Recently updated Proof-of-Concepts

2025

Latest 20 of 457 Repositories

Stars	Updated	Name	Description
1290⭐	16 hours ago	CVE-2025-55182	Explanation and full RCE PoC for CVE-2025-55182
788⭐	1 day ago	CVE-2025-55182-research	CVE-2025-55182 POC
612⭐	1 day ago	CVE-2025-33073	PoC Exploit for the NTLM reflection SMB flaw.
504⭐	3 days ago	CVE-2025-32463_chwoot	Escalation of Privilege to the root through sudo binary with chroot option. CVE-2025-32463
427⭐	15 hours ago	CVE-2025-32463	Local Privilege Escalation to Root via Sudo chroot in Linux
308⭐	4 days ago	CVE-2025-53770-Exploit	SharePoint WebPart Injection Exploit Tool
301⭐	1 day ago	CVE-2025-55182	RSC/Next.js RCE Vulnerability Detector & PoC Chrome Extension – CVE-2025-55182 & CVE-2025-66478
971⭐	7 hours ago	React2Shell-CVE-2025-55182-original-poc	Original Proof-of-Concepts for React2Shell CVE-2025-55182
388⭐	22 hours ago	CVE-2025-24071_PoC	CVE-2025-24071: NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File
207⭐	4 days ago	CVE-2025-32023	PoC & Exploit for CVE-2025-32023 / PlaidCTF 2025 "Zerodeo"
395⭐	8 days ago	ColorOS-CVE-2025-10184	ColorOS短信漏洞，以及用户自救方案
269⭐	2 hours ago	CVE-2025-55182-advanced-scanner-
180⭐	4 days ago	POC-CVE-2025-24813	his repository contains an automated Proof of Concept (PoC) script for exploiting CVE-2025-24813, a Remote Code Execution (RCE) vulnerability in Apache Tomcat. The vulnerability allows an attacker to upload a malicious serialized payload to the server, leading to arbitrary code execution via deserialization when specific conditions are met.
381⭐	1 day ago	Next.js-RSC-RCE-Scanner-CVE-2025-66478	A command-line scanner for batch detection of Next.js application versions and determining if they are affected by CVE-2025-66478 vulnerability.
200⭐	4 days ago	CVE-2025-30208-EXP	CVE-2025-30208-EXP
154⭐	11 days ago	CVE-2025-21756	Exploit for CVE-2025-21756 for Linux kernel 6.6.75. My first linux kernel exploit!
163⭐	3 days ago	CVE-2025-26125	( 0day ) Local Privilege Escalation in IObit Malware Fighter
98⭐	16 hours ago	CVE-2025-43300	This is POC for IOS 0click CVE-2025-43300
167⭐	1 day ago	CVE-2025-59287	WSUS Unauthenticated RCE
137⭐	1 day ago	CVE-2025-32433	CVE-2025-32433 https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2

2024

Latest 20 of 621 Repositories

Stars	Updated	Name	Description
2427⭐	4 days ago	CVE-2024-1086	Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.
687⭐	2 days ago	CVE-2024-38063	poc for CVE-2024-38063 (RCE in tcpip.sys)
491⭐	2 days ago	cve-2024-6387-poc	a signal handler race condition in OpenSSH's server (sshd)
510⭐	1 day ago	CVE-2024-49113	LdapNightmare is a PoC tool that tests a vulnerable Windows Server against CVE-2024-49113
508⭐	4 days ago	CVE-2024-6387_Check	CVE-2024-6387_Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH
218⭐	15 minutes ago	CVE-2024-38077	RDL的堆溢出导致的RCE
386⭐	4 days ago	cve-2024-6387-poc	32-bit PoC for CVE-2024-6387 — mirror of the original 7etsuo/cve-2024-6387-poc
323⭐	4 days ago	CVE-2024-0044	CVE-2024-0044: a "run-as any app" high-severity vulnerability affecting Android versions 12 and 13
310⭐	12 days ago	CVE-2024-21338	Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled.
303⭐	7 days ago	CVE-2024-4577	PHP CGI Argument Injection (CVE-2024-4577) Remote Code Execution PoC
752⭐	2 days ago	CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability	Microsoft-Outlook-Remote-Code-Execution-Vulnerability
187⭐	2 days ago	CVE-2024-21413	CVE-2024-21413 PoC for THM Lab
236⭐	42 days ago	CVE_2024_30078_POC_WIFI	basic concept for the latest windows wifi driver CVE
8⭐	177 days ago	CVE-2024-38077-POC
165⭐	7 days ago	CVE-2024-6387	Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (CVE-2024-6387)
176⭐	12 days ago	CVE-2024-25600	Unauthenticated Remote Code Execution – Bricks <= 1.9.6
201⭐	4 days ago	CVE-2024-23897	CVE-2024-23897
156⭐	48 days ago	CVE-2024-21413	Microsoft Outlook Information Disclosure Vulnerability (leak password hash) - Expect Script POC
83⭐	22 days ago	CVE-2024-40725-CVE-2024-40898	CVE-2024-40725 and CVE-2024-40898, affecting Apache HTTP Server versions 2.4.0 through 2.4.61. These flaws pose significant risks to web servers worldwide, potentially leading to source code disclosure and server-side request forgery (SSRF) attacks.
141⭐	15 days ago	cve-2024-20017	exploits for CVE-2024-20017

