
Search 82,000+ public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub.
Every file is plain JSON on the CDN. No key, no rate limit.
# everything the index knows about one CVE
curl -s https://pocindex.io/CVE_list.json \
| jq '.[] | select(.cve == "CVE-2021-44228") | {cve, poc: (.poc | length), nuclei, msf, edb, vulhub, collections}'
# every published CVSS assessment plus vetted advisory links
curl -s https://pocindex.io/cve_metadata.json | jq '."CVE-2021-44228"'
# likelihood of exploitation in the next 30 days
curl -s https://pocindex.io/epss.json | jq '."CVE-2021-44228"'
# stars and last push for one PoC repository; repository keys are lowercased
curl -s https://pocindex.io/repo_meta.json | jq '."sfewer-r7/cve-2026-55040"'
What CISA says is being exploited, that also has a PoC here, ranked by how likely each is to be used next:
curl -s https://pocindex.io/kev.json -o kev.json
curl -s https://pocindex.io/epss.json -o epss.json
jq -n --slurpfile kev kev.json --slurpfile epss epss.json \
'[$kev[0] | keys[] | select($epss[0][.]) | {cve: ., epss: $epss[0][.][0]}]
| sort_by(-.epss) | .[:10]'
CVSS rows are [version, score, severity, vector, source, assessment type].
Advisory rows are [URL, NVD reference tags].
Missing PoC, wrong link, dead repository: open an issue with the CVE id and the repository URL.
| Stars | Updated | Repository | Description |
|---|
| 1⭐ | 10h ago | CVE-2025-7771 | ThrottleStop.sys, a legitimate driver, exposes two IOCTL interfaces that allow arbitrary read and write… |
| 0⭐ | 1d ago | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent… | |
| 2⭐ | 2d ago | ghostlock-cve-2026-43499 | CVE-2026-43499 (GhostLock) - Linux kernel futex PI rt_mutex UAF ARM32 privilege escalation research targeting… |
| 1⭐ | 3d ago | CVE-2025-6325_CVE-2025-6327 | CVE-2025-6325 + CVE-2025-6327 - King Addons for Elementor <= 51.1.36 DUAL EXPLOIT PoC (Unauthenticated… |
| 2⭐ | 3d ago | CVE-2026-90817 | Unauth REDCap RCE (CVE-2026-90817) mass check PoC - requires public survey hash for full validation. |
| 0⭐ | 4d ago | CVE-2026-84434 | PoC for CVE-2026-84434: unauthenticated arbitrary file upload in Gravity Forms ≤3.1.0.4 via hidden File… |
| 2⭐ | 4d ago | CVE-2026-89274 | PoC for CVE-2026-89274: unauthenticated arbitrary shortcode execution in WP Recipe Maker ≤10.8.1 via recipe… |
| 1⭐ | 4d ago | Flowise-RCE-CVE-2025-59528 | Authenticated Remote Code Execution (RCE) exploit for Flowise AI versions ≤ 3.0.4. Leverages a vulnerability… |
| 1⭐ | 4d ago | Flowise-CVE-2025-58434-PasswordReset | Unauthenticated password reset exploit for Flowise AI ≤ 3.0.5. Abuses the /api/v1/account/forgot-password… |
| 0⭐ | 5d ago | CVE-2025-20260 | First public PoC for CVE-2025-20260 (CVSS 9.8) - a ClamAV PDF-scanning buffer overflow, with core-dump… |
| Stars | Updated | Repository | Description |
|---|
| 9⭐ | 3h ago | CVE-2026-78306 | DJI Drone DUML Command Injection over Bluetooth - Proof of Concept for CVE-2026-78306 |
| 4⭐ | 13h ago | CVE-2026-87902-Toolkit | CVE-2026-87902 - WordPress Core LFI→RCE Toolkit (CVSS 9.2) - Red/Blue Team suite for WordPress 4.7-7.1.1. / 2… |
| 19⭐ | 15h ago | CVE-2026-84543 | Technical disclosure and PoC for CVE-2026-84543, a macOS SMB kernel vulnerability |
| 9⭐ | 23h ago | CVE-2026-87902 | Unauthenticated RCE on Wordpress |
| 5⭐ | 23h ago | CVE_2026_87902 | Exploit pycve_2026_87902_scanner.py /tmp/local.txt --console |
