pocindex - Search 82,000+ public CVE proof-of-concept exploit

项目说明

<di="center">

<a href=" src=" alt="PoC Index" width="100%"></a>

![last sync]()&nbsp;![CI]()&nbsp;![CVEs with PoCs]()&nbsp;![known exploited]()&nbsp;![stars]()

<a href=" src=" alt="Search PoC Index" width="100%"></a>

</div>

Just landed

| Stars | Updated | Repository | Description |
| --- | --- | --- | --- |
| 0⭐ | 4h ago | C | An authenticated, read-only user can upload a file and perform a directory tra to have the uploaded… |
| 0⭐ | 1d ago | <img src=" alt="KEV" title="CISA known exploited" height="14"> React2Shell_C | A Proof-of-Concept implementation for C, a critical unauthenticated Remote Code Execution… |
| 0⭐ | 1d ago | C | MotionEye OS Command Injection (C) |
| 0⭐ | 1d ago | C | A PoC for C that allows any self-attacker to execute commands with Retail Mode pri (UID… |
| 0⭐ | 3d ago | C.0.17-and-prior-Authenticated-RCE | GLPI is a free asset and IT management software package. An authenticated user can upload and force the… |
| 0⭐ | 3d ago | C | POC for libapache2-mod-security2 |
| 0⭐ | 4d ago | <img src=" alt="KEV" title="CISA known exploited" height="14"> C | Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code. |
| 1⭐ | 4d ago | C | POC for react2shell |
| 0⭐ | 4d ago | C | Flowise is a drag & drop user interface to build a customized large language model flow. In 3.0.5,… |
| 1⭐ | 5d ago | <img src=" alt="KEV" title="CISA known exploited" height="14"> C | CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin… |

Trending in 2026

| Stars | Updated | Repository | Description |
| --- | --- | --- | --- |
| 7⭐ | 1d ago | cuth | C - Loom for AWS - Critical - Auth bypass - unauthenticated super-admin when no IdP is… |
| 211⭐ | 1d ago | <img src=" alt="KEV" title="CISA known exploited" height="14"> c | A tool for exploiting C, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing… |
| 825⭐ | 1d ago | <img src=" alt="KEV" title="CISA known exploited" height="14"> C | C exploit PoC |
| 3⭐ | 3d ago | C | Gotenberg 8.30.1 unauthenticated RCE exploit |
| 4⭐ | 3d ago | C-path-tra | Path Tra -> RCE in Laranode < 1.2.1 (CWE-22). PoC + ad writeup. |
| 4⭐ | 5d ago | <img src=" alt="KEV" title="CISA known exploited" height="14"> C | XWP_RCE - C Hacker Console |
| 4⭐ | 6d ago | <img src=" alt="KEV" title="CISA known exploited" height="14"> Cit | C RedSun / Microsoft Defender LPE exploit. Low-pri users gain NT AUTHORITY\SYSTEM - via… |
| 30⭐ | 6d ago | Cit | C - CertiGhost AD CS Multi-Exploit Framework / Rogue DC + LDAP spoofing, certificate abuse,… |
| 8⭐ | 6d ago | <img src=" alt="KEV" title="CISA known exploited" height="14"> Cit | C - GNU inetutils-telnetd Auth Bypass Exploit - Full Control with CRLF injection … |
| 7⭐ | 6d ago | <img src=" alt="KEV" title="CISA known exploited" height="14"> watchTowr-2026-88772 | in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before… |
| 46⭐ | 6d ago | C | Next.js RCE |
| 4⭐ | 6d ago | <img src=" alt="KEV" title="CISA known exploited" height="14"> C | Kestra Unauthenticated RCE |
| 3⭐ | 7d ago | C | Proof of Concept and Write-up for C (Blind Parameter Injection in TYPO3 EXT:solr) |
| 23⭐ | 7d ago | <img src=" alt="KEV" title="CISA known exploited" height="14"> watchTowr-2026-88771 | Improper input in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue… |
| 25⭐ | 7d ago | <img src=" alt="KEV" title="CISA known exploited" height="14"> C | GitLab Unauthenticated Arbitrary File Read |
| 3⭐ | 7d ago | C78159 | The Events Calendar Wordpress Plugin Mass Exploit C & C |
| 17⭐ | 7d ago | C | Keycloak reset-credentials flow bypass |
| 13⭐ | 7d ago | <img src=" alt="KEV" title="CISA known exploited" height="14"> C | C PoC: Citrix NetScaler ADC/Gateway DTLS memory o (RCE/DoS, CVSS 9.5). Fingerprints… |
| 30⭐ | 7d ago | C | C minimal PoC. CUPS <= 2.4.16 local privesc. |
| 13⭐ | 7d ago | C | C PoC - Authenticated blind remote code execution in Craft CMS. |