2023

Latest 20 of 511 Repositories

Stars	Updated	Name	Description
789⭐	4 days ago	CVE-2023-38831-winrar-exploit	CVE-2023-38831 winrar exploit generator
504⭐	44 days ago	Windows_LPE_AFD_CVE-2023-21768	LPE exploit for CVE-2023-21768
371⭐	4 days ago	CVE-2023-32233	CVE-2023-32233: Linux内核中的安全漏洞
110⭐	3 days ago	CVE-2023-21839	Weblogic CVE-2023-21839 RCE (无需Java依赖一键RCE)
412⭐	4 days ago	CVE-2023-0386	CVE-2023-0386在ubuntu22.04上的提权
388⭐	4 days ago	CVE-2023-4911	PoC for CVE-2023-4911
281⭐	4 days ago	CVE-2023-21608	Adobe Acrobat Reader - CVE-2023-21608 - Remote Code Execution Exploit
319⭐	2 days ago	CVE-2023-4863
242⭐	7 days ago	CVE-2023-44487	Basic vulnerability scanning to see if web servers may be vulnerable to CVE-2023-44487
168⭐	2 days ago	CVE-2023-36745
347⭐	84 days ago	CVE-2023-23397-POC-Powershell
232⭐	2 days ago	CVE-2023-20887	VMWare vRealize Network Insight Pre-Authenticated RCE (CVE-2023-20887)
241⭐	12 days ago	CVE-2023-7028	This repository presents a proof-of-concept of CVE-2023-7028
229⭐	12 days ago	CVE-2023-3519	RCE exploit for CVE-2023-3519
179⭐	5 days ago	CVE-2023-28252
131⭐	29 days ago	CVE-2023-2640-CVE-2023-32629	GameOver(lay) Ubuntu Privilege Escalation
241⭐	87 days ago	Weblogic-CVE-2023-21839
204⭐	11 days ago	CVE-2023-46747-RCE	exploit for f5-big-ip RCE cve-2023-46747
234⭐	27 days ago	CVE-2023-29357	Microsoft SharePoint Server Elevation of Privilege Vulnerability
171⭐	71 days ago	CVE-2023-25157	CVE-2023-25157 - GeoServer SQL Injection - PoC

