Gillarchnganasan2735/CVE-2026-41089-Netlogon-RCE-PoC Create: 2026-09-21 23:18:09 +0000 UTC Push: 2026-09-21 23:18:10 +0000 UTC |

coactionbrittlemaidenhair51/CVE-2026-42978-PoC-Research Create: 2026-09-21 23:14:36 +0000 UTC Push: 2026-09-21 23:15:08 +0000 UTC |

rmhowe425/POC-CVE-2026-93680 Create: 2026-09-21 23:03:04 +0000 UTC Push: 2026-09-21 23:03:18 +0000 UTC |

licitrasimone/CVE-2026-92122-poc Authorized local-lab PoC for CVE-2026-92122 Create: 2026-09-21 21:21:47 +0000 UTC Push: 2026-09-21 21:22:23 +0000 UTC |

magicXC7/CVE-2026-94083-RCE Create: 2026-09-21 20:34:10 +0000 UTC Push: 2026-09-21 20:34:11 +0000 UTC |

murrez/HP-HPLIP-Mass-CVE-checker-2026-09- Mass check/research exploit for HP HPLIP CVE-2026-91097–91106 (<3.26.6), PAPPL :8000 IPP probes + hpssd templates Create: 2026-09-21 19:43:39 +0000 UTC Push: 2026-09-21 19:43:41 +0000 UTC |

yasouxken/cve-2026-41940-PoC A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing unauthenticated attackers to gain root-level WHM access by injecting CRLF sequences into server-side session files via the Authorization header — no credentials required. Create: 2026-09-21 18:23:02 +0000 UTC Push: 2026-09-21 18:25:07 +0000 UTC |

pervinzahidli/CVE-2026-88997 JSM Show Post Metadata < 4.9.1 - Contributor+ Stored XSS via Custom Field Meta Key Create: 2026-09-21 17:09:02 +0000 UTC Push: 2026-09-21 17:09:03 +0000 UTC |

muradislamzada/CVE-2026-93528 Technical details, proof of concept, and responsible disclosure timeline for CVE-2026-93528 (Unauthenticated Order Data Disclosure in NP Quote Request for WooCommerce). Create: 2026-09-21 15:34:01 +0000 UTC Push: 2026-09-21 15:34:02 +0000 UTC |

Malwation/CVE-2026-43786 Proof of concept for CVE-2026-43786, a local privilege escalation vulnerability in macOS CoreServices that allows an application to gain root privileges. Create: 2026-09-21 15:02:05 +0000 UTC Push: 2026-09-21 15:02:38 +0000 UTC |

learnerxuan/CVE-2026-29057-POC Create: 2026-09-21 14:48:10 +0000 UTC Push: 2026-09-21 14:48:12 +0000 UTC |

raafatabualazm/streambox-cve-2026-28618 Redacted notes on CVE-2026-28618 / StreamBox APV lab — heap write into a session object via FRAME height mismatch Create: 2026-09-21 13:19:29 +0000 UTC Push: 2026-09-21 13:19:38 +0000 UTC |

Nxploited/CVE-2026-14894 Arbitrary File Upload Under Create: 2026-09-21 12:53:33 +0000 UTC Push: 2026-09-21 12:53:34 +0000 UTC |

wtfkimi/CVE-2026-77078 Example how to use this CVE Create: 2026-09-21 12:12:57 +0000 UTC Push: 2026-09-21 12:12:58 +0000 UTC |

AranFarzami/CVE-2026-89026 PoC exploit and scanner for CVE-2026-89026, targeting the Issabel PBXAPI authentication vulnerability Create: 2026-09-21 10:59:47 +0000 UTC Push: 2026-09-21 10:59:49 +0000 UTC |

HackSpeak/CVE-2026-94095 Netcore NBR200V2 traceroute command injection PoC (CVE-2026-94095); ubus JSON-RPC -> system() root RCE; for authorized testing Create: 2026-09-21 10:48:06 +0000 UTC Push: 2026-09-21 10:48:07 +0000 UTC |

JohenLastGen-JLG/CVE-2025-6325-CVE-2025-6327 CVE-2025-6325 + CVE-2025-6327 — King Addons for Elementor <= 51.1.36 DUAL EXPLOIT PoC (Unauthenticated Privilege Escalation + Arbitrary File Upload) Create: 2026-09-21 10:14:28 +0000 UTC Push: 2026-09-21 10:14:30 +0000 UTC |

JohenLastGen-JLG/CVE-2025-6325_CVE-2025-6327 CVE-2025-6325 + CVE-2025-6327 — King Addons for Elementor <= 51.1.36 DUAL EXPLOIT PoC (Unauthenticated Privilege Escalation + Arbitrary File Upload) Create: 2026-09-21 10:14:28 +0000 UTC Push: 2026-09-21 10:19:23 +0000 UTC |

lzty/CVE-2026-94128 Create: 2026-09-21 08:26:04 +0000 UTC Push: 2026-09-21 08:26:09 +0000 UTC |

Oscar-Collado/comfyui-CVE-2026-68771-PoC Security research lab — Unauthenticated RCE via insecure deserialization in ComfyUI v0.23.0 (CVSS 9.8). Isolated Docker environment, technical analysis and documentation. Create: 2026-09-21 08:17:05 +0000 UTC Push: 2026-09-21 08:21:36 +0000 UTC |