteov3rflow/CVE-2026-41472-POC

CyberPanel v2.4.3 XSS Chain to RCE-CVE-2026-41472

★ 0 · 2026-07-17
PoCs 1 ★ 0 Last push 2026-07-17 (2 months, 3 weeks ago)

Fetching description from NVD…

Show 1 repositories
jaf0rk/CVE-2026-14431
★ 0 · 2026-07-17
PoCs 1 ★ 0 Last push 2026-07-17 (2 months, 3 weeks ago)

Fetching description from NVD…

Show 1 repositories
oscerd/CVE-2026-47323

Reproducer for CVE-2026-47323: Apache Camel CXF/Knative HeaderFilterStrategy missing inbound filtering, enabling Camel control-header injection (RCE via camel-…

★ 0 · 2026-07-17
PoCs 1 ★ 3 Last push 2026-07-17 (2 months, 3 weeks ago)

Fetching description from NVD…

Show 1 repositories
tc4dy/CVE-2026-57821-PoC-Exploit

🔐 CVE-2026-57821 - Apache Fineract SQL Injection Toolkit 📚 Two Python scripts for authorized security testing: verifier.py (safe detection, no extraction) and …

★ 3 · 2026-07-17
PoCs 1 ★ 1 Last push 2026-07-17 (2 months, 3 weeks ago)

Fetching description from NVD…

Show 1 repositories
Ch4120N/CVE-2026-55579

CVE-2026-55579 – Unauthenticated RCE in Pheditor via hardcoded default password "admin". Full Python exploit with file upload & terminal execution. No dependen…

★ 1 · 2026-07-17
PoCs 1 ★ 2 Last push 2026-07-16 (2 months, 3 weeks ago)

Fetching description from NVD…

Show 1 repositories
J4ck3LSyN-Gen2/CVE-2026-58457

PoC tools for CVE-2026-58457: Unauthenticated OS Command Injection leading to remote root on Shenzhen Aitemi M300 Wi-Fi Repeater (MT02). Includes exploit, vali…

★ 2 · 2026-07-16
PoCs 1 ★ 6 Last push 2026-07-16 (2 months, 3 weeks ago)

Fetching description from NVD…

Show 1 repositories
416rehman/asus-bsitf-0-day-poc

PoC for CVE-2026-13585

★ 6 · 2026-07-16
CVE-2023-36802
HOTMULTI PoC
PoCs 6 ★ 163 Last push 2026-07-16 (2 months, 3 weeks ago)

Fetching description from NVD…

Show 6 repositories
chompie1337/Windows_MSKSSRV_LPE_CVE-2023-36802

LPE exploit for CVE-2023-36802

★ 163 · 2023-10-10
Nero22k/cve-2023-36802

Exploit for CVE-2023-36802 targeting MSKSSRV.SYS driver

★ 110 · 2023-10-26
x0rb3l/CVE-2023-36802-MSKSSRV-LPE

PoC for CVE-2023-36802 Microsoft Kernel Streaming Service Proxy

★ 35 · 2023-10-24
4zur-0312/CVE-2023-36802

CVE-2023-36802 ITW case

★ 14 · 2023-10-25
rahul0xkr/Reproducing-CVE-2023-36802

Reverse engineering and vulnerability research on CVE-2023-36802, focusing on object type confusion in mksssrv.sys.

★ 0 · 2025-11-12
nhh9905/CVE-2023-36802

Old CVE, but new way to leak everything.

★ 0 · 2026-07-16
PoCs 2 ★ 0 Last push 2026-07-16 (2 months, 3 weeks ago)

Fetching description from NVD…

Show 2 repositories
PoCs 1 ★ 0 Last push 2026-07-16 (2 months, 3 weeks ago)

Fetching description from NVD…

Show 1 repositories
Sch8ill/CVE-2026-31309

Improper Access Control in Mysterium Node before v1.36.0

★ 0 · 2026-07-16
PoCs 1 ★ 1 Last push 2026-07-16 (2 months, 3 weeks ago)

Fetching description from NVD…

Show 1 repositories
PoCs 3 ★ 1 Last push 2026-07-16 (2 months, 3 weeks ago)

Fetching description from NVD…

Show 3 repositories
CerberusMrXi/WP-Contest-Gallery-28.1.4-Exploit

Complete exploitation toolkit for CVE-2026-3180 - WordPress Contest Gallery SQL Injection vulnerability. Features automated data extraction, WAF bypass, revers…

★ 1 · 2026-07-16
cardosource/cve-2026-3180
★ 0 · 2026-06-12
PoCs 1 ★ 48 Last push 2026-07-16 (2 months, 3 weeks ago)

Fetching description from NVD…

Show 1 repositories
Rat5ak/CVE-2026-50343-InstallService-EoP

CVE-2026-50343 InstallService StaticPluginMap EoP - standard user to SYSTEM

★ 48 · 2026-07-16
PoCs 1 ★ 6 Last push 2026-07-16 (2 months, 3 weeks ago)

Fetching description from NVD…

Show 1 repositories
DavidCarliez/CVE-2026-54992-PoC

Proof of concept for CVE-2026-54992, an MSMQ remote-read integer overflow

★ 6 · 2026-07-16
PoCs 1 ★ 0 Last push 2026-07-16 (2 months, 3 weeks ago)

Fetching description from NVD…

Show 1 repositories
PoCs 1 ★ 0 Last push 2026-07-16 (2 months, 3 weeks ago)

Fetching description from NVD…

Show 1 repositories
HORKimhab/CVE-2022-25477

CVE Realtek SD card reader. CVE-2022-25477, CVE-2022-25478, CVE-2022-25479, CVE-2022-25480, CVE-2024-40432, CVE-2024-40431

★ 0 · 2026-07-16
< Prev Page 85 / 446 Next >

Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.