| 27⭐ | 1d ago | CVE-2026-87902 | CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion… |
| 3⭐ | 1d ago | CVE-2026-23921 | This repository contains a proof-of-concept (PoC) exploit for CVE-2026-23921 |
| 29⭐ | 1d ago | cve-2026-87902-poc | PoC for CVE-2026-87902 - unauthenticated path traversal in WordPress page-template resolution (local PHP… |
| 825⭐ | 2d ago | CVE-2026-24061 exploit PoC | |
| 23⭐ | 3d ago | CVE-2026-43786 | Proof of concept for CVE-2026-43786, a local privilege escalation vulnerability in macOS CoreServices that… |
| 4⭐ | 3d ago | CVE-2026-94129 | A POC for CVE-2026-94129 |
| 4⭐ | 3d ago | CVE-2026-94128 | POC for CVE-2026-94128 |
| 3⭐ | 3d ago | CVE-2026-88854 | CVE-2026-88854 - OrdaSoft Joomla Gallery unauth SQLi PoC (check / mass scan / EXTRACTVALUE read) |
| 6⭐ | 3d ago | CVE-2026-28609-matroska-pcm-oob | Proof-of-concept and instrumented reproduction harness for CVE-2026-28609, an out-of-bounds write in… |
| 4⭐ | 4d ago | CVE-2026-93958 | D-Link R95 (BE9500) DHMAPI SetTimeSettings command injection -> root RCE PoC (CVE-2026-93958); for authorized… |
| 5⭐ | 4d ago | CVE-2026-92229 | CVE-2026-92229 - Forminator ≤1.57.2 unauth shortcode exec (current_url / quiz AJAX). Python 3 PoC. |
| 3⭐ | 4d ago | CVE-2026-81294 | CVE-2026-81294 - WordPress - Paul Ryan - Critical 9.8 - Unauthenticated GET /wp-login.php?external=oauth2 -… |
| 3⭐ | 7d ago | CVE-2026-55781-poc | Unbounded memory allocation in NanaZip's UFS handler via an attacker-controlled fs_bsize field. |
| 16⭐ | 7d ago | CVE-2026-83991-writeup-and-poc | CVE-2026-83991: Windows Cloud Files access-check bypass |
| 5⭐ | 8d ago | CVE-2026-12793 | CVE-2026-12793 PoC - JetFormBuilder ≤3.6.2 unauth Register User / admin account creation |
| Stars | Updated | Repository | Description |
|---|
| 7⭐ | 7d ago | Reliable CVE-2025-32432 pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail | |
| 3⭐ | 27d ago | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… | |
| 7⭐ | 28d ago | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of… | |
| 6⭐ | 35d ago | Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables… | |
| 3⭐ | 37d ago | iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** - 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案 | |
| 20⭐ | 44d ago | CVE-2025-7771 | ThrottleStop.sys Arbitrary Physical Memory R/W |
| 6⭐ | 49d ago | CVE-2025-8045 | Dirty Pagetable Exploit for CVE-2025-8045 |
| 7⭐ | 53d ago | This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the… | |
| 4⭐ | 65d ago | Exploit, POC for CVE-2025-32432, CraftCMS2Shell | |
| 3⭐ | 66d ago | CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation | CVE-2025-6019: udisks2 XFS Resize TOCTOU Privilege Escalation |
| 4⭐ | 67d ago | CVE-2025-64512 | CVE-2025-64512: pdfminer.six pickle deserialization rce; .pickle.gz + pdf generator w/ custom payloads |
| 4⭐ | 69d ago | PoC for CVE-2025-8110 - Gogs arbitrary file write via symlink | |
| 7⭐ | 78d ago | CVE-2025-30065 | This PoC targets CVE-2025-30065, an RCE vulnerability in Apache Parquet via Avro schema deserialization. It… |
| 4⭐ | 83d ago | CVE-2025-69212-PoC | OpenSTAManager v2.9.8 and earlier versions contain a critical OS Command Injection vulnerability in the P7M… |
| 3⭐ | 83d ago | CVE-2025-57819 - FreePBX Unauthenticated Remote Code Execution (RCE) | |
