Fetching description from NVD…
Show 1 repositories
DexSemon/CVE-2026-27495
Proof-of-concept exploit and lab environment for CVE-2026-27495
★ 0 · 2026-07-08
Every new exploit,
on the radar.
Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.
monitoring liveCVE-2026-92956
CVE-2026-91737
CVE-2026-109519
CVE-2026-104082
CVE-2026-100833
CVE-2026-79987
CVE-2026-13078
CVE-2026-102255
CVE-2021-1905
CVE-2026-91136
CVE-2026-6475
CVE-2026-103889
CVE-2026-40224
CVE-2026-105306
14 contacts in last 24h
11143CVEs tracked
26059PoC repositories
15New in 24h
360PoC updated in 7 days
filters
11143 results
Fetching description from NVD…
Show 1 repositories
DexSemon/CVE-2026-35194
Proof-of-concept exploit and lab environment for CVE-2026-35194
★ 0 · 2026-07-08
Fetching description from NVD…
Show 1 repositories
WesWrench/CVE-2026-36214
Stored Cross-Site Scripting (XSS) in osTicket via Vulnerable Bootstrap Tooltip Component
★ 1 · 2026-07-08
Fetching description from NVD…
Show 1 repositories
★ 0 · 2026-07-08
Fetching description from NVD…
Show 1 repositories
oscerd/CVE-2026-40047
Reproducer for CVE-2026-40047: Apache Camel camel-docling CLI argument injection / path traversal
★ 2 · 2026-07-08
Fetching description from NVD…
Show 8 of 26 repositories
Schira4396/VcenterKiller
一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webshell，命令执行或者上传公钥使用SSH免密…
★ 1484 · 2024-04-25
sherlocksecurity/VMware-CVE-2022-22954
POC for VMWARE CVE-2022-22954
★ 279 · 2022-04-13
bewhale/CVE-2022-22954
CVE-2022-22954 VMware Workspace ONE Access freemarker SSTI 漏洞 命令执行、批量检测脚本、文件写入
★ 68 · 2022-04-26
tunelko/CVE-2022-22954-PoC
VMware Workspace ONE Access and Identity Manager RCE via SSTI - Test script for shodan, file or manual.
★ 16 · 2024-02-13
jax7sec/CVE-2022-22954
提供批量扫描URL以及执行命令功能。Workspace ONE Access 模板注入漏洞，可执行任意代码
★ 12 · 2022-04-15
Vulnmachines/VMWare_CVE-2022-22954
CVE-2022-22954 is a server-side template injection vulnerability in the VMware Workspace ONE Access and Identity Manager
★ 11 · 2022-04-11
DrorDvash/CVE-2022-22954_VMware_PoC
PoC for CVE-2022-22954 - VMware Workspace ONE Access Freemarker Server-Side Template Injection
★ 10 · 2022-04-12
★ 8 · 2022-06-03
Fetching description from NVD…
Show 7 repositories
★ 12 · 2025-04-07
★ 12 · 2025-05-19
h3st4k3r/CVE-2025-30065
This PoC targets CVE-2025-30065, an RCE vulnerability in Apache Parquet via Avro schema deserialization. It abuses the getDefaultValue() mechanism to instantia…
★ 7 · 2026-07-08
★ 3 · 2025-04-07
ThreatRadarAI/TRAI-001-Critical-RCE-Vulnerability-in-Apache-Parquet-CVE-2025-30065-Simulation
A CVSS 10.0-rated vulnerability in the parquet-avro Java module allows remote code execution via unsafe deserialization when parsing schemas. Tracked as CVE-20…
★ 1 · 2025-04-22
ron-imperva/CVE-2025-30065-PoC
CVE-2025-30065 PoC
★ 0 · 2025-04-05
micrictor/parquet-avro-rce
PoC: CVE-2025-30065 incomplete fix bypass in Apache Parquet Java 1.15.1
★ 0 · 2026-04-06
Fetching description from NVD…
Show 1 repositories
ly1g3/cisco-CVE-2023-31488
Cisco Email Security Appliance: Email to zero-click RCE as root - Remote Code Execution/Memory Corruption/ROP-chain
★ 1 · 2026-07-08
Fetching description from NVD…
Show 1 repositories
notthemystery/CVE-2026-6300-PoC
This is a Proof-of-Concept for the Blink CSS UAF vulnerability tracked as CVE-2026-6300.
