0xmarcio/pocindexSearch public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub, with CVSS, EPSS and CISA KEV context.
PoC Index: Search public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub, with CVSS, EPSS and CISA KEV context. Find exploits by CVE, vendor, product or keyword. Compare CVSS severity, EPSS exploitation scores and CISA known-exploited status.
| Stars | Released | PoC | Description |
|---|---|---|---|
| 0⭐ | 1h ago |  CVE-2026-41940-PoC | cPanel & WHM Authentication Bypass via CVE-2026-41940 explotation |
| 0⭐ | 1h ago | CVE-2026-85097 | CVE-2026-85097 - Bricksforge <= 3.1.8.9 unauth file upload to RCE. GIF/PHP polyglot +… |
| 0⭐ | 2h ago | cve-2026-77521-lab | Benign, self-contained reproduction of CVE-2026-77521 (MaxKB prompt-injectable command execution) |
| 0⭐ | 2h ago | CVE-2026-18963-PoC | Proof of concept and vulnerability checker for CVE-2026-18963, the Keycloak reset-credentials flow bypass |
| 0⭐ | 6h ago | CVE-2026-12118-POC- | CVE-2026-12118 POC |
| 0⭐ | 6h ago | CVE-2026-110912 | A PoC for CVE-2026-110912 'arpbleed' |
| 0⭐ | 6h ago | CVE-2026-104711-POC-NEW-VARIANT | POC for the CVE-2026-104711 - New Variant |
| 0⭐ | 16h ago | CVE-2021-4034 | CVE-2021-4034 (PwnKit) - Python PoC |
| 0⭐ | 21h ago | CVE-2026-104748 | CVE-2026-104748 POC |
| 5⭐ | 22h ago | cve-2026-107181-poc | Telegram Desktop before 7.2.9 contains an IPC record-separator injection vulnerability in Core::Sandbox that… |
| Stars | Updated | Repository | Description |
|---|---|---|---|
| 477⭐ | 55d ago | CVE-2026-9830 | CVE-2026-9830 Proof of Concept |
| 53⭐ | 1d ago | CVE-2026-97229-PoC | GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64… |
| 332⭐ | 79d ago | CVE-2026-54121 | Certighost POC |
| 96⭐ | 16d ago | CVE-2026-41096-PoC | 🛡️ Official AI Security Tool module for CVE-2026-41096 (Windows DNSAPI.dll Heap Overflow / DNS-Mayhem Deep… |
| 187⭐ | 54d ago | CVE-2026-62911 | POC pre-auth RCE on Exchange |
| 17⭐ | 1d ago | CVE-2026-85884 | CVE-85884 POC |
| 92⭐ | 33d ago | CVE-2026-20805-PoC | 🛡️ Official AI Security Tool module for CVE-2026-20805 (Desktop Window Manager / dwm.exe Information… |
| 88⭐ | 33d ago | CVE-2026-21858-n8n-FullChain | 🛡️ Official AI Security Tool module for CVE-2026-21858 + CVE-2025-68613 (n8n "Ni8mare" Unauthenticated… |
| 51⭐ | 16d ago | CVE-2026-94545 | Next.js RCE |
| 106⭐ | 50d ago | CVE-2026-75604-poc | CVE-2026-75604 Next.js Windows RCE poc |
| 86⭐ | 41d ago | CVE-2026-65343 | CVE-2026-65343 PoC - AppleKeyStore OOB read → KASLR defeat (iOS 26.6 / 23G71) |
| 108⭐ | 72d ago | SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit | Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a… |
| 18⭐ | 5d ago | telegram-cve-2026-107181 | Telegram CVE-2026-107181 |
| 110⭐ | 88d ago | CVE-2026-43499-Poc-Analysis | Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For… |
| 40⭐ | 21d ago | CVE-2026-84543 | Technical disclosure and PoC for CVE-2026-84543, a macOS SMB kernel vulnerability |
| 39⭐ | 22d ago | cve-2026-87902-poc | PoC for CVE-2026-87902 - unauthenticated path traversal in WordPress page-template resolution (local PHP… |
| 31⭐ | 17d ago | CVE-2026-34990 | CVE-2026-34990 minimal PoC. CUPS <= 2.4.16 local privesc. |
| 35⭐ | 8d ago | CVE-2026-87902 | CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion… |
| 43⭐ | 33d ago | cve-2026-85706 | Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions:… |
| 27⭐ | 17d ago | CVE-2026-85706 | GitLab Unauthenticated Arbitrary File Read |
