mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-27 16:51:03 +00:00
0xMarcio
2b6547ef29
KEV reached the site three days ago but nothing in the markdown said a vulnerability was under active attack, and the repository is what most people actually read. 1,595 entries now carry a red CISA KEV shield beside their product and vulnerability badges, marked for ransomware use where CISA records it. update_cves writes the badge on entries it creates, and the weekly audit reconciles the whole set against the refreshed catalogue, so an entry CISA adds gains the badge and one it withdraws loses it. Re-running the sync is a no-op.
Recently updated Proof-of-Concepts
2026
Latest 20 of 255 Repositories
| Stars | Updated | Name | Description |
|---|---|---|---|
| 79⭐ | 4 days ago | CVE-2026-75604-poc | CVE-2026-75604 Next.js Windows RCE poc |
| 147⭐ | 8 days ago | CVE-2026-62911 | POC pre-auth RCE on Exchange |
| 53⭐ | 9 days ago | CVE-2026-64638-PoC-XSS2Shell- | XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template |
| 35⭐ | 10 days ago | CVE-2026-18963-Exploit | Exploit for KeyCloak CVE-2026-18963 |
| 402⭐ | 10 days ago | CVE-2026-9830 | CVE-2026-9830 Proof of Concept |
| 531⭐ | 10 days ago | cve-2026-41940-PoC | A cPanel and WHM authentication bypassing tool |
| 824⭐ | 10 days ago | CVE-2026-24061 | CVE-2026-24061 exploit PoC |
| 60⭐ | 16 days ago | watchTowr-vs-Citrix-Netscaler-PreAuth-RCE-CVE-2026-8452 | CVE-2026-8452 PreAuth RCE |
| 24⭐ | 17 days ago | CVE-2026-66804-CrossDevice-Service-EoP | CVE-2026-66804 Windows Cross Device virtual camera EoP - Standard user to SYSTEM |
| 33⭐ | 18 days ago | CVE-2026-68138 | CVE-2026-68138 Linux qdisc rate-table race local privilege escalation PoC |
| 19⭐ | 23 days ago | CVE-2026-63077 | Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077) |
| 58⭐ | 24 days ago | CVE-2026-55040 | Microsoft SharePoint JWT Authentication Bypass (CVE-2026-55040) |
| 50⭐ | 27 days ago | CVE-2026-64560-Analysis | |
| 17⭐ | 27 days ago | CVE-2026-60004-POC | CVE-2026-60004 Pre-Auth RCE Exploit — Gitea <= 1.27.0 diffpatch git hook injection (CVSS 9.8) |
| 80⭐ | 31 days ago | CVE-2026-43499-Poc-Analysis | Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only. |
| 23⭐ | 32 days ago | CVE-2026-66066-POC | PoC for CVE-2026-66066 in Ruby on Rails |
| 11⭐ | 33 days ago | CVE-2026-16232 | A proof-of-concept script to exploit CVE-2026-16232, an authentication bypass via the SmartConsole login process using an application token. |
| 325⭐ | 34 days ago | CVE-2026-54121 | Certighost POC |
| 35⭐ | 34 days ago | CVE-2026-42533 | nginx heap buffer overflow PoC — CVE-2026-42533 pre-auth RCE via two-pass capture clobbering. Crash confirmed on Ubuntu 24.04. |
| 27⭐ | 35 days ago | CVE-2026-54121-PoC-Exploit | 👻 CVE-2026-54121 - Best CertiGhost AD CS Multi-Exploit Framework / Advanced toolkit with rogue DC/LDAP servers, certificate abuse, PKINIT hash extraction. Features: detect safe check, exploit full multi-threaded. 🛡️ CVSS 8.8 High - Use Ethically, Stay Legal. 🔒 |
2025
Latest 16 of 24 Repositories
| Stars | Updated | Name | Description |
|---|---|---|---|
| 5⭐ | 3 days ago | vivo_iqoo_neo_9_root_research_on_CVE-2025-21479 | |
| 4⭐ | 11 days ago | cve-2025-21479_iqooneo8 | Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables SELinux, spawns root shell |
| 20⭐ | 20 days ago | CVE-2025-7771 | ThrottleStop.sys Arbitrary Physical Memory R/W |
| 6⭐ | 24 days ago | CVE-2025-8045 | Dirty Pagetable Exploit for CVE-2025-8045 |