★ 0 · 2026-07-08
Fetching description from NVD…
Show 1 repositories
★ 1 · 2026-07-07
Fetching description from NVD…
Show 1 repositories
moritakaaz/CVE-2026-12277
Frontend File Manager Plugin (WordPress) <= 23.6 - Unauthenticated Arbitrary File Deletion to RCE
★ 0 · 2026-07-07
Fetching description from NVD…
Show 1 repositories
JivaSecurity/VTIGER-CRM-RCE-CVE-2026-23698
Vtiger CRM 8.3.0, 8.4.0 Module Import Authenticated RCE PoC
★ 0 · 2026-07-07
Fetching description from NVD…
Show 1 repositories
Winslowe/CVE-2024-4309-Analysis
BGT-Pentest-LAB Final Project: Xiaomi HyperOS System Updater OTA Signature Verification Bypass (CVE-2024-4309) Deep Analysis.
★ 1 · 2026-07-07
Fetching description from NVD…
Show 1 repositories
JivaSecurity/VTIGER-CRM-RCE-CVE-2026-23697
Vtiger CRM 8.3.0 Authenticated RCE via .phar Upload
★ 0 · 2026-07-07
Fetching description from NVD…
Show 6 repositories
kasem545/CVE-2022-46364-Poc
CVE-2022-46364-Poc Apache CXF SSRF via MTOM XOP:Include
★ 7 · 2026-03-28
cybermaksx/CVE-2022-46364-Proof-of-the-concept
This vulnerability allows an attacker to perform SSRF (Server-Side Request Forgery) attacks on Apache CXF webservices that accept MTOM/XOP requests. The issue …
★ 3 · 2026-03-29
★ 1 · 2026-03-29
jwsly12/CVE-2022-46364-htb-ctf
Exploit CVE-2022-46363
★ 1 · 2026-04-03
0xmid00/CVE-2022-46364-poc
CVE-2022-46364 Apache CXF XOP:Include SSRF / LFI
★ 0 · 2026-03-31
c0gnit00/CVE-2022-46364
Python POC, Exploit for CVE-2022-46364
★ 0 · 2026-07-07
Fetching description from NVD…
Show 1 repositories
ly1g3/packetfence-CVE-2024-39024
In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote code execution
★ 1 · 2026-07-07
Fetching description from NVD…
Show 1 repositories
ly1g3/cisco-CVE-2023-20075
Cisco Email Security Appliance: Local Privilege Escalation and Shell Escape
★ 1 · 2026-07-07
Fetching description from NVD…
Show 1 repositories
ly1g3/cisco-CVE-2023-20009
Cisco Email Security Appliance: Remote Code Execution - RCE from config file
★ 1 · 2026-07-07
Fetching description from NVD…
Show 1 repositories
ly1g3/proofpoint-CVE-2023-0090
Proofpoint Email Gateway: Unauthenticated RCE
★ 1 · 2026-07-07
Fetching description from NVD…
Show 1 repositories
ly1g3/proofpoint-CVE-2023-0089
Proofpoint Email Gateway: Low level authenticated user to admin RCE
★ 1 · 2026-07-07
Fetching description from NVD…
Show 1 repositories
noambouillet/CVE-2023-4861-PoC
Proof of Concept for CVE-2023-4861 in Filester
★ 2 · 2026-07-07
Fetching description from NVD…
Show 1 repositories
shinthink/CVE-2026-39492
CVE-2026-39492 — WP Maps (wp-google-map-plugin) <= 4.9.1 Unauthenticated Blind SQL Injection Mass Scanner | sqlmap-style detection | backtick bypass esc_sql() …
★ 1 · 2026-07-07
Fetching description from NVD…
Show 1 repositories
HORKimhab/CVE-2026-14191
CVE-2026-14191 - Draft
★ 0 · 2026-07-07
Fetching description from NVD…
Show 1 repositories
HORKimhab/CVE-2026-11405
CVE-2026-11405 - Draft
★ 0 · 2026-07-07
Fetching description from NVD…
Show 6 repositories
safebuffer/sam-the-admin
Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user
★ 1069 · 2022-07-10
Ridter/noPac
Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user
★ 1022 · 2023-01-29
ly4k/Pachine
Python implementation for CVE-2021-42278 (Active Directory Privilege Escalation)
★ 278 · 2022-01-13
waterrr/noPac
Exploiting CVE-2021-42278 and CVE-2021-42287
★ 6 · 2021-12-13
cybersecurityworks553/noPac-detection
Detection script for CVE-2021-42278 and CVE-2021-42287
★ 2 · 2021-12-27
xLTJ/noPac
Go implementation of NoPac, exploiting CVE-2021-42278 and CVE-2021-42287
★ 0 · 2026-07-07
Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.