Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.
monitoring live11138 results
Fetching description from NVD…
Reproducer for CVE-2026-43866 — Apache Camel camel-jms forged DefaultExchangeHolder bypass of the CVE-2026-40860 deserialization filter (Exchange-state injecti…
Fetching description from NVD…
Proof-of-Concept for CVE-2023-38146 ("ThemeBleed")
PoC for the ThemeBleed Windows 11 CVE-2023-38146 written in python using impacket. https://jnns.de/posts/cve-2023-38146-poc/
A proof of concept using python for the CVE-2023-38146 "ThemeBleed"
Better POC
Fetching description from NVD…
Reproducer for CVE-2026-43865 — Apache Camel camel-hazelcast default-configured instance unsafe Java deserialization (RCE)
Fetching description from NVD…
Cockpit: Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection
Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection Cockpit versions 327 – 359 | CVSS 9.8 Critical | CWE-78
Fetching description from NVD…
shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()`. The `.op` field was backslash-escaped character by character using `/(.)/g`, which in JavaScript does not match line terminators (\n, \r, U+2028, U+2029). A line terminator in `.op` therefore passed through unescaped into the output; POSIX shells treat a literal newline as a command separator, so any content after it would execute as a second command. The vulnerable code path is reachable in two ways: (1) direct construction of `{ op: '...\n...' }` from external input, and (2) via `parse(cmd, envFn)` when `envFn` returns object tokens whose `.op` is attacker-influenced. Both are documented API surface. Fixed by replacing the per-character escape with strict shape validation: `.op` must match the parser's control-operator allowlist; `{ op: 'glob', pattern }` validates `pattern` and forbids line terminators; `{ comment }` validates `comment` and forbids line terminators; any other object shape throws `TypeError`.
Fetching description from NVD…
CVE-2026-25262 applicability to Snapdragon 8 Gen 1 — experimental results
Fetching description from NVD…
An exploit for the Cisco Catalyst SD-WAN Controller authentication bypass vulnerability, CVE-2026-20127
Cisco Catalyst SD-WAN 身份验证绕过漏洞(CVE-2026-20127)利用EXP
Walkthrough of the CVSS 10.0 authentication bypass in Cisco Catalyst SD-WAN from first malformed peering request to root on the management plane.
Cisco SD-WAN Exposure & Potential Vulnerability Scanner (Passive Fingerprinting) 2026
CVE-2026-20127
Fetching description from NVD…
Azure IoT Hub where exposure of an owner-level Shared Access Key enables unauthenticated remote code execution (RCE) against connected IoT devices. Proof-Of-Co…
CVE-2026-13768: Privileged iothubowner IoT Hub credential — fleet enumeration, device RCE, home-network pivot — Gardyn (ICSA-26-183-03)
Fetching description from NVD…
PoC for jenkins 2.63 CVE-2019-1003030
Fetching description from NVD…
CVE-2026-4257 - Contact Form by Supsystic <= 1.7.36 # SSTI to RCE
SSTI contact form to rce
Fetching description from NVD…
PoC for CVE-2025-55319
Fetching description from NVD…
PoC & dokumentasi untuk CVE-2026-7275: Moodle Google Drive Repository (repository_googledocs) — Path Traversal / Arbitrary File Write yang dapat mengarah ke RC…
Fetching description from NVD…
Reproducer for CVE-2026-42527 — Apache Camel permissive default ObjectInputFilter admits java.net.URL, enabling a DNS-based out-of-band side channel
Fetching description from NVD…
Instant Appointment <= 1.2 — Unauthenticated Arbitrary File Upload to RCE via add_service_front AJAX | CVSS 9.8
Fetching description from NVD…
This repository contains a proof-of-concept (PoC) environment designed to test for CVE-2026-29145.
This repository contains a proof-of-concept (PoC) environment designed to test for CVE-2026-29145.
Fetching description from NVD…
OS Command Injection in Health Check → Remote Code Execution
Fetching description from NVD…
Dahua CVE-2024-13985
Fetching description from NVD…
Dahua CVE-2026-29114
Fetching description from NVD…
Dahua CVE-2026-29115
Fetching description from NVD…
Dahua CVE-2026-29116
Fetching description from NVD…
A critical Remote Code Execution (RCE) vulnerability has been identified in PluXML CMS version 5.8.22. This vulnerability allows authenticated administrators t…
PluckCMS 4.7.20 Zip Slip vulnerability Led to RCE
Fetching description from NVD…
Security research — reverse engineering and documentation for Apple CVE-2024-0258 (libxpc).
Fetching description from NVD…
A simple scanner for identifying vulnerable cups-browsed instances on your network
Unauthenticated RCE on cups-browsed (exploit and nuclei template)
Scanner
POC scanner for CVE-2024-47176
Ultrafast CUPS-browsed scanner (CVE-2024-47176)
Vulnerability Scanner for CUPS: CVE-2024-47176
A Mass Scanner designed to detect the CVE-2024-47176 vulnerability across systems running the Common Unix Printing System (CUPS).
CUPS Browsd Check_CVE-2024-47176
Fetching description from NVD…
Detection for CVE-2025-10035
A deserialization vulnerability in the License Servlet of Fortra's GoAnywhere MFT allows an actor with a validly forged license response signature to deseriali…
CVE-2025-10035_GoAnywhere Get RCE
CVE-2025-10035 Research writeup
Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.