This repository serves as a rare, centralized collection of 0-day and near-0-day proof-of-concept exploits across a wide range of popular software, with a systematic consolidation check that guarantees the tracked files are byte-for-byte identical to the original standalone repositories.
If you wish to collaborate/discuss with me, contact me on discord @ashdfrkl
Sharing this repo keeps me motivated to continue dropping 0-days for you all.
Open an issue if you have a specific request for software you want me to take a look at.
A consolidated archive of my public proof-of-concept and vulnerability research writeups.
Most folders contain one of my former standalone PoC repos, preserved with its original README and tracked files. New research entries are added directly here as self-contained folders.
| Folder | Source | Tracked entries |
|---|---|---|
7zip-rar5-motw-chain-poc | bd9533f532c1e4ee6af783b9bb49d1133c600e2c | 3 |
anydesk-printer-com-impersonation-poc | 7491303301093b2d40bee9dadf6b38f757ce78e0 | 4 |
c-ares-tcp-uaf-calc-poc | direct entry, June 24, 2026 | 7 |
docker-cp-copyout-destination-escape | d1367b1381736d7f961ac808ce88d4e24a633adc | 5 |
firefox-smartwindow-private-url-exfil-poc | direct entry, June 24, 2026 | 3 |
floci-apigateway-vtl-rce-poc | direct entry, June 23, 2026 | 3 |
flowise-mcp-env-case-bypass-poc | ed9fab0086674f1b16467990b33bb9299e93429e | 3 |
ffmpeg-rasc-dlta-calc-poc | direct entry, June 26, 2026 | 7 |
ghidra-12.1.2-rce-ace-calc-poc | 52dee6362990c03c0d753d074c85428824d46368 | 9 |
gitea-act-runner-container-options-poc | f06d78fb111732f3e7737f4c07e77ef94c4b64bf | 4 |
imagemagick-gs-delegate-hijack-poc | 8140e8ee0ed78beaf5e8303a795b70b138f5891b | 5 |
libssh2-cve-2026-55200-poc | direct entry, June 23, 2026 | 3 |
libssh2-publickey-list-calc-poc | direct entry, June 25, 2026 | 10 |
lunar-modrinth-chain-poc | ffd02120708b6503f11585858ce3724872f3b7a7 | 6 |
mybb-limited-acp-to-admin | 1610e0373943c2f6562a99f917d3a3d1fdd9056d | 5 |
nghttp2-nghttpx-upgrade-queue-poison-poc | direct entry, June 26, 2026 | 3 |
nmap-ipv6-extlen-wrap-poc | direct entry, June 23, 2026 | 4 |
objdump-dlx-calc-poc | 7df01e4e20c7375a89e8ccf760526c52eb6ad582 | 41 |
openvpn-connect-echo-script-ace-poc | d2f904d9272d4388c9862131d40e32e072e85e38 | 8 |
php857-streambucket-soap-rce-rpoc | direct entry, June 26, 2026 | 6 |
rustdesk-session-permission-pocs | direct entry, June 25, 2026 | 17 |
systeminformer-phsvc-trusted-host-lpe-poc | direct entry, June 24, 2026 | 3 |
vlc-vp9-reschange-crash-poc | `fae |
Similar projects matched by category, topics, and programming language.
Harness Engineering is a methodology for improving coding agent outputs by carefully crafting the environment around them—providing curated context, tools, and executable constraints that encode an organization’s nonfunctional requirements and cumulative lessons.
A 28.9 million parameter language model runs on an $8 ESP32-S3 microcontroller entirely on-device, generating simple stories at about 9.5 tokens per second.
mimic captures traffic from any iOS or web app and automatically generates a Python client library that lets you call the app's API like a regular library.
