theendofabbys/CVE-2026-48907 Create: 2026-10-08 03:23:34 +0000 UTC Push: 2026-10-08 03:23:35 +0000 UTC |

HORKimhab/CVE-2026-Wordpress CVE-2026-Wordpress Create: 2026-10-08 02:00:12 +0000 UTC Push: 2026-10-08 02:00:17 +0000 UTC |

yuwkaaa/CVE-2026-107268 Drupal: miniorange_2fa Create: 2026-10-08 01:01:40 +0000 UTC Push: 2026-10-08 01:01:41 +0000 UTC |

davidvrns/CVE-2026-5430-WSO2 Detection PoC for CVE-2026-5430 — unauthenticated JWT algorithm bypass (CVSS 10.0) affecting WSO2 API Manager 4.1.0–4.6.0. Read-only assessment tool with patch confirmation and WAF detection. Authorized use only. Create: 2026-10-08 00:42:07 +0000 UTC Push: 2026-10-08 00:42:31 +0000 UTC |

QASIM1401/CVE-2025-58226-PoC CVE-2025-58226 — 3D FlipBook <= 1.16.16 unauthenticated sensitive data exposure: two-stage PoC (enumerate -> leak file URLs -> download) + nuclei template Create: 2026-10-07 23:46:42 +0000 UTC Push: 2026-10-07 23:46:54 +0000 UTC |

ntru0/CVE_2024_38063_homelab Create: 2026-10-07 21:17:19 +0000 UTC Push: 2026-10-07 21:17:20 +0000 UTC |

Kolya080808/CVE-2026-97332 CVE-2026-97332 PoC (WordPress Unauthenticated Private File Disclosure via .htaccess Rewrite Rule Bypass) Create: 2026-10-07 20:29:45 +0000 UTC Push: 2026-10-07 20:29:46 +0000 UTC |

Kolya080808/CVE-2026-97332-PoC CVE-2026-97332 PoC (WordPress Unauthenticated Private File Disclosure via .htaccess Rewrite Rule Bypass) Create: 2026-10-07 20:29:45 +0000 UTC Push: 2026-10-07 20:29:46 +0000 UTC |

murrez/CVE-2026-105844 CVE-2026-105844 — Payload CMS @payloadcms/plugin-import-export <3.88.0 unauth prototype pollution (CWE-1321, CVSS 4.0 9.3). PoCbit PoC: POST /api/exports/export-preview fields __proto__.overrideAccess → ACL bypass / data leak. check/exploit/mass. Fix 3.88.0+. https://pocbit.org/pocs/cve-2026-105844 Create: 2026-10-07 19:55:44 +0000 UTC Push: 2026-10-07 19:56:12 +0000 UTC |

murrez/CVE-2026-102782 CVE-2026-102782 — OrdaSoft Joomla Simple Membership <7.4.0 unauth SQLi (CWE-89, CVSS 4.0 9.3). PoCbit PoC: checkLoginPass + login param extractvalue error leak. check/exploit/mass, hits.txt & exploited.txt. Fix 7.4.0+. https://pocbit.org/pocs/cve-2026-102782 Create: 2026-10-07 19:42:43 +0000 UTC Push: 2026-10-07 19:42:45 +0000 UTC |

s1lentf00thold/CVE-2019-11043-RCE-IIS Create: 2026-10-07 18:46:08 +0000 UTC Push: 2026-10-07 18:46:09 +0000 UTC |

Yoksulcvt/CVE-2026-24061-Telnet-Authentication-Bypass Telnet 2.7 Authentication Bypass and Privilege Escalation | Telnet 2.7 Kimlik doğrulama Zafiyeti Ve Yetki Yükseltme Saldırısı Create: 2026-10-07 18:11:32 +0000 UTC Push: 2026-10-07 18:11:34 +0000 UTC |

Ravi-lk/CVE-2026-102253-POC DOS infinite-loop Vulnerability POC Create: 2026-10-07 18:08:16 +0000 UTC Push: 2026-10-07 18:08:18 +0000 UTC |

Jazblue/cve-2026 Blog about 2026 CVEs affecting Microsoft Office and Model Context Protocol Create: 2026-10-07 17:26:49 +0000 UTC Push: 2026-10-07 17:27:24 +0000 UTC |

aminquliyev057/CVE-2026-90977 Clean Login < 1.19 - Unauthenticated CAPTCHA Bypass via Empty Session Comparison Create: 2026-10-07 17:00:55 +0000 UTC Push: 2026-10-07 17:00:57 +0000 UTC |

MRdark-ops/wpexploit-CVE-2026-96451 Privilege Escalation vulnerability Create: 2026-10-07 16:47:16 +0000 UTC Push: 2026-10-07 16:47:17 +0000 UTC |

Hu2ie/CVE-2021-38759 CVE-2021-38759 — Raspberry Pi OS Default Credentials Exploit Create: 2026-10-07 16:47:02 +0000 UTC Push: 2026-10-07 16:47:03 +0000 UTC |

dahax404-spec/CVE-2026-39919-Ghostscript-Exploit Proof-of-concept exploit for Ghostscript vulnerability CVE-2026-39919 - Stack-based buffer overflow in PostScript interpreter Create: 2026-10-07 16:33:57 +0000 UTC Push: 2026-10-07 16:33:58 +0000 UTC |

0xBlackash/CVE-2026-21589 CVE-2026-21589 Create: 2026-10-07 15:41:20 +0000 UTC Push: 2026-10-07 15:41:22 +0000 UTC |

01xJB/CVE-2026-23744-POC MCPJam Inspector Remote Code Execution Create: 2026-10-07 14:58:12 +0000 UTC Push: 2026-10-07 14:58:15 +0000 UTC |