mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-27 16:51:03 +00:00
0xMarcio
66a4f41227
The audit only ever asked GitHub about repositories, leaving 60,112 reference URLs unchecked since the corpus was inherited. Sampling put hard 404s at 4%, and one host accounts for a fifth of that on its own: CIS retired the OVAL Repository, so all 942 links to it are permanently gone and are removed in the next commit. The rest is diffuse, so it needs sweeping rather than a rule. Check an eighth of the URLs each week alongside the repositories, ordered round-robin by host so a slice does not arrive at one server as a burst. Only a 404 or 410 removes a link: a timeout, a refused HEAD or a 403 keeps it, and update_cves already applies the same test to references it discovers, so this holds inherited links to the standard new ones meet.
Recently updated Proof-of-Concepts
2026
Latest 20 of 257 Repositories
| Stars | Updated | Name | Description |
|---|---|---|---|
| 79⭐ | 2 days ago | CVE-2026-75604-poc | CVE-2026-75604 Next.js Windows RCE poc |
| 146⭐ | 8 days ago | CVE-2026-62911 | POC pre-auth RCE on Exchange |
| 53⭐ | 9 days ago | CVE-2026-64638-PoC-XSS2Shell- | XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template |
| 35⭐ | 9 days ago | CVE-2026-18963-Exploit | Exploit for KeyCloak CVE-2026-18963 |
| 401⭐ | 9 days ago | CVE-2026-9830 | CVE-2026-9830 Proof of Concept |
| 531⭐ | 10 days ago | cve-2026-41940-PoC | A cPanel and WHM authentication bypassing tool |
| 824⭐ | 10 days ago | CVE-2026-24061 | CVE-2026-24061 exploit PoC |
| 45⭐ | 13 days ago | CVE-2026-50416-writeup-and-poc | CVE-2026-50416: Windows 11 KASLR bypass |
| 60⭐ | 16 days ago | watchTowr-vs-Citrix-Netscaler-PreAuth-RCE-CVE-2026-8452 | CVE-2026-8452 PreAuth RCE |
| 24⭐ | 17 days ago | CVE-2026-66804-CrossDevice-Service-EoP | CVE-2026-66804 Windows Cross Device virtual camera EoP - Standard user to SYSTEM |
| 33⭐ | 18 days ago | CVE-2026-68138 | CVE-2026-68138 Linux qdisc rate-table race local privilege escalation PoC |
| 58⭐ | 20 days ago | CVE-2026-55040 | Microsoft SharePoint JWT Authentication Bypass (CVE-2026-55040) |
| 19⭐ | 23 days ago | CVE-2026-63077 | Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077) |
| 49⭐ | 27 days ago | CVE-2026-64560-Analysis | |
| 17⭐ | 27 days ago | CVE-2026-60004-POC | CVE-2026-60004 Pre-Auth RCE Exploit — Gitea <= 1.27.0 diffpatch git hook injection (CVSS 9.8) |
| 25⭐ | 31 days ago | CopyFail-CVE-2026-31431 | |
| 80⭐ | 31 days ago | CVE-2026-43499-Poc-Analysis | Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only. |
| 23⭐ | 31 days ago | CVE-2026-66066-POC | PoC for CVE-2026-66066 in Ruby on Rails |
| 11⭐ | 33 days ago | CVE-2026-16232 | A proof-of-concept script to exploit CVE-2026-16232, an authentication bypass via the SmartConsole login process using an application token. |
| 325⭐ | 33 days ago | CVE-2026-54121 | Certighost POC |
2025
Latest 20 of 24 Repositories
| Stars | Updated | Name | Description |
|---|---|---|---|
| 3⭐ | 17 hours ago | CVE-2025-54424 | CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐 |
| 3⭐ | 3 days ago | Project-CVE-2025-54068 | Fast Python scanner detects vulnerable Laravel Livewire v3 sites (CVE-2025-54068, CVSS 9.2). Separates risky sites into vuln.txt, safe sites into safe.txt. |
