mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-27 16:51:03 +00:00
0xMarcio
79da26dd45
A pass over 104,043 entries costs 25-125ms, which is fast enough to feel instant once but not nine times in a row while a word is typed. Coalesce a burst at 160ms, skip single-character queries that match most of the index without narrowing anything, and total the PoC count during the scan rather than walking the matches again to display it.
Recently updated Proof-of-Concepts
2026
Latest 20 of 525 Repositories
| Stars | Updated | Name | Description |
|---|---|---|---|
| 4056⭐ | 122 days ago | copy-fail-CVE-2026-31431 | Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code |
| 571⭐ | 123 days ago | cve_2026_31431 | Exploit POC for CVE_2026_31431 |
| 325⭐ | 33 days ago | CVE-2026-54121 | Certighost POC |
| 531⭐ | 10 days ago | cve-2026-41940-PoC | A cPanel and WHM authentication bypassing tool |
| 235⭐ | 45 days ago | CVE-2026-43499-popsicle | CVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k |
| 212⭐ | 89 days ago | CVE-2026-41089 | CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL) |
| 260⭐ | 157 days ago | CVE-2026-21858 | n8n Ni8mare - Unauthenticated Arbitrary File Read to RCE Chain (CVSS 10.0) |
| 262⭐ | 103 days ago | CVE-2026-40369-EXPLOIT | Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browsers render process sandbox |
| 207⭐ | 220 days ago | CVE-2026-24061 | Exploitation of CVE-2026-24061 |
| 154⭐ | 64 days ago | CVE-2026-43499 | CVE-2026-43499 PoC |
| 824⭐ | 10 days ago | CVE-2026-24061 | CVE-2026-24061 exploit PoC |
| 146⭐ | 8 days ago | CVE-2026-62911 | POC pre-auth RCE on Exchange |
| 79⭐ | 2 days ago | CVE-2026-75604-poc | CVE-2026-75604 Next.js Windows RCE poc |
| 128⭐ | 192 days ago | CVE-2026-20817 | Windows Error Reporting ALPC Elevation of Privilege (CVE-2026-20817) - Proof-of-Concept exploit demonstrating local privilege escalation via WER service. |
| 100⭐ | 54 days ago | CVE-2026-42980-POC | CVE-2026-42980 PUBLIC EXPLOIT + RESEARCH |
| 111⭐ | 122 days ago | CVE-2026-31431-Advanced-Exploit | CVE-2026-31431 纯文件利用 |
| 119⭐ | 129 days ago | CVE-2026-41651 | |
| 18⭐ | 47 days ago | CVE-2026-43499-Poc-Analysis | Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only. |
| 63⭐ | 67 days ago | CVE-2026-45504 | CVE-2026-45504 Microsoft Exchange File Read |
| 80⭐ | 31 days ago | CVE-2026-43499-Poc-Analysis | Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only. |
2025
Latest 20 of 605 Repositories
| Stars | Updated | Name | Description |
|---|---|---|---|
| 1430⭐ | 265 days ago | CVE-2025-55182 | Explanation and full RCE PoC for CVE-2025-55182 |
| 793⭐ | 264 days ago | CVE-2025-55182-research | CVE-2025-55182 POC |
| 715⭐ | 193 days ago | CVE-2025-33073 | PoC Exploit for the NTLM reflection SMB flaw. |
| 529⭐ | 284 days ago | CVE-2025-32463_chwoot | Escalation of Privilege to the root through sudo binary with chroot option. CVE-2025-32463 |
| 475⭐ | 424 days ago | CVE-2025-32463 | Local Privilege Escalation to Root via Sudo chroot in Linux |
| 268⭐ | 418 days ago | CVE-2025-48799 | |
| 315⭐ | 275 days ago | CVE-2025-53770-Exploit | SharePoint WebPart Injection Exploit Tool |
| 316⭐ | 267 days ago | CVE-2025-55182 | RSC/Next.js RCE Vulnerability Detector & PoC Chrome Extension – CVE-2025-55182 & CVE-2025-66478 |
| 1058⭐ | 268 days ago | React2Shell-CVE-2025-55182-original-poc | Original Proof-of-Concepts for React2Shell CVE-2025-55182 |
| 408⭐ | 527 days ago | CVE-2025-24071_PoC | CVE-2025-24071: NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File |
| 215⭐ | 420 days ago | CVE-2025-32023 | PoC & Exploit for CVE-2025-32023 / PlaidCTF 2025 "Zerodeo" |
