abraxas/CVE-2026-22599 CVE-2026-22599 - Strapi - Critical 9.3 - Authenticated POST /content-type-builder/content-types - Authenticated SQL Injection (Knex raw defaultTo) Create: 2026-09-26 03:22:03 +0000 UTC Push: 2026-09-26 03:22:11 +0000 UTC |

abraxas/CVE-2026-52782 CVE-2026-52782 - OpenProject - Critical 9.9 - Authenticated PATCH /projects/{identifier}/settings/project_storages/{id} - Authenticated IDOR (Project Storage Folder Hijack) Create: 2026-09-26 02:56:17 +0000 UTC Push: 2026-09-26 02:56:24 +0000 UTC |

abraxas/CVE-2026-48356 CVE-2026-48356 - Magento Open Source - Critical 9.3 - Unauthenticated POST /rest/default/V1/guest-carts/{cartId}/items - Unauthenticated Unrestricted File Upload (PolyShell) Create: 2026-09-26 02:43:05 +0000 UTC Push: 2026-09-26 02:43:13 +0000 UTC |

Jake-Allmark/ThreatIntel Hello, I built ThreatIntel because manually checking 20+ cyber feeds sounded miserable. It collects, correlates and prioritises threats, enriches CVEs with NVD/CISA KEV, checks customer-tech relevance, uses AI for analysis and threat hunts, then spits out a PDF. Press button. Cyber nonsense gets sorted. Create: 2026-09-26 02:34:13 +0000 UTC Push: 2026-09-26 02:34:14 +0000 UTC |

abraxas/CVE-2026-75650 CVE-2026-75650 - Magento Open Source - Critical 10.0 - Unauthenticated POST /graphql - Unauthenticated Remote Code Execution (StyleSmuggler SSTI) Create: 2026-09-26 02:32:55 +0000 UTC Push: 2026-09-26 02:33:04 +0000 UTC |

Farih123/CVE-2026-90817 Create: 2026-09-26 01:27:59 +0000 UTC Push: 2026-09-26 01:28:00 +0000 UTC |

abraxas/CVE-2026-96512 CVE-2026-96512 - sudo - High 7.8 - Authenticated LOCAL TZ=UTC+14 sudo -n /usr/bin/id - Local Privilege Escalation via Time-Window Bypass Create: 2026-09-25 22:12:27 +0000 UTC Push: 2026-09-25 22:12:38 +0000 UTC |

abraxas/CVE-2026-86350 CVE-2026-86350 - Apache Tomcat - Critical 9.1 - Unauthenticated GET /header.jsp - HTTP/2 Request Header Mix-up (Request Smuggling) Create: 2026-09-25 21:58:58 +0000 UTC Push: 2026-09-25 21:59:08 +0000 UTC |

NGSecure/cve_tasks20260925B Create: 2026-09-25 21:52:51 +0000 UTC Push: 2026-09-25 21:52:52 +0000 UTC |

NGSecure/cve_tasks20260925A Create: 2026-09-25 21:52:26 +0000 UTC Push: 2026-09-25 21:52:28 +0000 UTC |

abraxas/CVE-2026-62062 CVE-2026-62062 - WordPress - Elementor Website Builder - High 8.8 - Unauthenticated POST /?rest_route=/wp/v2/users&x=elementor... - Cross-Site Request Forgery to Administrator Account Creation Create: 2026-09-25 21:35:51 +0000 UTC Push: 2026-09-25 21:36:01 +0000 UTC |

sdodson/CVE-2026-46595-proof Create: 2026-09-25 21:28:58 +0000 UTC Push: 2026-09-25 21:29:03 +0000 UTC |

abraxas/CVE-2026-5430 CVE-2026-5430 - WSO2 API Manager - Critical 10.0 - Unauthenticated GET /api/am/admin/v4/tenant-config - Unauthenticated Account Takeover (JWT Algorithm Bypass) Create: 2026-09-25 20:53:51 +0000 UTC Push: 2026-09-25 20:54:05 +0000 UTC |

ShadowForge-Cyber/CVE-2026-65660-Poc Malicious Register Directive Code Injection Exploit Create: 2026-09-25 20:27:27 +0000 UTC Push: 2026-09-25 20:27:29 +0000 UTC |

SVTagan/WP-CVE-2026-87902 WordPress CVE-2026-87902 diagnostic check Create: 2026-09-25 19:22:36 +0000 UTC Push: 2026-09-25 19:22:37 +0000 UTC |

redhat-tssc-tmm/CVE-2024-3651-exploit Simple app to demonstrate CVE-2024-3651 Create: 2026-09-25 18:39:49 +0000 UTC Push: 2026-09-25 18:57:06 +0000 UTC |

Ermensonx/sudotimewarp-cve-2026-96512- Create: 2026-09-25 18:17:19 +0000 UTC Push: 2026-09-25 18:17:20 +0000 UTC |

ChinaRan0/CVE-2026-59310-POC CVE-2026-59310-POC 仅用于自测，请勿用于攻击 Create: 2026-09-25 16:05:26 +0000 UTC Push: 2026-09-25 16:05:27 +0000 UTC |

mohamedbrek/SOC336-CVE-2025-21298-Investigation LetsDefend SOC lab investigating CVE-2025-21298 Windows OLE Zero-Click RCE exploitation. Create: 2026-09-25 16:02:10 +0000 UTC Push: 2026-09-25 16:02:15 +0000 UTC |

gagaltotal/CVE-2026-mikrotik-poc CVE-2026-86060 - CVE-2026-67279 - CVE-2026-67276 RouterOS SSH Create: 2026-09-25 15:59:34 +0000 UTC Push: 2026-09-25 15:59:35 +0000 UTC |