Hunt-Benito/the-cookie-in-the-error-message-cve-2026-102489-zammad-session-hijack-to-rce Create: 2026-10-07 09:54:23 +0000 UTC Push: 2026-10-07 09:54:25 +0000 UTC |

bhavik08-gone/CVE-2026-62911-info Create: 2026-10-07 09:52:01 +0000 UTC Push: 2026-10-07 09:52:02 +0000 UTC |

aduli198/CVE-2026-21589 Atlassian Arbitrary File Read Create: 2026-10-07 09:03:00 +0000 UTC Push: 2026-10-07 09:10:13 +0000 UTC |

sungue1/CVE-2025-29927 Create: 2026-10-07 08:23:08 +0000 UTC Push: 2026-10-07 08:23:10 +0000 UTC |

InertFluid/cve-2026-93355-lab Benign, offline reproduction of CVE-2026-93355 — LiteLLM unverified-email JWT account takeover (runs LiteLLM's real code) Create: 2026-10-07 08:03:41 +0000 UTC Push: 2026-10-07 08:03:48 +0000 UTC |

aduli198/CVE-2026-85102 Authentication Bypass and Remote Code Execution in Remote Access and Site-to-Site VPN Create: 2026-10-07 07:51:04 +0000 UTC Push: 2026-10-07 07:51:54 +0000 UTC |

xiaxiu555/cve-2026-87902 cve-2026-87902 lab Create: 2026-10-07 07:42:36 +0000 UTC Push: 2026-10-07 07:42:38 +0000 UTC |

DevVaibhav07/CVE-2026-102422 CVE-2026-102422 POC Create: 2026-10-07 05:53:12 +0000 UTC Push: 2026-10-07 05:53:13 +0000 UTC |

murrez/CVE-2026-82531 Smarty is vulnerable to code injection through template inheritance. Crafted assigned data can inject a forged SmartyNocache marker into regenerated PHP cache files, potentially allowing attackers to execute arbitrary PHP code. The issue affects Smarty 4.5.7 and earlier, and 5.8.4 and earlier. Create: 2026-10-07 05:37:26 +0000 UTC Push: 2026-10-07 05:37:27 +0000 UTC |

abraxas/CVE-2026-59358 CVE-2026-59358 - Cloud Foundry UAA - High - Remote - Privilege leftover - user PKCE token as client_credentials Bearer Create: 2026-10-07 02:11:18 +0000 UTC Push: 2026-10-07 02:11:34 +0000 UTC |

secjuhl/CVE-2022-0185 This is a PoC exploit I created for CVE-2022-0185 as practice. It is not a very stable exploit and it was created for kernel 5.15. Create: 2026-10-07 01:48:48 +0000 UTC Push: 2026-10-07 01:48:49 +0000 UTC |

Shiho-Patch/linux-tools-vivo_iqoo_neo_9_root_research_on_CVE-2025-21479 Create: 2026-10-06 22:49:24 +0000 UTC Push: 2026-10-06 22:50:11 +0000 UTC |

Frizzardsecurity/CVE-2025-55182 PoC for CVE-2025-55182 Create: 2026-10-06 21:46:00 +0000 UTC Push: 2026-10-06 21:46:02 +0000 UTC |

c0dem4sters/CVE-2026-57967 CVE-2026-57967 PoC — Apache ActiveMQ Artemis unauthenticated session hijacking via SESSION_REATTACH (2.50.0–2.56.0) Create: 2026-10-06 19:28:07 +0000 UTC Push: 2026-10-06 19:28:14 +0000 UTC |

horizon3ai/CVE-2026-102489 Zammad Session Leak to Remote Code Execution Create: 2026-10-06 19:00:36 +0000 UTC Push: 2026-10-07 10:21:32 +0000 UTC |

tc4dy/CVE-2026-21589-PoC-Exploit CVE-2026-21589 – Atlassian Data Center Unauth Arbitrary File Read (CVSS 9.3) | Red/Blue Team suite. 2 tools: Full Exploit (path traversal, WEB-INF read, credential harvest, 8 products, mass scan, SOCKS5/Tor, stealth) & SafeChecker (non-intrusive version audit, IoC guidance, JSON/CSV). Use Ethically, Stay Legal. Create: 2026-10-06 18:21:50 +0000 UTC Push: 2026-10-06 18:22:06 +0000 UTC |

XavLimSG/Zenphoto-1.4.1.4-CVE-2011-4825-RCE Python 3 reverse-shell exploit for Zenphoto <= 1.4.1.4 / CVE-2011-4825 (EDB-18083) Create: 2026-10-06 17:58:25 +0000 UTC Push: 2026-10-06 17:58:30 +0000 UTC |

AlanNewberry/CVE-2026-3888-snap-confine-privilege-escalation Create: 2026-10-06 16:07:23 +0000 UTC Push: 2026-10-06 16:07:28 +0000 UTC |

MarcusProgram/CVE-2026-21589 Create: 2026-10-06 15:43:34 +0000 UTC Push: 2026-10-06 15:43:36 +0000 UTC |

HORKimhab/CVE-2026-59265 CVE-2026-59265 Create: 2026-10-06 15:12:44 +0000 UTC Push: 2026-10-06 15:12:51 +0000 UTC |