tc4dy/CVE-2026-21589-PoC-Exploit CVE-2026-21589 – Atlassian Data Center Unauth Arbitrary File Read (CVSS 9.3) | Red/Blue Team suite. 2 tools: Full Exploit (path traversal, WEB-INF read, credential harvest, 8 products, mass scan, SOCKS5/Tor, stealth) & SafeChecker (non-intrusive version audit, IoC guidance, JSON/CSV). Use Ethically, Stay Legal. Create: 2026-10-06 18:21:50 +0000 UTC Push: 2026-10-06 18:22:06 +0000 UTC |

XavLimSG/Zenphoto-1.4.1.4-CVE-2011-4825-RCE Python 3 reverse-shell exploit for Zenphoto <= 1.4.1.4 / CVE-2011-4825 (EDB-18083) Create: 2026-10-06 17:58:25 +0000 UTC Push: 2026-10-06 17:58:30 +0000 UTC |

AlanNewberry/CVE-2026-3888-snap-confine-privilege-escalation Create: 2026-10-06 16:07:23 +0000 UTC Push: 2026-10-06 16:07:28 +0000 UTC |

MarcusProgram/CVE-2026-21589 Create: 2026-10-06 15:43:34 +0000 UTC Push: 2026-10-06 15:43:36 +0000 UTC |

HORKimhab/CVE-2026-59265 CVE-2026-59265 Create: 2026-10-06 15:12:44 +0000 UTC Push: 2026-10-06 15:12:51 +0000 UTC |

HORKimhab/CVE-2026-63277 CVE-2026-63277, Create: 2026-10-06 15:09:45 +0000 UTC Push: 2026-10-06 15:09:53 +0000 UTC |

WTCYJ/CVE-2026-43805-analysis One-day analysis + sanitizer PoC of CVE-2026-43805 (IOKit IODMACommand DriverKit RPC race, CWE-362) Create: 2026-10-06 14:45:26 +0000 UTC Push: 2026-10-06 14:45:33 +0000 UTC |

hitechcloud-vietnam/CVE-2026-67401 PoC for CVE-2026-67401 — cPanel/WHM EmailTrack SQL injection leading to arbitrary file write and root RCE. Includes a self-contained vulnerable lab, SQLi detection, and full exploit chain. Create: 2026-10-06 14:34:00 +0000 UTC Push: 2026-10-06 14:34:02 +0000 UTC |

Rully2212/CVE-2026-97286 Technical advisory and proof of concept for CVE-2026-97286 in the WordPress Strong Testimonials plugin Create: 2026-10-06 13:21:59 +0000 UTC Push: 2026-10-06 13:22:12 +0000 UTC |

cppghoul/CVE-2025-34069 Kerio Control 9.4.5 Auth Bypass PoC Create: 2026-10-06 12:42:26 +0000 UTC Push: 2026-10-06 12:42:27 +0000 UTC |

richard1026/CVE-2025-6867-reproduction Set up an environment to reproduce CVE-2025-6867. Create: 2026-10-06 12:07:15 +0000 UTC Push: 2026-10-06 12:07:17 +0000 UTC |

malredfan/gggggggggggggggggg Penetration test for Metasploitable 2 — Samba 3.0.20 Username Map Script (CVE-2007-2447) Create: 2026-10-06 11:59:42 +0000 UTC Push: 2026-10-06 12:12:22 +0000 UTC |

malredfan/vvvvvvvv2 Penetration test for Metasploitable 2 — Samba 3.0.20 Username Map Script (CVE-2007-2447) Create: 2026-10-06 10:49:09 +0000 UTC Push: 2026-10-06 11:48:23 +0000 UTC |

0xCyp1337/CVE-2026-10196 Create: 2026-10-06 10:44:32 +0000 UTC Push: 2026-10-06 10:44:33 +0000 UTC |

watchtowrlabs/watchTowr-vs-Atlassian-CVE-2026-21589 Create: 2026-10-06 10:40:59 +0000 UTC Push: 2026-10-06 10:48:39 +0000 UTC |

malredfan/xxxxxxxxxxxxxxxx Penetration test for Metasploitable 2 — Samba 3.0.20 Username Map Script (CVE-2007-2447) Create: 2026-10-06 10:19:19 +0000 UTC Push: 2026-10-06 10:22:37 +0000 UTC |

beyavuz/cve-2026-105080-poc Create: 2026-10-06 10:17:40 +0000 UTC Push: 2026-10-06 10:17:41 +0000 UTC |

malredfan/metasploitable2-pentest Penetration test report for Metasploitable 2 — Samba 3.0.20 Username Map Script (CVE-2007-2447) Create: 2026-10-06 09:33:11 +0000 UTC Push: 2026-10-06 09:33:12 +0000 UTC |

wvllxe/CVE-2026-104905-facturascripts-object-injection PHP Object Injection -> Arbitrary File Deletion in FacturaScripts <= 2026.66 (CWE-502). PoC + advisory. Create: 2026-10-06 06:18:26 +0000 UTC Push: 2026-10-06 06:18:31 +0000 UTC |

Sanjith1236/CVE-2026-8206-Kirki-Exploit-Analysis Create: 2026-10-06 05:49:42 +0000 UTC Push: 2026-10-06 05:49:44 +0000 UTC |