Trending in 2025

| Stars | Updated | Repository | Description |
| --- | --- | --- | --- |
| 7⭐ | 3d ago | C | 利用C漏洞，实现提权 |
| 7⭐ | 18d ago | <img src=" alt="KEV" title="CISA known exploited" height="14"> Cy-P34NUT | Reliable C pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail |
| 3⭐ | 38d ago | <img src=" alt="KEV" title="CISA known exploited" height="14"> CCE | Langflow prior to 1.3.0 are susceptible to code injection in the /api/v1//code endpoint. A… |
| 9⭐ | 39d ago | <img src=" alt="KEV" title="CISA known exploited" height="14"> earch_on_C | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of… |
| 6⭐ | 46d ago | <img src=" alt="KEV" title="CISA known exploited" height="14"> c | Local root exploit for C (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables… |
| 3⭐ | 48d ago | <img src=" alt="KEV" title="CISA known exploited" height="14"> earch_on_C | iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** - 基于 C (Adreno GPU SDS) 的任意物理写提权方案 |
| 22⭐ | 55d ago | C | ThrottleStop.sys Arbitrary Physical Memory R/W |
| 6⭐ | 60d ago | C | Dirty Pagetable Exploit for C |
| 7⭐ | 64d ago | <img src=" alt="KEV" title="CISA known exploited" height="14"> SELinux-Permissi | This is an SELinux permissi of the Cheese exploit also known as C which affected the… |
| 4⭐ | 75d ago | <img src=" alt="KEV" title="CISA known exploited" height="14"> C | Exploit, POC for C, CraftCMS2Shell |
| 3⭐ | 77d ago | CS-Resize-TOCTOU-Pri | C: udisks2 XFS Resize TOCTOU Pri Escalation |
| 4⭐ | 78d ago | C | C: pdfminer.six pickle deserialization rce; .pickle.gz + pdf generator w/ custom payloads |
| 4⭐ | 80d ago | <img src=" alt="KEV" title="CISA known exploited" height="14"> C | PoC for C - Gogs arbitrary file write |
| 7⭐ | 89d ago | C | This PoC targets C, an RCE in Apache Parquet via A deserialization. It… |

<details>
<summary>2024, 2023</summary>

Trending in 2024

| Stars | Updated | Repository | Description |
| --- | --- | --- | --- |
| 17⭐ | 2d ago | C | A PoC of the C . |
| 4⭐ | 51d ago | C | C Exynos9830 Bootrom Exploit - SM-G985F |
| 3⭐ | 67d ago | C | PoC for C - unauthenticated Groovy RCE in Apache OFBiz (<18.12.14) via /%2e/%2e/ view path… |

Trending in 2023

| Stars | Updated | Repository | Description |
| --- | --- | --- | --- |
| 3⭐ | 70d ago | C | PoC exploit for C - zip-slip path tra in Atril/Xreader (MATE/Cinnamon) enabling arbitrary… |
| 6⭐ | 74d ago | C | PoC for C: Windows Exploit Security Feature Bypass in Windows Defender. |
| 4⭐ | 89d ago | <img src=" alt="KEV" title="CISA known exploited" height="14"> ctimized | Pure C exploit for C (Looney Tunables) - x86_64 & aarch64 implementations. Multi-processing… |

</details>

Data

Every file is plain JSON on the CDN. No key, no rate limit.

What CISA says is being exploited, that also has a PoC here, ranked by how
likely each is to be used next:

| Endpoint | Holds |
| --- | --- |
| C.json | Every CVE with a linked PoC, its description and its poc, nuclei, msf, edb, and collections links |
| c.json | NVD CVSS v2.0, v3.0, v3.1 and v4.0 assessments with and ad links |
| epss.json | Exploitation probability and percentile, for nearly every C |
| nuclei.json | Template metadata for the C by a runnable Nuclei check |
| kev.json | CISA known exploited, keyed by CVE id |
| repo_meta.json | Stars and last push date per PoC repository, keys lowercased |
| trending_poc.json | Trending repositories plus index totals |
| cves/2026/C.md | Markdown copy of one CVE, one directory per year |

CVSS rows are [, score, se, , source, assessment type].
Ad rows are [URL, N tags].

Sources

| Source | What it contributes |
| --- | --- |
| GitHub | Repositories naming a C for code before they are linked |
| PoC-in-GitHub | Historical repository candidates, passed through the same code and intent checks |
| Nuclei | Runnable templates that exercise the |
| ExploitDB | Archi, mapped by their own C |
| Metasploit | Modules, best ranked first |
| | Runnable en and reproduction steps |
| afrog, , 0day, xray | C templates, code and reproduction guides inside multi-C |
| EPSS | Daily exploitation probability from FIRST |
| CISA KEV | What is being exploited in the wild |
| NVD | C and tagged , third-party, patch and mitigation references |
| C | The C, publication state and CNA references |

Build

| Job | Cadence | Picks up |
| --- | --- | --- |
| Trending sweep | hourly | Front-page repositories and prior-hour candidates added to the searchable index |
| CVE sync | daily | New CVEs, CNA references and recently pushed GitHub repositories for every CVE year |
| Metadata sync | daily plus weekly full pass | CVSS, ad, rejected records and current CISA KE |
| Nuclei sync | daily | New templates and rating changes |
| Exploit archives | daily | ExploitDB, Metasploit and mappings |
| Historical GitHub sync | weekly | Older PoC repositories missed by the recent-push window |
| Path collection sync | weekly | C artifacts inside curated multi-C |
| Link audit | weekly | Repositories that went dead, dropped from the index |

Contributing

Missing PoC, wrong link, dead repository: open an issue with the CVE id and the
repository URL.

项目信息

开发语言：Python

Star 数：1426

技术要点

该项目属于漏洞知识库方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Search 82,000+ public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。