rabakuku/CVE-2026-87902-A-working-PoC-for-WordPress-s-critical-path-traversal Critical Zero-Authentication Vulnerability Alert! CVE-2026-87902 carries a massive CVSS 9.2 rating affecting nearly every version of WordPress Core from 4.7.0 up through 7.1.1. how attackers chain it with PHP environments to achieve full Remote Code Execution (RCE), and exactly how to mitigate and patch it immediately.  Create: 2026-09-23 02:44:20 +0000 UTC Push: 2026-09-23 02:44:21 +0000 UTC |

nebula031/CVE-2026-93616-PoC Create: 2026-09-23 02:39:46 +0000 UTC Push: 2026-09-23 02:39:47 +0000 UTC |

HORKimhab/CVE-2026-90898 CVE-2026-90898 - Draft or TODO Create: 2026-09-23 01:41:15 +0000 UTC Push: 2026-09-23 01:41:19 +0000 UTC |

SangSenimanWartefak/CVE-2026-5118 Create: 2026-09-22 23:45:32 +0000 UTC Push: 2026-09-22 23:45:33 +0000 UTC |

pwnVader/CVE-2026-88877-PoC-pwnVader Create: 2026-09-22 23:14:22 +0000 UTC Push: 2026-09-22 23:14:23 +0000 UTC |

pwnVader/CVE-2026-17089-PoC-pwnVader Create: 2026-09-22 22:59:49 +0000 UTC Push: 2026-09-22 23:00:05 +0000 UTC |

pwnVader/CVE-2026-87902-PoC-pwnVader Create: 2026-09-22 22:58:47 +0000 UTC Push: 2026-09-22 22:59:18 +0000 UTC |

pwnVader/CVE-2026-87915-PoC-pwnVader Create: 2026-09-22 22:50:33 +0000 UTC Push: 2026-09-22 22:50:44 +0000 UTC |

pwnVader/CVE-2026-87902-pwnVader Create: 2026-09-22 22:49:30 +0000 UTC Push: 2026-09-22 22:49:41 +0000 UTC |

pwnVader/CVE-2026-17089-pwnVader Create: 2026-09-22 22:46:40 +0000 UTC Push: 2026-09-22 22:46:41 +0000 UTC |

TheeEclipse/CVE-2026-87902-POC POC For CVE-2026-87902 In 3 easy steps Create: 2026-09-22 21:20:00 +0000 UTC Push: 2026-09-22 21:20:01 +0000 UTC |

qucklecrabik/CVE-2026-23921 CVE-2026-23921 Create: 2026-09-22 20:10:03 +0000 UTC Push: 2026-09-22 20:10:04 +0000 UTC |

griisemine/cve-2026-87902-detection Create: 2026-09-22 19:57:40 +0000 UTC Push: 2026-09-22 19:57:41 +0000 UTC |

FLX-0x00/CVE-2026-87902 Create: 2026-09-22 19:00:51 +0000 UTC Push: 2026-09-22 19:00:52 +0000 UTC |

nmlz/CVE-2026-62878 Create: 2026-09-22 18:50:02 +0000 UTC Push: 2026-09-22 18:50:03 +0000 UTC |

ressl/cve-2026-87902-poc PoC for CVE-2026-87902 — unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with a pinned vulnerable lab Create: 2026-09-22 18:40:26 +0000 UTC Push: 2026-09-22 18:40:27 +0000 UTC |

vulpecuna/CVE-2026-87902 Unauthenticated RCE on Wordpress Create: 2026-09-22 18:32:56 +0000 UTC Push: 2026-09-22 21:05:23 +0000 UTC |

abraxas/CVE-2026-87902 CVE-2026-87902 - WordPress - WordPress Core - High 8.1 - Unauthenticated GET /?page_id={id}&pagename=templates%252... - Unauthenticated Local File Inclusion (conditional RCE) Create: 2026-09-22 18:13:48 +0000 UTC Push: 2026-09-22 18:13:49 +0000 UTC |

lukehebe/IBM-Langflow-CVE-2026-48519-poc CVE-2026-48519 pre-auth rce poc in IBM langflow <= 1.9.1 Create: 2026-09-22 16:35:55 +0000 UTC Push: 2026-09-22 16:35:56 +0000 UTC |

rushikesh-a-bhujbal/CVE-2011-2523 From-scratch exploit development in Python. No Metasploit. No frameworks. Raw socket-level implementation of real CVEs against authorized lab targets. Create: 2026-09-22 16:33:22 +0000 UTC Push: 2026-09-22 16:33:23 +0000 UTC |