0xmarcio/pocindexSearch public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub, with CVSS, EPSS and CISA KEV context.
PoC Index: Search public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub, with CVSS, EPSS and CISA KEV context. Find exploits by CVE, vendor, product or keyword. Compare CVSS severity, EPSS exploitation scores and CISA known-exploited status.
| Repo stars | Released | PoC | Description |
|---|---|---|---|
| 0⭐ | 16m ago |  cortex9-http2-rapid-reset-stream-accounting-model | Discrete-time Rust model of HTTP/2 stream accounting vs handler work for studying Rapid Reset… |
| 0⭐ | 56m ago | cortex9-terrapin-strict-kex-model | Abstract state model of SSH sequence numbers and OpenSSH strict KEX for studying Terrapin (CVE-2023-48795).… |
| 0⭐ | 1h ago | php54-spl-uaf-rce-chain | Multiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before… |
| 0⭐ | 1h ago | php2shell-poc | PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the… |
| 0⭐ | 2h ago | CVE-2026-19219 | In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient integrity protection of dialog request… |
| 0⭐ | 2h ago | CVE-2026-6023 | In Progress® Telerik® UI for AJAX versions 2024.4.1114 through 2026.1.421, the RadFilter control is… |
| 1⭐ | 3h ago | CVE-2026-123158 | Exploit para explotar la vulnerabilidad CVE-2026-123158 (conocida como sshole). |
| 0⭐ | 3h ago | CVE-2026-118569 | CVE-2026-118569 - any editor could publish every draft on a Drupal site |
| 0⭐ | 3h ago | CVE-2026-22765-poc | Unauthenticated RCE chain PoC for Dell Wyse Management Suite On-Prem < 5.5 (CVE-2026-22765 + CVE-2026-22766) |
| 0⭐ | 4h ago | CVE-2026-107268 | Drupal-miniorange_2fa |
