Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.
monitoring live11143 results
Fetching description from NVD…
Epson Printer RAW Protocol Exploit Framework
submition CVE
Fetching description from NVD…
Fetching description from NVD…
CVE-2026-22874 writeup: incomplete SSRF allow-list in Gitea webhook/migration (IPv6 transition and cloud metadata). Fixed in Gitea 1.26.3.
Fetching description from NVD…
Product Video Gallery for Woocommerce <= 1.5.1.8 - Authenticated Stored Cross-Site Scripting Proof of Concept
Fetching description from NVD…
QNAP password reset URL injection writeup + PoC.
Fetching description from NVD…
Fetching description from NVD…
Kernel info leak Proof of Concept patched in iOS 26.4 / macOS 26.4
Fetching description from NVD…
Spectre exploit
a list of BIOS/Firmware fixes adressing CVE-2017-5715, CVE-2017-5753, CVE-2017-5754
Assesses a system for the "speculative execution" vulnerabilities described in CVE-2017-5715, CVE-2017-5753, CVE-2017-5754
Research and hands-on PoC of Spectre Variant 2 (CVE-2017-5715), a hardware side-channel vulnerability exploiting CPU speculative execution and branch predictio…
Fetching description from NVD…
Pivotal CRM's patch for an initial deserialization vulnerability was incomplete. The fix switched from BinaryFormatter to JSON.NET but left TypeNameHandling se…
Fetching description from NVD…
CVE-2026-54998 RCE Exploit
Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP
Citrix NetScaler CVE Preconditions Checker as per CTX696604 | Supported CVE : CVE-2026-8451, CVE-2026-8452, CVE-2026-8655, CVE-2026-10816, CVE-2026-10817, and …
CVE-2026-8451
Fetching description from NVD…
Fetching description from NVD…
Fetching description from NVD…
PoC for CVE-2026-53360: guest-triggered heap out-of-bounds read/write in KVM SEV-SNP Page State Change (PSC) handling.
Fetching description from NVD…
OpenSTAManager-RCE-Exploit-CVE-2026-38751
OpenSTAManager RCE Exploit (CVE-2026-38751)
This repository contains a proof-of-concept (PoC) exploit for CVE-2026-38751, affecting OpenSTAManager ≤ 2.10. The vulnerability allows an authenticated attac…
Fetching description from NVD…
PoC for CVE-2026-54415 — Azuriom CMS (<1.2.11) Broken Access Control → account takeover
Fetching description from NVD…
POC for CVE-2026-23869
Technical troubleshooting repository for fixing infinite rendering vulnerability loops and resource exhaustion threats under CVE-2026-23869 cleanly.
Fetching description from NVD…
A Python script to exploit CVE-2022-36446 Software Package Updates RCE (Authenticated) on Webmin < 1.997.
CVE-2022-36446 - Webmin 1.996 Remote Code Execution
CVE-2022-36446 POC 실습
Script de python para Webmin 1.996
Fetching description from NVD…
CVE-2026-34038: Authenticated Remote Command Injection in Coolify
Fetching description from NVD…
Fetching description from NVD…
CVE-2025-31133 PoC
Learn about CVE-2025-31133
POCs and Tetragon Rules for CVE-2024-21626 and CVE-2025-31133
Fetching description from NVD…
Pardus Software Local Privilege Escalation PoC - affected from <= 1.0.4
Fetching description from NVD…
Walkthrough and PoC of File path traversal vulnerability(CVE-2026-36851) for UnPoller 2.33.0
Fetching description from NVD…
Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.
Dahua IP camera CVE research toolkit (CVE-2021-33044/33045, CVE-2025-31700/31701)
Dahua IPC/VTH/VTO devices auth bypass exploit
Camera Dahua Research lỗ hổng CVE-2021-33044
DAHUA_AUTH-BYPASS-CVE-2021-33044
Fetching description from NVD…
CVE-2026-49468 — LiteLLM (<1.84.0) unauthenticated auth bypass via Host-header route confusion. PoC + docker lab.
Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.