Every new exploit,
on the radar.

Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.

monitoring live
11143CVEs tracked
26059PoC repositories
12New in 24h
357PoC updated in 7 days
filters
All New Fresh PoC Hot Multi PoC Critical High

11143 results

CVE-2026-40987
PoCs 1 ★ 0 Last push 2026-06-29 (3 months, 1 week ago)

Fetching description from NVD…

Top PoC: https://github.com/daehyuh/CVE-2026-40987
Show 1 repositories
daehyuh/CVE-2026-40987

CVE-2026-40987 PoC

★ 0 · 2026-06-29
CVE-2026-23918
MULTI PoC
PoCs 15 ★ 32 Last push 2026-06-29 (3 months, 1 week ago)

Fetching description from NVD…

Top PoC: https://github.com/striga-ai/CVE-2026-23918
Show 8 of 15 repositories
striga-ai/CVE-2026-23918

Double-free in Apache httpd mod_http2 stream cleanup leading to pre-auth RCE.

★ 32 · 2026-05-11
xeloxa/CVE-2026-23918-Apache-H2-PoC

Proof-of-Concept exploit for CVE-2026-23918 (Apache mod_http2 double-free). Features multi-mode DoS (Rapid-RST, Slow-Drip) and passive RCE/vulnerability detect…

★ 23 · 2026-05-06
rhasan-com/CVE-2026-23918

Apache HTTP/2 double-free vulnerability PoC (CVE-2026-23918)

★ 8 · 2026-05-06
qassam-315/CVE-2026-23918-Elite-Auditor

Elite reconnaissance script for auditing Apache's HTTP/2 stack against memory corruption (CVE-2026-23918). Features ALPN protocol forcing and monochrome dashbo…

★ 6 · 2026-05-05
12lie20/CVE-2026-23918-test

This repository contains a Proof of Concept (PoC) demonstrating the Double Free vulnerability (CVE-2026-23918) in Apache HTTP Server 2.4.66 `mod_http2`.

★ 4 · 2026-05-05
hackervlogofficial/CVE-2026-23918

This is a proactive tool for security auditing. For your GitHub repository, you’ll want a description that highlights its safety (non-intrusive) and its specif…

★ 1 · 2026-05-06
alt3kx/CVE-2026-23918

CVE-2026-23918 Apache mod_http2 Double-Free Detector

★ 1 · 2026-05-07
rshosting/Apache-CVE-2026-23918-fix

Upgrade to Apache 2.4.67 to fix CVE-2026-23918 vulneribility

★ 0 · 2026-05-05
CVE-2026-5562
PoCs 1 ★ 0 Last push 2026-06-29 (3 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/HutTwoThreeFour/CVE-2026-5562-Exploit
Show 1 repositories
HutTwoThreeFour/CVE-2026-5562-Exploit
★ 0 · 2026-06-29
CVE-2026-20643
PoCs 2 ★ 21 Last push 2026-06-28 (3 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/0xjohnnydev/WebKit-NavigationAPI-SOP-Bypass
Show 2 repositories
0xjohnnydev/WebKit-NavigationAPI-SOP-Bypass

WebKit NavigateEvent.canIntercept SOP bypass via cross-port interception — iOS 26.3.1 BSI (CVE-2026-20643)

★ 21 · 2026-06-28
Fliv/CVE-2026-20643

CVE-2026-20643 test page

★ 3 · 2026-03-20
CVE-2026-24418
PoCs 2 ★ 3 Last push 2026-06-28 (3 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/BridgerAlderson/CVE-2026-24418
Show 2 repositories
BridgerAlderson/CVE-2026-24418

OpenSTAManager v2.9.8 and earlier contain a critical Error-Based SQL Injection vulnerability in the bulk operations handler for the Scadenzario (Payment Schedu…