| 385⭐ | 319 days ago | ColorOS-CVE-2025-10184 | ColorOS短信漏洞，以及用户自救方案 |
| 282⭐ | 267 days ago | CVE-2025-55182-advanced-scanner- | |
| 431⭐ | 257 days ago | Next.js-RSC-RCE-Scanner-CVE-2025-66478 | A command-line scanner for batch detection of Next.js application versions and determining if they are affected by CVE-2025-66478 vulnerability. |
| 197⭐ | 534 days ago | POC-CVE-2025-24813 | his repository contains an automated Proof of Concept (PoC) script for exploiting CVE-2025-24813, a Remote Code Execution (RCE) vulnerability in Apache Tomcat. The vulnerability allows an attacker to upload a malicious serialized payload to the server, leading to arbitrary code execution via deserialization when specific conditions are met. |
| 233⭐ | 504 days ago | CVE-2025-21333-POC | POC exploit for CVE-2025-21333 heap-based buffer overflow. It leverages WNF state data and I/O ring IOP_MC_BUFFER_ENTRY |
| 190⭐ | 186 days ago | RSC-Detect-CVE-2025-55182 | RSC Detect CVE 2025 55182 |
| 196⭐ | 516 days ago | CVE-2025-30208-EXP | CVE-2025-30208-EXP |
| 161⭐ | 450 days ago | CVE-2025-21756 | Exploit for CVE-2025-21756 for Linux kernel 6.6.75. My first linux kernel exploit! |
| 143⭐ | 393 days ago | CVE-2025-32433 | CVE-2025-32433 https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2 |
2024
Latest 20 of 664 Repositories
| Stars | Updated | Name | Description |
|---|---|---|---|
| 2457⭐ | 865 days ago | CVE-2024-1086 | Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images. |
| 693⭐ | 733 days ago | CVE-2024-38063 | poc for CVE-2024-38063 (RCE in tcpip.sys) |
| 496⭐ | 790 days ago | cve-2024-6387-poc | a signal handler race condition in OpenSSH's server (sshd) |
| 520⭐ | 605 days ago | CVE-2024-49113 | LdapNightmare is a PoC tool that tests a vulnerable Windows Server against CVE-2024-49113 |
| 527⭐ | 93 days ago | CVE-2024-6387_Check | CVE-2024-6387_Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH |
| 224⭐ | 746 days ago | CVE-2024-38077 | RDL的堆溢出导致的RCE |
| 379⭐ | 790 days ago | cve-2024-6387-poc | 32-bit PoC for CVE-2024-6387 — mirror of the original 7etsuo/cve-2024-6387-poc |
| 335⭐ | 865 days ago | CVE-2024-21338 | Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled. |
| 330⭐ | 636 days ago | CVE-2024-0044 | CVE-2024-0044: a "run-as any app" high-severity vulnerability affecting Android versions 12 and 13 |
| 321⭐ | 799 days ago | CVE-2024-4577 | PHP CGI Argument Injection (CVE-2024-4577) Remote Code Execution PoC |
| 289⭐ | 760 days ago | CVE-2024-30088 | |
| 278⭐ | 900 days ago | CVE-2024-21413 | CVE-2024-21413 PoC for THM Lab |
| 769⭐ | 923 days ago | CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability | Microsoft-Outlook-Remote-Code-Execution-Vulnerability |
| 271⭐ | 561 days ago | CVE-2024-49138-POC | POC exploit for CVE-2024-49138 |
| 194⭐ | 738 days ago | CVE-2024-6387 | Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (CVE-2024-6387) |
| 9⭐ | 751 days ago | CVE-2024-38077-POC | |
| 235⭐ | 668 days ago | CVE_2024_30078_POC_WIFI | basic concept for the latest windows wifi driver CVE |
| 180⭐ | 916 days ago | CVE-2024-25600 | Unauthenticated Remote Code Execution – Bricks <= 1.9.6 |
| 217⭐ | 843 days ago | CVE-2024-21111 | Oracle VirtualBox Elevation of Privilege (Local Privilege Escalation) Vulnerability |
| 136⭐ | 615 days ago | CVE-2024-7479_CVE-2024-7481 | TeamViewer User to Kernel Elevation of Privilege PoC. CVE-2024-7479 and CVE-2024-7481. ZDI-24-1289 and ZDI-24-1290. TV-2024-1006. |
2023
Latest 20 of 559 Repositories
| Stars | Updated | Name | Description |
|---|---|---|---|
| 782⭐ | 1008 days ago | CVE-2023-38831-winrar-exploit | CVE-2023-38831 winrar exploit generator |
