Recently updated Proof-of-Concepts

2025

Latest 20 of 416 Repositories

Stars	Updated	Name	Description
1130⭐	21 minutes ago	CVE-2025-55182	Explanation and full RCE PoC for CVE-2025-55182
495⭐	3 days ago	CVE-2018-20250	exp for https://research.checkpoint.com/extracting-code-execution-from-winrar
755⭐	3 hours ago	CVE-2025-55182-research	CVE-2025-55182 POC
607⭐	17 hours ago	CVE-2025-33073	PoC Exploit for the NTLM reflection SMB flaw.
496⭐	1 day ago	CVE-2025-32463_chwoot	Escalation of Privilege to the root through sudo binary with chroot option. CVE-2025-32463
415⭐	3 hours ago	CVE-2025-32463	Local Privilege Escalation to Root via Sudo chroot in Linux
305⭐	2 days ago	CVE-2025-53770-Exploit	SharePoint WebPart Injection Exploit Tool
221⭐	4 hours ago	CVE-2025-59287	WSUS vulnerability PoC
274⭐	7 minutes ago	CVE-2025-55182	RSC/Next.js RCE Vulnerability Detector & PoC Chrome Extension – CVE-2025-55182 & CVE-2025-66478
385⭐	3 days ago	CVE-2025-24071_PoC	CVE-2025-24071: NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File
208⭐	1 day ago	CVE-2025-32023	PoC & Exploit for CVE-2025-32023 / PlaidCTF 2025 "Zerodeo"
396⭐	1 day ago	ColorOS-CVE-2025-10184	ColorOS短信漏洞，以及用户自救方案
797⭐	3 minutes ago	React2Shell-CVE-2025-55182-original-poc	Original Proof-of-Concepts for React2Shell CVE-2025-55182
180⭐	1 day ago	POC-CVE-2025-24813	his repository contains an automated Proof of Concept (PoC) script for exploiting CVE-2025-24813, a Remote Code Execution (RCE) vulnerability in Apache Tomcat. The vulnerability allows an attacker to upload a malicious serialized payload to the server, leading to arbitrary code execution via deserialization when specific conditions are met.
90⭐	2 minutes ago	RSC-Detect-CVE-2025-55182	rsc-detect-cve-2025-55182 is a static analysis tool designed to detect potential indicators of CVE-2025-55182
197⭐	6 days ago	CVE-2025-30208-EXP	CVE-2025-30208-EXP
332⭐	36 minutes ago	Next.js-RSC-RCE-Scanner-CVE-2025-66478	A command-line scanner for batch detection of Next.js application versions and determining if they are affected by CVE-2025-66478 vulnerability.
238⭐	7 hours ago	CVE-2025-55182-advanced-scanner-
73⭐	1 day ago	cve-2025-8088	Path traversal tool based on cve-2025-8088
162⭐	12 days ago	CVE-2025-26125	( 0day ) Local Privilege Escalation in IObit Malware Fighter

2024

Latest 20 of 621 Repositories

Stars	Updated	Name	Description
2423⭐	23 hours ago	CVE-2024-1086	Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.
685⭐	6 days ago	CVE-2024-38063	poc for CVE-2024-38063 (RCE in tcpip.sys)
490⭐	6 days ago	cve-2024-6387-poc	a signal handler race condition in OpenSSH's server (sshd)
505⭐	6 days ago	CVE-2024-49113	LdapNightmare is a PoC tool that tests a vulnerable Windows Server against CVE-2024-49113
506⭐	1 day ago	CVE-2024-6387_Check	CVE-2024-6387_Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH
216⭐	6 days ago	CVE-2024-38077	RDL的堆溢出导致的RCE
384⭐	7 days ago	cve-2024-6387-poc	32-bit PoC for CVE-2024-6387 — mirror of the original 7etsuo/cve-2024-6387-poc
320⭐	1 day ago	CVE-2024-0044	CVE-2024-0044: a "run-as any app" high-severity vulnerability affecting Android versions 12 and 13
302⭐	6 days ago	CVE-2024-4577	PHP CGI Argument Injection (CVE-2024-4577) Remote Code Execution PoC
310⭐	22 days ago	CVE-2024-21338	Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled.
753⭐	23 hours ago	CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability	Microsoft-Outlook-Remote-Code-Execution-Vulnerability
181⭐	1 day ago	CVE-2024-21413	CVE-2024-21413 PoC for THM Lab
236⭐	25 days ago	CVE_2024_30078_POC_WIFI	basic concept for the latest windows wifi driver CVE
8⭐	161 days ago	CVE-2024-38077-POC
164⭐	1 day ago	CVE-2024-6387	Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (CVE-2024-6387)
200⭐	62 days ago	CVE-2024-23897	CVE-2024-23897
178⭐	1 day ago	CVE-2024-25600	Unauthenticated Remote Code Execution – Bricks <= 1.9.6
156⭐	31 days ago	CVE-2024-21413	Microsoft Outlook Information Disclosure Vulnerability (leak password hash) - Expect Script POC
142⭐	10 days ago	cve-2024-20017	exploits for CVE-2024-20017
83⭐	6 days ago	CVE-2024-40725-CVE-2024-40898	CVE-2024-40725 and CVE-2024-40898, affecting Apache HTTP Server versions 2.4.0 through 2.4.61. These flaws pose significant risks to web servers worldwide, potentially leading to source code disclosure and server-side request forgery (SSRF) attacks.