| 6⭐ | 28 days ago | SELinux-Permissive-Only-CVE-2025-21479 | This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the adreno kgsl on many devices including Samsung snapdragon devices |
| 4⭐ | 40 days ago | CVE-2025-32432 | Exploit, POC for CVE-2025-32432, CraftCMS2Shell |
| 4⭐ | 42 days ago | CVE-2025-64512 | CVE-2025-64512: pdfminer.six pickle deserialization rce; .pickle.gz + pdf generator w/ custom payloads |
| 5⭐ | 44 days ago | CVE-2025-8110-gogs-poc | PoC for CVE-2025-8110 - Gogs arbitrary file write via symlink |
| 7⭐ | 53 days ago | CVE-2025-30065 | This PoC targets CVE-2025-30065, an RCE vulnerability in Apache Parquet via Avro schema deserialization. It abuses the getDefaultValue() mechanism to instantiate arbitrary record types during parsing, enabling code execution when untrusted data is processed without proper controls. |
| 4⭐ | 59 days ago | CVE-2025-69212-PoC | OpenSTAManager v2.9.8 and earlier versions contain a critical OS Command Injection vulnerability in the P7M (signed XML) file decoding function. |
| 3⭐ | 59 days ago | CVE-2025-57819 | CVE-2025-57819 - FreePBX Unauthenticated Remote Code Execution (RCE) |
| 4⭐ | 64 days ago | CVE-2025-69212-PoC | |
| 5⭐ | 66 days ago | CVE-2025-8110 | PoC exploit for CVE-2025-8110 |
| 14⭐ | 79 days ago | vulnerable-nextjs-14-CVE-2025-29927 | |
| 13⭐ | 85 days ago | FreePBX-CVE-2025-57819-RCE | |
| 7⭐ | 85 days ago | CVE-2025-57819-poc | CVE-2025-57819 -> rce |
2024
Latest 7 of 10 Repositories
| Stars | Updated | Name | Description |
|---|---|---|---|
| 16⭐ | 14 days ago | CVE-2024-56426 | A PoC of the CVE-2024-56426 vulnerability. |
| 3⭐ | 15 days ago | CVE-2024-56426 | CVE-2024-56426 Exynos9830 Bootrom Exploit - SM-G985F |
| 3⭐ | 32 days ago | CVE-2024-36104-PoC | PoC for CVE-2024-36104 — unauthenticated Groovy RCE in Apache OFBiz (<18.12.14) via /%2e/%2e/ view path traversal to ProgramExport |
| 31⭐ | 63 days ago | CVE-2024-24919-Bulk-Scanner | CVE-2024-24919 [Check Point Security Gateway Information Disclosure] |
| 3⭐ | 70 days ago | CVE-2024-36991 | Exploit for CVE-2024-36991 , written by me, enumerates a handfull of things, not all, cause not needed. |
| 7⭐ | 79 days ago | CVE-2024-27983-nodejs-http2 | CVE-2024-27983 this repository builds up a vulnerable HTTP2 Node.js server (server-nossl.js) based on CVE-2024-27983 which exploits a continuation flood vulnerability in HTTP2 servers. |
| 4⭐ | 85 days ago | CVE-2024-1065 | Page Cache Exploit for CVE-2024-1065 |
2023
Latest 5 of 8 Repositories
| Stars | Updated | Name | Description |
|---|---|---|---|
| 3⭐ | 34 days ago | CVE-2023-52076-PoC | PoC exploit for CVE-2023-52076 - zip-slip path traversal in Atril/Xreader (MATE/Cinnamon) enabling arbitrary file write and RCE via crafted EPUB. Authorized security testing only. |
| 5⭐ | 39 days ago | CVE-2023-36003 | PoC for CVE-2023-36003: Windows Exploit Security Feature Bypass Vulnerability in Windows Defender. |
| 3⭐ | 54 days ago | cve-2023-4911-exploit-optimized | Pure C exploit for CVE-2023-4911 (Looney Tunables) — x86_64 & aarch64 implementations. Multi-processing brute-forcing, dynamic calibration, integrated ELF parser. |
| 15⭐ | 56 days ago | CVE-2023-32315-EXPLOIT | A PoC exploit for CVE-2023-32315 - Openfire Authentication Bypass |
| 6⭐ | 72 days ago | CVE-2023-6019 | PoC exploit for CVE-2023-6019 - Remote Code Execution via unauthenticated Ray Dashboard Jobs API. |
2022
Latest 1 of 11 Repositories
| Stars | Updated | Name | Description |
|---|---|---|---|
| 6⭐ | 74 days ago | NimbusPWN-CVE-2022-29799-29800 | NimbusPwn (CVE-2022-29799/29800) local privilege escalation PoC in C. |