mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-27 16:51:03 +00:00
0xMarcio
8c739f44e5
Every colour is now a Primer dark_default token. The header band, its four capability pills and the heading above the trending table are gone, so the search field is the first thing on the page and the switcher labels its own table. Rows tighten to 10px, descriptions clamp to two lines, and the PoC list loses its box for a hairline rule. Blue is the only thing you can click. Amber means 500 stars or more and red means known-exploited, and nothing else carries a hue: the star glyph is dimmed at every value so the column reads as numbers rather than symbols. The handoff's placeholder wanted an em dash. It reads "Search CVE, vendor, product or keyword, exclude with -windows" with the middot the count line already uses, and the six em dashes I had left in code comments are gone too.
Recently updated Proof-of-Concepts
2026
Latest 20 of 255 Repositories
| Stars | Updated | Name | Description |
|---|---|---|---|
| 79⭐ | 4 days ago | CVE-2026-75604-poc | CVE-2026-75604 Next.js Windows RCE poc |
| 147⭐ | 8 days ago | CVE-2026-62911 | POC pre-auth RCE on Exchange |
| 53⭐ | 9 days ago | CVE-2026-64638-PoC-XSS2Shell- | XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template |
| 35⭐ | 10 days ago | CVE-2026-18963-Exploit | Exploit for KeyCloak CVE-2026-18963 |
| 402⭐ | 10 days ago | CVE-2026-9830 | CVE-2026-9830 Proof of Concept |
| 531⭐ | 10 days ago | cve-2026-41940-PoC | A cPanel and WHM authentication bypassing tool |
| 824⭐ | 10 days ago | CVE-2026-24061 | CVE-2026-24061 exploit PoC |
| 60⭐ | 16 days ago | watchTowr-vs-Citrix-Netscaler-PreAuth-RCE-CVE-2026-8452 | CVE-2026-8452 PreAuth RCE |
| 24⭐ | 17 days ago | CVE-2026-66804-CrossDevice-Service-EoP | CVE-2026-66804 Windows Cross Device virtual camera EoP - Standard user to SYSTEM |
| 33⭐ | 18 days ago | CVE-2026-68138 | CVE-2026-68138 Linux qdisc rate-table race local privilege escalation PoC |
| 19⭐ | 23 days ago | CVE-2026-63077 | Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077) |
| 58⭐ | 24 days ago | CVE-2026-55040 | Microsoft SharePoint JWT Authentication Bypass (CVE-2026-55040) |
| 50⭐ | 27 days ago | CVE-2026-64560-Analysis | |
| 17⭐ | 27 days ago | CVE-2026-60004-POC | CVE-2026-60004 Pre-Auth RCE Exploit — Gitea <= 1.27.0 diffpatch git hook injection (CVSS 9.8) |
| 80⭐ | 31 days ago | CVE-2026-43499-Poc-Analysis | Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only. |
| 23⭐ | 32 days ago | CVE-2026-66066-POC | PoC for CVE-2026-66066 in Ruby on Rails |
| 11⭐ | 33 days ago | CVE-2026-16232 | A proof-of-concept script to exploit CVE-2026-16232, an authentication bypass via the SmartConsole login process using an application token. |
| 325⭐ | 34 days ago | CVE-2026-54121 | Certighost POC |
| 35⭐ | 34 days ago | CVE-2026-42533 | nginx heap buffer overflow PoC — CVE-2026-42533 pre-auth RCE via two-pass capture clobbering. Crash confirmed on Ubuntu 24.04. |
| 27⭐ | 35 days ago | CVE-2026-54121-PoC-Exploit | 👻 CVE-2026-54121 - Best CertiGhost AD CS Multi-Exploit Framework / Advanced toolkit with rogue DC/LDAP servers, certificate abuse, PKINIT hash extraction. Features: detect safe check, exploit full multi-threaded. 🛡️ CVSS 8.8 High - Use Ethically, Stay Legal. 🔒 |
2025
Latest 16 of 24 Repositories
| Stars | Updated | Name | Description |
|---|---|---|---|
| 5⭐ | 3 days ago | vivo_iqoo_neo_9_root_research_on_CVE-2025-21479 | |
| 4⭐ | 11 days ago | cve-2025-21479_iqooneo8 | Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables SELinux, spawns root shell |
| 20⭐ | 20 days ago | CVE-2025-7771 | ThrottleStop.sys Arbitrary Physical Memory R/W |
