Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.
monitoring live11143 results
Fetching description from NVD…
CVE-2011-1485 - Linux pkexec and polkitd 0.96 race condition privilege escalation exploit. Developed in 2011 by Antonius (ev1lut10n / w1sdom)
CVE-2011-1485 - Published: 2011-04-01 - PolicyKit:
Fetching description from NVD…
PoC for CVE-2026-54350 — Budibase unauthenticated NoSQL operator injection (CVSS 10.0). Read/mass-write any document collection via a PUBLIC query.
Fetching description from NVD…
PoC for CVE-2023-22496: Netdata Agent <1.37 OS Command Injection via registry_hostname
Fetching description from NVD…
Exploitability PoC for CVE-2026-49352 (9router Hardcoded JWT Secret Authentication Bypass)
Fetching description from NVD…
CVE-2026-6508 LiderAhenk Merkezi Yönetim Sistemi mimarisinde, uç birimler (agents) arası tüm istemcilerin birbirleri üzerinde 'root' yetkisiyle kod çalıştırılm…
Fetching description from NVD…
Gogs RCE via argument injection in git rebase (CWE-88) — Python PoC. CVE-2026-52806
Fetching description from NVD…
Official public advisory for CVE-2025-61155
CVE-2025-61155 — arbitrary process termination in GameDriverX64.sys (Tower of Fantasy anti-cheat). Original IDA Pro teardown, PoC, YARA, IOCs, mitigation.
Fetching description from NVD…
Reproducer for CVE-2026-40022: Apache Camel camel-platform-http-main authentication bypass on non-root context paths
Fetching description from NVD…
Fetching description from NVD…
A demo exploit of CVE-2016-9079 on Ubuntu x64
CVE-2016-9079 exploit code as it appeared on https://lists.torproject.org/pipermail/tor-talk/2016-November/042639.html
Educational standalone JavaScript implementation of the public exploit for CVE-2016-9079 (Firefox Use-After-Free), adapted from the original Exploit-DB/Metaspl…
Fetching description from NVD…
Reproducer for CVE-2026-33454: Apache Camel camel-mail header injection to RCE via camel-exec
Fetching description from NVD…
Apache Camel 4.18.0 — CVE Security Assessment: 3 critical vulnerabilities with working PoC exploits (CVE-2026-33453, CVE-2026-40473, CVE-2026-40858)
Reproducer for CVE-2026-33453: Apache Camel camel-coap header injection to RCE via camel-exec
Fetching description from NVD…
Rust-based DLL hijacking loader for MobaXterm (CVE-2026-6421) with persistence
Fetching description from NVD…
Reproducer for CVE-2026-27172: Apache Camel camel-consul ConsulRegistry Java deserialization (RCE)
Fetching description from NVD…
The FreeBSD ICMP buffer overflow, freebsd buffer overflow poc
CVE-2022-23093 FreeBSD Stack-Based Overflow
Fetching description from NVD…
Updated Exploit - pfBlockerNG <= 2.1.4_26 Unauth RCE (CVE-2022-31814)
CVE-2022-31814 Exploitation Toolkit.
pfBlockerNG <= 2.1.4_26 Unauth RCE (CVE-2022-31814)
CVE-2022-31814
pfBlockerNG <= 2.1.4_26 Unauth RCE (CVE-2022-31814)
Proof of concept for CVE-2022-31814
Fetching description from NVD…
WSO2 RCE (CVE-2022-29464) exploit and writeup.
😭 WSOB is a python tool created to exploit the new vulnerability on WSO2 assigned as CVE-2022-29464.
A bots loader for CVE-2022-29464 with multithreading
Perform With Mass Exploits In WSO Management.
RCE exploit for WSO2
cve-2022-29464 批量脚本
WSO2 RCE (CVE-2022-29464)
Python script to exploit CVE-2022-29464 (mass mode)
Fetching description from NVD…
Zimbra RCE simple poc
Zimbra CVE-2022-27925 PoC
A loader for zimbra 2022 rce (cve-2022-27925)
CVE-2022-27925
Python Script to exploit Zimbra Auth Bypass + RCE (CVE-2022-27925)
CVE-2022-27925 nuclei template
Fetching description from NVD…
The first proof of concept of the Contao CMS RCE
The first proof of concept of the Contao CMS RCE
Fetching description from NVD…
Proof of conept to exploit vulnerable proxycommand configurations on ssh clients (CVE-2023-51385)
一个验证对CVE-2023-51385
OpenSSH ProxyCommand RCE
CVE-2023-51385 PoC Exploit
CVE-2023-51385;OpenSSH ProxyCommand RCE;OpenSSH <9.6 命令注入漏洞poc
一个验证对CVE-2023-51385
Fetching description from NVD…
Xiaomi HyperOS AVCodec Medya Framework'ündeki Use-After-Free (CVE-2025-21082) Zafiyetinin Derinlemesine Analizi, Rust Simülasyonu ve İnteraktif Web Paneli.
Fetching description from NVD…
Exploit Tools For new CVE
Pre-auth RCE scanner for Langflow < 1.8.0 — Route Injection + Vertex Injection → Code Execution (CVSS 9.8)
The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.17 via the (profile template scope) function. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included.
Pre-auth Local File Inclusion in WP User Manager <= 2.9.17 via path traversal in tab parameter (CVSS 7.5)
The Avada (Fusion) Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the maybe_delete_files function in all versions up to, and including, 3.15.3. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). The attack requires a published Avada form configured to save entries to the database; an unauthenticated attacker submits a path-traversal payload via the wp_ajax_nopriv_fusion_form_submit_ajax handler while also controlling the fusion_privacy_expiration_interval and privacy_expiration_action fields to force an immediate 'delete' cleanup, causing the planted entry to be automatically processed by the Fusion_Form_DB_Privacy shutdown-hook routine without any administrator interaction.
Pre-auth path traversal to arbitrary file delete in Avada (Fusion) Builder <= 3.15.3 leading to RCE (CVSS 9.1)
Fetching description from NVD…
Patch for CVE-2025-54236(a.k.a Session Reaper) which allows customer account takeover and RCE under certain conditions. This patch is actually a Magento 2 exte…
PoC Magento Session Reaper - CVE-2025-54236
This is a tiny lab that simulates the core idea reported for CVE-2025-54236 (“SessionReaper”)
cve-2025-54236 poc
SessionReaper-CVE-2025-54236
Ambiente Docker para demonstração prática da CVE-2025-54236 (SessionReaper): PHP Object Deserialization levando a RCE em Magento Open Source 2.4.7
Adobe Magento SessionReaper LFI Vulnerability
Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.