aufanfauzi/CVE-2026-65640 Create: 2026-10-04 10:11:19 +0000 UTC Push: 2026-10-04 10:11:20 +0000 UTC |

Hassham1/CVE-2026-92084-beaver-builder-shortcode-poc CVE-2026-92084 — Beaver Builder Lite <= 2.11.0.5 unauthenticated arbitrary shortcode execution via Sidebar module widget output (CVSS 9.1): Docker validation lab with vulnerable/patched controls, safe-oracle Python PoC, nuclei version screen. Authorized security research only. Create: 2026-10-04 10:07:24 +0000 UTC Push: 2026-10-04 10:07:53 +0000 UTC |

RashmithaDeSilva/React2Shell_CVE-2025-55182 Create: 2026-10-04 09:57:38 +0000 UTC Push: 2026-10-04 09:57:40 +0000 UTC |

TheJesterrrr/CVE-2026-19632 Create: 2026-10-04 09:07:34 +0000 UTC Push: 2026-10-04 09:07:36 +0000 UTC |

s4m98/CVE-2023-23752 Joomla 4.1.0 exploit Create: 2026-10-04 06:43:26 +0000 UTC Push: 2026-10-04 06:43:28 +0000 UTC |

AdminHcat/CVE-2026-43499-5.15 CVE-2026-43499在天玑5.15内核上的首发实现方法 Create: 2026-10-04 06:10:17 +0000 UTC Push: 2026-10-04 06:10:19 +0000 UTC |

diamorphine666/CVE-2025-60787 MotionEye OS Command Injection (CVE-2025-60787) Create: 2026-10-03 22:32:40 +0000 UTC Push: 2026-10-03 22:32:41 +0000 UTC |

diamorphine666/CVE-2026-27944 Nginx UI - Backups Decryption (CVE-2026-27944) Create: 2026-10-03 22:31:13 +0000 UTC Push: 2026-10-03 22:31:27 +0000 UTC |

abraxas/cve-2026-103956-loom-unauth CVE-2026-103956 - Loom for AWS - Critical - Auth bypass - unauthenticated super-admin when no IdP is configured Create: 2026-10-03 21:54:10 +0000 UTC Push: 2026-10-03 21:54:41 +0000 UTC |

diamorphine666/CVE-2024-51482 ZoneMinder v1.37.* - SQL Injection Create: 2026-10-03 21:07:54 +0000 UTC Push: 2026-10-03 21:07:55 +0000 UTC |

diamorphine666/ZoneMinder-v1.37.---SQL-Injection-CVE-2024-51482- ZoneMinder v1.37.* - SQL Injection (CVE-2024-51482) Create: 2026-10-03 21:03:30 +0000 UTC Push: 2026-10-03 21:03:31 +0000 UTC |

hitechcloud-vietnam/CVE-2026-2472-Vertex-AI-SDK-Google-Cloud Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9. Create: 2026-10-03 18:44:33 +0000 UTC Push: 2026-10-03 18:44:34 +0000 UTC |

Pealeap/CVE-2025-21065 A PoC for CVE-2025-21065 that allows any self-attacker to execute commands with Retail Mode privileges (UID 1000/GID 1000, u:r:system_app:s0) Create: 2026-10-03 16:08:29 +0000 UTC Push: 2026-10-03 16:08:31 +0000 UTC |

gotr00t0day/CVE-2026-39808 An unauthenticated OS command injection vulnerability Create: 2026-10-03 15:50:23 +0000 UTC Push: 2026-10-03 15:50:25 +0000 UTC |

AlanNewberry/CVE-2026-4480-samba-print-command-injection-rce Create: 2026-10-03 15:23:16 +0000 UTC Push: 2026-10-03 15:23:21 +0000 UTC |

MRdark-ops/CVE-2026-19660-exploit Proof-of-concept scanner and exploit helper for CVE-2026-14378: unauthenticated administrator session takeover in the WordPress plugin DevKit Pro (dplugins) through a flawed user-switch “revert” flow. Create: 2026-10-03 13:28:21 +0000 UTC Push: 2026-10-03 13:28:22 +0000 UTC |

sifatnotes/Learn-SecByte-CTF-Labs-Beelzebub-SQLMap-Auth-CVE-2026-14461-Web-to-Root Hands-on Learn SecByte CTF labs covering Beelzebub preparation, VM and network clues, Base64, CVE-2026-14461, admin panels, authentication, credential leaks, kernel security, reused keys, SQLMap, and web-to-root concepts. Create: 2026-10-03 12:25:24 +0000 UTC Push: 2026-10-03 12:25:26 +0000 UTC |

EterNullSec/CVE-2026-103648 CVE-2026-103648 | Path Traversal in image-downloader 4.3.0 | CVSS 9.1 Critical | CWE-22 | By EterNullSec Create: 2026-10-03 12:03:52 +0000 UTC Push: 2026-10-03 12:03:57 +0000 UTC |

techupdate24/gitlab-ai-gateway-cve-2026-90970 A complete guide and workflow for integrating Agile sprints with DevOps CI/CD pipelines. Create: 2026-10-03 11:02:32 +0000 UTC Push: 2026-10-03 11:02:38 +0000 UTC |

flavorex0000/libtiff-cve-2022-0891-lab Isolated ASan/UBSan reproduction and patch verification lab for public CVE-2022-0891 Create: 2026-10-03 10:06:19 +0000 UTC Push: 2026-10-03 10:06:20 +0000 UTC |