| 4⭐ | 88d ago | CVE-2025-69212-PoC | OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and… |
| Stars | Updated | Repository | Description |
|---|
| 17⭐ | 39d ago | CVE-2024-56426 | A PoC of the CVE-2024-56426 vulnerability. |
| 4⭐ | 40d ago | CVE-2024-56426 | CVE-2024-56426 Exynos9830 Bootrom Exploit - SM-G985F |
| 3⭐ | 56d ago | CVE-2024-36104-PoC | PoC for CVE-2024-36104 - unauthenticated Groovy RCE in Apache OFBiz (<18.12.14) via /%2e/%2e/ view path… |
| Stars | Updated | Repository | Description |
|---|---|---|---|
| 3⭐ | 59d ago | CVE-2023-52076-PoC | PoC exploit for CVE-2023-52076 - zip-slip path traversal in Atril/Xreader (MATE/Cinnamon) enabling arbitrary… |
| 6⭐ | 63d ago | CVE-2023-36003 | PoC for CVE-2023-36003: Windows Exploit Security Feature Bypass Vulnerability in Windows Defender. |
| 4⭐ | 78d ago | Pure C exploit for CVE-2023-4911 (Looney Tunables) - x86_64 & aarch64 implementations. Multi-processing… | |
| 15⭐ | 81d ago | A PoC exploit for CVE-2023-32315 - Openfire Authentication Bypass |
| Endpoint | Holds |
|---|
CVE_list.json | Every CVE with a linked PoC, its description and its poc, nuclei, msf, edb, vulhub and collections links |
cve_metadata.json | NVD CVSS v2.0, v3.0, v3.1 and v4.0 assessments with vectors and vetted advisory links |
epss.json | Exploitation probability and percentile, for nearly every CVE indexed |
nuclei.json | Template metadata for the CVEs covered by a runnable Nuclei check |
kev.json | CISA known exploited, keyed by CVE id |
repo_meta.json | Stars and last push date per PoC repository, keys lowercased |
trending_poc.json | Trending repositories plus index totals |
cves/2026/CVE-2026-68138.md | Markdown copy of one CVE, one directory per year |
| Source | What it contributes |
|---|
| GitHub | Repositories naming a CVE, checked for code before they are linked |
| PoC-in-GitHub | Historical repository candidates, passed through the same code and intent checks |
| Nuclei | Runnable templates that exercise the vulnerability |
| ExploitDB | Archived exploits, mapped by their own CVE column |
| Metasploit | Modules, best ranked first |
| Vulhub | Runnable vulnerable environments and reproduction steps |
| afrog, Vulnerability, 0day, xray | CVE-specific templates, code and reproduction guides inside multi-CVE repositories |
| EPSS | Daily exploitation probability from FIRST |
| CISA KEV | What is being exploited in the wild |
| NVD | CVSS assessments and tagged vendor, third-party, patch and mitigation references |
| CVE Program | The CVE record, publication state and CNA references |
| Job | Cadence | Picks up |
|---|
| Trending sweep | hourly | Front-page repositories and prior-hour candidates added to the searchable index |
| CVE sync | daily | New CVEs, CNA references and recently pushed GitHub repositories for every CVE year |
| Metadata sync | daily plus weekly full pass | CVSS, advisories, rejected records and current CISA KEV status |
| Nuclei sync | daily | New templates and rating changes |
| Exploit archives | daily | ExploitDB, Metasploit and Vulhub mappings |
| Historical GitHub sync | weekly | Older PoC repositories missed by the recent-push window |
| Path collection sync | weekly | CVE-specific artifacts inside curated multi-CVE repositories |
| Link audit | weekly | Repositories that went dead, dropped from the index |