| 382⭐ | 1202 days ago | CVE-2023-32233 | CVE-2023-32233: Linux内核中的安全漏洞 |
| 506⭐ | 1147 days ago | Windows_LPE_AFD_CVE-2023-21768 | LPE exploit for CVE-2023-21768 |
| 418⭐ | 1174 days ago | CVE-2023-0386 | CVE-2023-0386在ubuntu22.04上的提权 |
| 116⭐ | 19 days ago | CVE-2023-21839 | Weblogic CVE-2023-21839 RCE (无需Java依赖一键RCE) |
| 328⭐ | 1325 days ago | CVE-2023-21752 | |
| 393⭐ | 1061 days ago | CVE-2023-4911 | PoC for CVE-2023-4911 |
| 283⭐ | 999 days ago | CVE-2023-21608 | Adobe Acrobat Reader - CVE-2023-21608 - Remote Code Execution Exploit |
| 317⭐ | 986 days ago | CVE-2023-4863 | |
| 242⭐ | 1103 days ago | CVE-2023-36874 | |
| 247⭐ | 965 days ago | CVE-2023-44487 | Basic vulnerability scanning to see if web servers may be vulnerable to CVE-2023-44487 |
| 245⭐ | 960 days ago | CVE-2023-7028 | This repository presents a proof-of-concept of CVE-2023-7028 |
| 228⭐ | 1103 days ago | CVE-2023-3519 | RCE exploit for CVE-2023-3519 |
| 169⭐ | 1036 days ago | CVE-2023-36745 | |
| 228⭐ | 1174 days ago | CVE-2023-20887 | VMWare vRealize Network Insight Pre-Authenticated RCE (CVE-2023-20887) |
| 346⭐ | 1262 days ago | CVE-2023-23397-POC-Powershell | |
| 183⭐ | 1147 days ago | CVE-2023-28252 | |
| 136⭐ | 1055 days ago | CVE-2023-2640-CVE-2023-32629 | GameOver(lay) Ubuntu Privilege Escalation |
| 241⭐ | 1281 days ago | Weblogic-CVE-2023-21839 | |
| 207⭐ | 679 days ago | CVE-2023-46747-RCE | exploit for f5-big-ip RCE cve-2023-46747 |
2022
Latest 20 of 586 Repositories
| Stars | Updated | Name | Description |
|---|---|---|---|
| 461⭐ | 1676 days ago | CVE-2022-21882 | win32k LPE |
| 1133⭐ | 1636 days ago | CVE-2022-0847-DirtyPipe-Exploit | A root exploit for CVE-2022-0847 (Dirty Pipe) |
| 573⭐ | 1545 days ago | CVE-2022-23222 | CVE-2022-23222: Linux Kernel eBPF Local Privilege Escalation |
| 360⭐ | 1683 days ago | CVE-2022-21907 | HTTP Protocol Stack Remote Code Execution Vulnerability CVE-2022-21907 |
| 377⭐ | 1586 days ago | CVE-2022-29464 | WSO2 RCE (CVE-2022-29464) exploit and writeup. |
| 729⭐ | 1198 days ago | CVE-2022-0847-DirtyPipe-Exploits | A collection of exploits and documentation that can be used to exploit the Linux Dirty Pipe vulnerability. |
| 358⭐ | 1417 days ago | CVE-2022-40684 | A proof of concept exploit for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager |
| 437⭐ | 1637 days ago | CVE-2022-25636 | CVE-2022-25636 |
| 487⭐ | 1275 days ago | CVE-2022-2588 | exploit for CVE-2022-2588 |
| 497⭐ | 1617 days ago | CVE-2022-0995 | CVE-2022-0995 exploit |
| 415⭐ | 658 days ago | CVE-2022-33679 | One day based on https://googleprojectzero.blogspot.com/2022/10/rc4-is-still-considered-harmful.html |
| 387⭐ | 1405 days ago | CVE-2022-39197 | CobaltStrike <= 4.7.1 RCE |
| 282⭐ | 1305 days ago | CVE-2022-0847 | CVE-2022-0847-DirtyPipe-Exploit CVE-2022-0847 是存在于 Linux内核 5.8 及之后版本中的本地提权漏洞。攻击者通过利用此漏洞，可覆盖重写任意可读文件中的数据，从而可将普通权限的用户提升到特权 root。 CVE-2022-0847 的漏洞原理类似于 CVE-2016-5195 脏牛漏洞（Dirty Cow），但它更容易被利用。漏洞作者将此漏洞命名为“Dirty Pipe” |
| 353⭐ | 1068 days ago | CVE-2022-21894 | baton drop (CVE-2022-21894): Secure Boot Security Feature Bypass Vulnerability |
| 379⭐ | 1588 days ago | CVE-2022-0185 | CVE-2022-0185 |
| 595⭐ | 442 days ago | CVE-2022-38694_unlock_bootloader | This is a one-time signature verification bypass. For persistent signature verification bypass, check https://github.com/TomKing062/CVE-2022-38691_38692 |
| 284⭐ | 1461 days ago | cve-2022-27255 | |
| 265⭐ | 1282 days ago | CVE-2022-39952 | POC for CVE-2022-39952 |
| 238⭐ | 1665 days ago | CVE-2022-20699 | Cisco Anyconnect VPN unauth RCE (rwx stack) |
| 219⭐ | 1445 days ago | CVE-2022-34918 | CVE-2022-34918 netfilter nf_tables 本地提权 POC |