CVE PoC is a repository that aggregates publicly available proof-of-concept exploits for known vulnerabilities.
The tool addresses the challenge of locating working exploits for disclosed vulnerabilities by systematically gathering CVE details and their associated proofs-of-concept. It collects CVE information from the official CVE Project repository, organizes entries by year, and identifies PoCs through two approaches: extracting references listed in CVE records and using keyword-based detection with fuzzy matching to identify URLs that point to exploit code.
Security researchers, penetration testers, and red team operators should consider this repository when they need quick access to verified exploit code for vulnerability assessment and testing. The tool suits projects requiring a centralized index of public exploits rather than hunting across multiple sources. The repository maintains a list of the most actively exploited vulnerabilities, making it useful for prioritizing which threats to address first.
The project shows consistent activity in expanding its CVE coverage and maintaining the exploit database. Updates occur regularly to capture newly disclosed vulnerabilities and their associated proofs-of-concept. The codebase reflects an ongoing effort to improve the collection techniques and keep the indexed exploits current with the threat landscape.
