DevVaibhav07/CVE-2026-102422 CVE-2026-102422 POC Create: 2026-10-07 05:53:12 +0000 UTC Push: 2026-10-07 05:53:13 +0000 UTC |

murrez/CVE-2026-82531 Smarty is vulnerable to code injection through template inheritance. Crafted assigned data can inject a forged SmartyNocache marker into regenerated PHP cache files, potentially allowing attackers to execute arbitrary PHP code. The issue affects Smarty 4.5.7 and earlier, and 5.8.4 and earlier. Create: 2026-10-07 05:37:26 +0000 UTC Push: 2026-10-07 05:37:27 +0000 UTC |

abraxas/CVE-2026-59358 CVE-2026-59358 - Cloud Foundry UAA - High - Remote - Privilege leftover - user PKCE token as client_credentials Bearer Create: 2026-10-07 02:11:18 +0000 UTC Push: 2026-10-07 02:11:34 +0000 UTC |

secjuhl/CVE-2022-0185 This is a PoC exploit I created for CVE-2022-0185 as practice. It is not a very stable exploit and it was created for kernel 5.15. Create: 2026-10-07 01:48:48 +0000 UTC Push: 2026-10-07 01:48:49 +0000 UTC |

Shiho-Patch/linux-tools-vivo_iqoo_neo_9_root_research_on_CVE-2025-21479 Create: 2026-10-06 22:49:24 +0000 UTC Push: 2026-10-06 22:50:11 +0000 UTC |

Frizzardsecurity/CVE-2025-55182 PoC for CVE-2025-55182 Create: 2026-10-06 21:46:00 +0000 UTC Push: 2026-10-06 21:46:02 +0000 UTC |

c0dem4sters/CVE-2026-57967 CVE-2026-57967 PoC — Apache ActiveMQ Artemis unauthenticated session hijacking via SESSION_REATTACH (2.50.0–2.56.0) Create: 2026-10-06 19:28:07 +0000 UTC Push: 2026-10-06 19:28:14 +0000 UTC |

tc4dy/CVE-2026-21589-PoC-Exploit CVE-2026-21589 – Atlassian Data Center Unauth Arbitrary File Read (CVSS 9.3) | Red/Blue Team suite. 2 tools: Full Exploit (path traversal, WEB-INF read, credential harvest, 8 products, mass scan, SOCKS5/Tor, stealth) & SafeChecker (non-intrusive version audit, IoC guidance, JSON/CSV). Use Ethically, Stay Legal. Create: 2026-10-06 18:21:50 +0000 UTC Push: 2026-10-06 18:22:06 +0000 UTC |

XavLimSG/Zenphoto-1.4.1.4-CVE-2011-4825-RCE Python 3 reverse-shell exploit for Zenphoto <= 1.4.1.4 / CVE-2011-4825 (EDB-18083) Create: 2026-10-06 17:58:25 +0000 UTC Push: 2026-10-06 17:58:30 +0000 UTC |

AlanNewberry/CVE-2026-3888-snap-confine-privilege-escalation Create: 2026-10-06 16:07:23 +0000 UTC Push: 2026-10-06 16:07:28 +0000 UTC |

MarcusProgram/CVE-2026-21589 Create: 2026-10-06 15:43:34 +0000 UTC Push: 2026-10-06 15:43:36 +0000 UTC |

HORKimhab/CVE-2026-59265 CVE-2026-59265 Create: 2026-10-06 15:12:44 +0000 UTC Push: 2026-10-06 15:12:51 +0000 UTC |

HORKimhab/CVE-2026-63277 CVE-2026-63277, Create: 2026-10-06 15:09:45 +0000 UTC Push: 2026-10-06 15:09:53 +0000 UTC |

WTCYJ/CVE-2026-43805-analysis One-day analysis + sanitizer PoC of CVE-2026-43805 (IOKit IODMACommand DriverKit RPC race, CWE-362) Create: 2026-10-06 14:45:26 +0000 UTC Push: 2026-10-06 14:45:33 +0000 UTC |

hitechcloud-vietnam/CVE-2026-67401 PoC for CVE-2026-67401 — cPanel/WHM EmailTrack SQL injection leading to arbitrary file write and root RCE. Includes a self-contained vulnerable lab, SQLi detection, and full exploit chain. Create: 2026-10-06 14:34:00 +0000 UTC Push: 2026-10-06 14:34:02 +0000 UTC |

Rully2212/CVE-2026-97286 Technical advisory and proof of concept for CVE-2026-97286 in the WordPress Strong Testimonials plugin Create: 2026-10-06 13:21:59 +0000 UTC Push: 2026-10-06 13:22:12 +0000 UTC |

cppghoul/CVE-2025-34069 Kerio Control 9.4.5 Auth Bypass PoC Create: 2026-10-06 12:42:26 +0000 UTC Push: 2026-10-06 12:42:27 +0000 UTC |

richard1026/CVE-2025-6867-reproduction Set up an environment to reproduce CVE-2025-6867. Create: 2026-10-06 12:07:15 +0000 UTC Push: 2026-10-06 12:07:17 +0000 UTC |

malredfan/gggggggggggggggggg Penetration test for Metasploitable 2 — Samba 3.0.20 Username Map Script (CVE-2007-2447) Create: 2026-10-06 11:59:42 +0000 UTC Push: 2026-10-06 12:12:22 +0000 UTC |

malredfan/vvvvvvvv2 Penetration test for Metasploitable 2 — Samba 3.0.20 Username Map Script (CVE-2007-2447) Create: 2026-10-06 10:49:09 +0000 UTC Push: 2026-10-06 11:48:23 +0000 UTC |