| 6⭐ | 24 days ago | CVE-2025-8045 | Dirty Pagetable Exploit for CVE-2025-8045 |
| 6⭐ | 28 days ago | SELinux-Permissive-Only-CVE-2025-21479 | This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the adreno kgsl on many devices including Samsung snapdragon devices |
| 4⭐ | 40 days ago | CVE-2025-32432 | Exploit, POC for CVE-2025-32432, CraftCMS2Shell |
| 4⭐ | 42 days ago | CVE-2025-64512 | CVE-2025-64512: pdfminer.six pickle deserialization rce; .pickle.gz + pdf generator w/ custom payloads |
| 5⭐ | 44 days ago | CVE-2025-8110-gogs-poc | PoC for CVE-2025-8110 - Gogs arbitrary file write via symlink |
| 7⭐ | 53 days ago | CVE-2025-30065 | This PoC targets CVE-2025-30065, an RCE vulnerability in Apache Parquet via Avro schema deserialization. It abuses the getDefaultValue() mechanism to instantiate arbitrary record types during parsing, enabling code execution when untrusted data is processed without proper controls. |
| 4⭐ | 59 days ago | CVE-2025-69212-PoC | OpenSTAManager v2.9.8 and earlier versions contain a critical OS Command Injection vulnerability in the P7M (signed XML) file decoding function. |
| 3⭐ | 59 days ago | CVE-2025-57819 | CVE-2025-57819 - FreePBX Unauthenticated Remote Code Execution (RCE) |
| 4⭐ | 64 days ago | CVE-2025-69212-PoC | |
| 5⭐ | 66 days ago | CVE-2025-8110 | PoC exploit for CVE-2025-8110 |
| 14⭐ | 79 days ago | vulnerable-nextjs-14-CVE-2025-29927 | |
| 13⭐ | 85 days ago | FreePBX-CVE-2025-57819-RCE | |
| 7⭐ | 85 days ago | CVE-2025-57819-poc | CVE-2025-57819 -> rce |
2024
Latest 7 of 10 Repositories
| Stars | Updated | Name | Description |
|---|---|---|---|
| 16⭐ | 14 days ago | CVE-2024-56426 | A PoC of the CVE-2024-56426 vulnerability. |
| 3⭐ | 15 days ago | CVE-2024-56426 | CVE-2024-56426 Exynos9830 Bootrom Exploit - SM-G985F |
| 3⭐ | 32 days ago | CVE-2024-36104-PoC | PoC for CVE-2024-36104 — unauthenticated Groovy RCE in Apache OFBiz (<18.12.14) via /%2e/%2e/ view path traversal to ProgramExport |
| 31⭐ | 63 days ago | CVE-2024-24919-Bulk-Scanner | CVE-2024-24919 [Check Point Security Gateway Information Disclosure] |
| 3⭐ | 70 days ago | CVE-2024-36991 | Exploit for CVE-2024-36991 , written by me, enumerates a handfull of things, not all, cause not needed. |
| 7⭐ | 79 days ago | CVE-2024-27983-nodejs-http2 | CVE-2024-27983 this repository builds up a vulnerable HTTP2 Node.js server (server-nossl.js) based on CVE-2024-27983 which exploits a continuation flood vulnerability in HTTP2 servers. |
| 4⭐ | 85 days ago | CVE-2024-1065 | Page Cache Exploit for CVE-2024-1065 |
2023
Latest 5 of 8 Repositories
| Stars | Updated | Name | Description |
|---|---|---|---|
| 3⭐ | 34 days ago | CVE-2023-52076-PoC | PoC exploit for CVE-2023-52076 - zip-slip path traversal in Atril/Xreader (MATE/Cinnamon) enabling arbitrary file write and RCE via crafted EPUB. Authorized security testing only. |
| 5⭐ | 39 days ago | CVE-2023-36003 | PoC for CVE-2023-36003: Windows Exploit Security Feature Bypass Vulnerability in Windows Defender. |
| 3⭐ | 54 days ago | cve-2023-4911-exploit-optimized | Pure C exploit for CVE-2023-4911 (Looney Tunables) — x86_64 & aarch64 implementations. Multi-processing brute-forcing, dynamic calibration, integrated ELF parser. |
| 15⭐ | 56 days ago | CVE-2023-32315-EXPLOIT | A PoC exploit for CVE-2023-32315 - Openfire Authentication Bypass |
| 6⭐ | 72 days ago | CVE-2023-6019 | PoC exploit for CVE-2023-6019 - Remote Code Execution via unauthenticated Ray Dashboard Jobs API. |
2022
Latest 1 of 11 Repositories
| Stars | Updated | Name | Description |
|---|---|---|---|
| 6⭐ | 74 days ago | NimbusPWN-CVE-2022-29799-29800 | NimbusPwn (CVE-2022-29799/29800) local privilege escalation PoC in C. |