★ 3 · 2026-06-28
lukasz-rybak/CVE-2026-24418

CVE-2026-24418 - OpenSTAManager has a SQL Injection vulnerability in the Scadenzario bulk operations module

★ 1 · 2026-04-11
CVE-2026-69212
PoCs 1 ★ 2 Last push 2026-06-28 (3 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/c0gnit00/CVE-2026-69212
Show 1 repositories
c0gnit00/CVE-2026-69212

Python poc, exploit for CVE-2025-69212

★ 2 · 2026-06-28
CVE-2026-12485
PoCs 1 ★ 1 Last push 2026-06-28 (3 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/0xBlackash/CVE-2026-12485
Show 1 repositories
0xBlackash/CVE-2026-12485

CVE-2026-12485

★ 1 · 2026-06-28
CVE-2021-39312
PoCs 1 ★ 0 Last push 2026-06-28 (3 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/root-wav/wordpress-true-ranker-cve-2021-39312
Show 1 repositories
root-wav/wordpress-true-ranker-cve-2021-39312

Exploit-WordPress Plugin The True Ranker 2.2.2 - Arbitrary File Read

★ 0 · 2026-06-28
CVE-2024-3829
PoCs 1 ★ 1 Last push 2026-06-28 (3 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/fabse-hack/CVE-2024-3829
Show 1 repositories
fabse-hack/CVE-2024-3829

CVE-2024-3829

★ 1 · 2026-06-28
CVE-2026-54686
PoCs 1 ★ 0 Last push 2026-06-28 (3 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/Saku0512/CVE-2026-54686-poc
Show 1 repositories
Saku0512/CVE-2026-54686-poc
★ 0 · 2026-06-28
CVE-2026-48732
PoCs 1 ★ 0 Last push 2026-06-28 (3 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/Saku0512/CVE-2026-48732-poc
Show 1 repositories
Saku0512/CVE-2026-48732-poc
★ 0 · 2026-06-28
CVE-2025-56399
PoCs 3 ★ 3 Last push 2026-06-28 (3 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/Theethat-Thamwasin/CVE-2025-56399
Show 3 repositories
Theethat-Thamwasin/CVE-2025-56399

An authenticated Remote Code Execution (RCE) vulnerability in laravel-file-manager v3.3.1 and below allows attackers with access to the file manager interface …

★ 3 · 2025-11-05
Jenderal92/laravel-filemanager-unrestricted-upload

PoC for CVE-2025-56399 - Unrestricted File Upload leading to RCE in alexusmai/laravel-file-manager (≤3.3.1). Automates detection, CSRF extraction, and File Upl…

★ 2 · 2026-06-28
im-hanzou/CVE-2025-56399

CVE-2025-56399 – Remote Code Execution in laravel-file-manager v3.3.1. Exploits misconfigured config in Laravel File Manager to upload and verify a PHP shell v…

★ 1 · 2026-03-09
CVE-2026-54088
PoCs 1 ★ 1 Last push 2026-06-28 (3 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/Saku0512/CVE-2026-54088-poc
Show 1 repositories
Saku0512/CVE-2026-54088-poc
★ 1 · 2026-06-28
CVE-2026-54761
PoCs 1 ★ 0 Last push 2026-06-28 (3 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/Saku0512/CVE-2026-54761-poc
Show 1 repositories
Saku0512/CVE-2026-54761-poc
★ 0 · 2026-06-28
CVE-2025-48907
PoCs 1 ★ 3 Last push 2026-06-27 (3 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/0xgh057r3c0n/CVE-2026-48907
Show 1 repositories
0xgh057r3c0n/CVE-2026-48907

CVE-2025-48907 - Unauthenticated RCE exploit for Joomla JCE < 2.9.99.5

★ 3 · 2026-06-27
CVE-2026-33824
PoCs 2 ★ 6 Last push 2026-06-27 (3 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/EpSiLoNPoInTOrI/IKEV2-POC
Show 2 repositories
EpSiLoNPoInTOrI/IKEV2-POC