2022

Latest 20 of 561 Repositories

Stars	Updated	Name	Description
1124⭐	4 days ago	CVE-2022-0847-DirtyPipe-Exploit	A root exploit for CVE-2022-0847 (Dirty Pipe)
577⭐	23 days ago	CVE-2022-23222	CVE-2022-23222: Linux Kernel eBPF Local Privilege Escalation
365⭐	4 days ago	CVE-2022-21907	HTTP Protocol Stack Remote Code Execution Vulnerability CVE-2022-21907
355⭐	4 days ago	CVE-2022-40684	A proof of concept exploit for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager
375⭐	4 days ago	CVE-2022-29464	WSO2 RCE (CVE-2022-29464) exploit and writeup.
434⭐	37 days ago	CVE-2022-25636	CVE-2022-25636
671⭐	4 days ago	CVE-2022-0847-DirtyPipe-Exploits	A collection of exploits and documentation that can be used to exploit the Linux Dirty Pipe vulnerability.
485⭐	33 days ago	CVE-2022-2588	exploit for CVE-2022-2588
499⭐	3 days ago	CVE-2022-0995	CVE-2022-0995 exploit
388⭐	4 days ago	CVE-2022-39197	CobaltStrike <= 4.7.1 RCE
415⭐	4 days ago	CVE-2022-33679	One day based on https://googleprojectzero.blogspot.com/2022/10/rc4-is-still-considered-harmful.html
278⭐	5 days ago	CVE-2022-0847	CVE-2022-0847-DirtyPipe-Exploit CVE-2022-0847 是存在于 Linux内核 5.8 及之后版本中的本地提权漏洞。攻击者通过利用此漏洞，可覆盖重写任意可读文件中的数据，从而可将普通权限的用户提升到特权 root。 CVE-2022-0847 的漏洞原理类似于 CVE-2016-5195 脏牛漏洞（Dirty Cow），但它更容易被利用。漏洞作者将此漏洞命名为“Dirty Pipe”
344⭐	4 days ago	CVE-2022-21894	baton drop (CVE-2022-21894): Secure Boot Security Feature Bypass Vulnerability
377⭐	3 days ago	CVE-2022-0185	CVE-2022-0185
279⭐	4 days ago	cve-2022-27255
267⭐	39 days ago	CVE-2022-39952	POC for CVE-2022-39952
492⭐	20 hours ago	CVE-2022-38694_unlock_bootloader	This is a one-time signature verification bypass. For persistent signature verification bypass, check https://github.com/TomKing062/CVE-2022-38691_38692
239⭐	2 days ago	CVE-2022-20699	Cisco Anyconnect VPN unauth RCE (rwx stack)
230⭐	2 days ago	CVE-2022-30075	Tp-Link Archer AX50 Authenticated RCE (CVE-2022-30075)
219⭐	8 days ago	CVE-2022-34918	CVE-2022-34918 netfilter nf_tables 本地提权 POC

2021

Latest 20 of 513 Repositories

Stars	Updated	Name	Description
2022⭐	6 days ago	CVE-2021-4034	CVE-2021-4034 1day
1120⭐	2 days ago	CVE-2021-4034	PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034)
1001⭐	12 hours ago	CVE-2021-3156
1081⭐	4 days ago	CVE-2021-1675	Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)
788⭐	3 days ago	CVE-2021-3156	Sudo Baron Samedit Exploit
833⭐	4 days ago	CVE-2021-31166	Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.
861⭐	4 days ago	CVE-2021-44228-Scanner	Vulnerability scanner and mitigation patch for Log4j2 CVE-2021-44228
499⭐	4 days ago	CVE-2021-21972	CVE-2021-21972 Exploit
433⭐	4 days ago	CVE-2021-3493	Ubuntu OverlayFS Local Privesc
434⭐	8 days ago	CVE-2021-3156	PoC for CVE-2021-3156 (sudo heap overflow)
285⭐	5 days ago	CVE-2021-22205	CVE-2021-22205& GitLab CE/EE RCE
269⭐	22 hours ago	CVE-2021-21972	Proof of Concept Exploit for vCenter CVE-2021-21972
291⭐	4 days ago	CVE-2021-36260	command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.
296⭐	4 days ago	CVE-2021-34527
366⭐	4 days ago	Grafana-CVE-2021-43798	Grafana Unauthorized arbitrary file reading vulnerability
350⭐	4 days ago	CVE-2021-44228_scanner	Scanners for Jar files that may be vulnerable to CVE-2021-44228
313⭐	4 days ago	CVE-2021-26084_Confluence	Confluence Server Webwork OGNL injection
328⭐	18 days ago	CVE-2021-1675-LPE	Local Privilege Escalation Edition for CVE-2021-1675/CVE-2021-34527
233⭐	103 days ago	CVE-2021-38647	Proof on Concept Exploit for CVE-2021-38647 (OMIGOD)
346⭐	3 days ago	CVE-2021-4034	Proof of concept for pwnkit vulnerability