| 5⭐ | 3 days ago | vivo_iqoo_neo_9_root_research_on_CVE-2025-21479 | |
| 4⭐ | 9 days ago | cve-2025-21479_iqooneo8 | Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables SELinux, spawns root shell |
| 6⭐ | 16 days ago | SELinux-Permissive-Only-CVE-2025-21479 | This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the adreno kgsl on many devices including Samsung snapdragon devices |
| 25⭐ | 17 days ago | CVE-2025-32463 | This CVE addresses a vulnerability in sudo versions 1.9.14 to 1.9.17, enabling unauthorized local privilege escalation to root access. |
| 20⭐ | 19 days ago | CVE-2025-7771 | ThrottleStop.sys Arbitrary Physical Memory R/W |
| 6⭐ | 24 days ago | CVE-2025-8045 | Dirty Pagetable Exploit for CVE-2025-8045 |
| 18⭐ | 31 days ago | CVE-2025-53770-Scanner | ToolShell scanner - CVE-2025-53770 and detection information |
| 4⭐ | 40 days ago | CVE-2025-32432 | Exploit, POC for CVE-2025-32432, CraftCMS2Shell |
| 4⭐ | 42 days ago | CVE-2025-64512 | CVE-2025-64512: pdfminer.six pickle deserialization rce; .pickle.gz + pdf generator w/ custom payloads |
| 5⭐ | 44 days ago | CVE-2025-8110-gogs-poc | PoC for CVE-2025-8110 - Gogs arbitrary file write via symlink |
| 7⭐ | 48 days ago | React2Shell-CVE-2025-55182 | React2Shell CVE-2025-55182: unauthenticated unsafe deserialization in React Server Components leading to reliable remote code execution via the Flight protocol. |
| 7⭐ | 53 days ago | CVE-2025-30065 | This PoC targets CVE-2025-30065, an RCE vulnerability in Apache Parquet via Avro schema deserialization. It abuses the getDefaultValue() mechanism to instantiate arbitrary record types during parsing, enabling code execution when untrusted data is processed without proper controls. |
| 4⭐ | 59 days ago | CVE-2025-69212-PoC | OpenSTAManager v2.9.8 and earlier versions contain a critical OS Command Injection vulnerability in the P7M (signed XML) file decoding function. |
| 3⭐ | 59 days ago | CVE-2025-57819 | CVE-2025-57819 - FreePBX Unauthenticated Remote Code Execution (RCE) |
| 15⭐ | 63 days ago | CVE-2025-27591 | self cleaning CVE-2025-27591 Poc that grants a root reverse shell instead of modifying passwd files |
| 4⭐ | 63 days ago | CVE-2025-69212-PoC | |
| 5⭐ | 66 days ago | CVE-2025-8110 | PoC exploit for CVE-2025-8110 |
| 3⭐ | 75 days ago | CVE-2025-7441 | StoryChief <= 1.0.42 - Unauthenticated Arbitrary File Upload |
2024
Latest 11 of 11 Repositories
| Stars | Updated | Name | Description |
|---|---|---|---|
| 16⭐ | 7 days ago | CVE-2024-56426 | A PoC of the CVE-2024-56426 vulnerability. |
| 3⭐ | 15 days ago | CVE-2024-56426 | CVE-2024-56426 Exynos9830 Bootrom Exploit - SM-G985F |
| 33⭐ | 31 days ago | CVE-2024-4577-PHP-RCE | PHP RCE PoC for CVE-2024-4577 written in bash, go, python and a nuclei template |
| 3⭐ | 32 days ago | CVE-2024-36104-PoC | PoC for CVE-2024-36104 — unauthenticated Groovy RCE in Apache OFBiz (<18.12.14) via /%2e/%2e/ view path traversal to ProgramExport |
| 8⭐ | 61 days ago | CVE-2024-37032-PoC | CVE-2024-37032 (Probllama) PoC for Ollama ≤0.1.33: path traversal and arbitrary file write via model digest handling, leading to automated privilege escalation. |
| 31⭐ | 63 days ago | CVE-2024-24919-Bulk-Scanner | CVE-2024-24919 [Check Point Security Gateway Information Disclosure] |