IKEv2, ikeext.dll, CVE-2026-33824, double free, heap grooming, ROP, SKF fragmentation, Windows exploit, anti-debug, obfuscation, API hooking, shellcode, revers…

★ 6 · 2026-06-27
kaleth4/CVE-2026-33824
★ 1 · 2026-04-21
CVE-2026-62958
PoCs 1 ★ 0 Last push 2026-06-27 (3 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/0Linear/CVE-2026-62958
Show 1 repositories
0Linear/CVE-2026-62958
★ 0 · 2026-06-27
CVE-2026-40083
PoCs 1 ★ 4 Last push 2026-06-27 (3 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/hakaioffsec/CVE-2026-40083
Show 1 repositories
hakaioffsec/CVE-2026-40083

SQL Injection at Cacti

★ 4 · 2026-06-27
CVE-2026-40176
PoCs 3 ★ 2 Last push 2026-06-27 (3 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/Saku0512/CVE-2026-40176-poc
Show 3 repositories
Saku0512/CVE-2026-40176-poc
★ 2 · 2026-06-27
daptheHuman/cve-2026-40176-cve-2026-40261
★ 0 · 2026-04-17
ikarolaborda/CVE-2026-40176
★ 0 · 2026-06-15
CVE-2026-5366
PoCs 1 ★ 0 Last push 2026-06-27 (3 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/renat0z3r0/prefect-cve-2026-5366
Show 1 repositories
renat0z3r0/prefect-cve-2026-5366

PoC for CVE-2026-5366: git argument injection in Prefect's GitRepository leading to RCE on the worker.

★ 0 · 2026-06-27
CVE-2026-35585
PoCs 1 ★ 0 Last push 2026-06-27 (3 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/Saku0512/CVE-2026-35585-poc
Show 1 repositories
Saku0512/CVE-2026-35585-poc
★ 0 · 2026-06-27
CVE-2026-12432
PoCs 1 ★ 1 Last push 2026-06-27 (3 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/Polosss/By-Poloss..-..CVE-2026-12432-PoC
Show 1 repositories
Polosss/By-Poloss..-..CVE-2026-12432-PoC

WP Full Stripe Free <= 8.4.3 - Missing Authorization

★ 1 · 2026-06-27
CVE-2026-48020
PoCs 1 ★ 0 Last push 2026-06-27 (3 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/Hunt-Benito/traefik-stripprefix-auth-bypass-cve-2026-48020-path-normalization
Show 1 repositories
Hunt-Benito/traefik-stripprefix-auth-bypass-cve-2026-48020-path-normalization
★ 0 · 2026-06-27
CVE-2024-32114
PoCs 1 ★ 84 Last push 2026-06-27 (3 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/Catherines77/ActiveMQ-EXPtools
Show 1 repositories
Catherines77/ActiveMQ-EXPtools

Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)

★ 84 · 2026-06-27
CVE-2022-41678
PoCs 3 ★ 84 Last push 2026-06-27 (3 months, 2 weeks ago)

Fetching description from NVD…

Top PoC: https://github.com/Catherines77/ActiveMQ-EXPtools
Show 3 repositories
Catherines77/ActiveMQ-EXPtools

Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)

★ 84 · 2026-06-27
mbadanoiu/CVE-2022-41678

CVE-2022-41678: Dangerous MBeans Accessible via Jolokia API in Apache ActiveMQ

★ 2 · 2024-11-28
URJACK2025/CVE-2022-41678

CVE-2022-41678 是 Apache ActiveMQ 中的一个远程代码执行漏洞。该漏洞允许攻击者通过 JMX (Java Management Extensions) 接口修改 Log4j 配置或 JFR (Java Flight Recorder) 配置，从而写入恶意的 JSP webshell 到服务…

★ 2 · 2025-10-14
< Prev Page 97 / 446 Next >

Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.