| 3⭐ | 70 days ago | CVE-2024-36991 | Exploit for CVE-2024-36991 , written by me, enumerates a handfull of things, not all, cause not needed. |
| 7⭐ | 79 days ago | CVE-2024-27983-nodejs-http2 | CVE-2024-27983 this repository builds up a vulnerable HTTP2 Node.js server (server-nossl.js) based on CVE-2024-27983 which exploits a continuation flood vulnerability in HTTP2 servers. |
| 4⭐ | 81 days ago | CVE-2024-1065 | Page Cache Exploit for CVE-2024-1065 |
| 44⭐ | 83 days ago | GeoServer-Tools-CVE-2024-36401 | CVE-2024-36401 图形化利用工具，支持各个JDK版本利用以及回显、内存马实现 |
| 3⭐ | 89 days ago | CVE-2024-21182 | Reproducible Docker lab for CVE-2024-21182 — Oracle WebLogic T3/IIOP OpaqueReference JNDI injection → unauthenticated RCE (CVE-2023-21839 patch-bypass family). One-command validate.sh. |
2023
Latest 8 of 8 Repositories
| Stars | Updated | Name | Description |
|---|---|---|---|
| 116⭐ | 19 days ago | CVE-2023-21839 | Weblogic CVE-2023-21839 RCE (无需Java依赖一键RCE) |
| 33⭐ | 31 days ago | CVE-2023-20198-Checker | CVE-2023-20198 & 0Day Implant Scanner |
| 3⭐ | 34 days ago | CVE-2023-52076-PoC | PoC exploit for CVE-2023-52076 - zip-slip path traversal in Atril/Xreader (MATE/Cinnamon) enabling arbitrary file write and RCE via crafted EPUB. Authorized security testing only. |
| 5⭐ | 39 days ago | CVE-2023-36003 | PoC for CVE-2023-36003: Windows Exploit Security Feature Bypass Vulnerability in Windows Defender. |
| 3⭐ | 54 days ago | cve-2023-4911-exploit-optimized | Pure C exploit for CVE-2023-4911 (Looney Tunables) — x86_64 & aarch64 implementations. Multi-processing brute-forcing, dynamic calibration, integrated ELF parser. |
| 5⭐ | 54 days ago | CVE-2023-22515 | CVE-2023-22515 - Broken Access Control Vulnerability in Confluence Data Center and Server |
| 15⭐ | 56 days ago | CVE-2023-32315-EXPLOIT | A PoC exploit for CVE-2023-32315 - Openfire Authentication Bypass |
| 6⭐ | 72 days ago | CVE-2023-6019 | PoC exploit for CVE-2023-6019 - Remote Code Execution via unauthenticated Ray Dashboard Jobs API. |
2022
Latest 11 of 11 Repositories
| Stars | Updated | Name | Description |
|---|---|---|---|
| 6⭐ | 1 day ago | CVE-2022-22077 | CVE-2022-22077 is a high-severity vulnerability (CVSS score 7.8) affecting the RTCore64.sys driver distributed with MSI Center |
| 5⭐ | 18 days ago | CVE-2022-22947_exp | CVE-2022-22947 Exploit script |
| 59⭐ | 31 days ago | F5-CVE-2022-1388-Exploit | Exploit and Check Script for CVE 2022-1388 |
| 10⭐ | 55 days ago | CVE-2022-23093 | The FreeBSD ICMP buffer overflow, freebsd buffer overflow poc |
| 7⭐ | 55 days ago | CVE-2022-47966 | The manage engine mass loader for CVE-2022-47966 |
| 3⭐ | 55 days ago | CVE-2022-46169 | Cacti Unauthenticated Command Injection |
| 12⭐ | 55 days ago | CVE-2022-36804 | A loader for bitbucket 2022 rce (cve-2022-36804) |
| 10⭐ | 55 days ago | CVE-2022-29464 | A bots loader for CVE-2022-29464 with multithreading |
| 18⭐ | 55 days ago | CVE-2022-27925 | A loader for zimbra 2022 rce (cve-2022-27925) |
| 10⭐ | 55 days ago | CVE-2022-26265 | The first proof of concept of the Contao CMS RCE |
| 6⭐ | 74 days ago | NimbusPWN-CVE-2022-29799-29800 | NimbusPwn (CVE-2022-29799/29800) local privilege escalation PoC in C. |