do4choo/CVE-2026-92209_NoMachine_LPE CVE-2026-92209 Create: 2026-10-16 14:52:58 +0000 UTC Push: 2026-10-16 14:53:20 +0000 UTC |

do4choo/CVE-2026-92208_remote_mDNS_overflow CVE-2026-92208 Create: 2026-10-16 14:45:44 +0000 UTC Push: 2026-10-16 14:46:13 +0000 UTC |

MosesOX/POC-CVE-2026-94134 Exploitation POC for CVE-2026-94134 Create: 2026-10-16 13:43:20 +0000 UTC Push: 2026-10-16 13:43:55 +0000 UTC |

oscerd/CVE-2026-79986 Reproducer for CVE-2026-79986 (Apache Camel camel-azure-files): the consumer builds the remote path from the share listing without containment (author-only; see CVE-2026-79983/79984 for the runnable mechanism) — Camel Spring Boot + Camel Quarkus Create: 2026-10-16 13:26:05 +0000 UTC Push: 2026-10-16 13:26:13 +0000 UTC |

ctsit/redcap_cve_2026_90817_scan A read-only, passive scanner that checks a REDCap host for exposure to and compromise by **CVE-2026-90817** — the unauthenticated survey-endpoint remote-code-execution flaw abused by the XMRig cryptomining campaign documented by Palo Alto Unit 42 Create: 2026-10-16 13:23:10 +0000 UTC Push: 2026-10-16 13:23:12 +0000 UTC |

azqzazq1/CVE-2026-110896 Create: 2026-10-16 13:20:52 +0000 UTC Push: 2026-10-16 13:20:54 +0000 UTC |

oscerd/CVE-2026-79985 Reproducer for CVE-2026-79985 (Apache Camel camel-smb): the SMB consumer builds the remote path from the share listing without containment (author-only; see CVE-2026-79983/79984 for the runnable mechanism) — Camel Spring Boot + Camel Quarkus Create: 2026-10-16 13:16:52 +0000 UTC Push: 2026-10-16 13:16:58 +0000 UTC |

oscerd/CVE-2026-79984 Reproducer for CVE-2026-79984 (Apache Camel camel-mina-sftp): the consumer builds the remote path from the server's SFTP directory listing without containment, escaping the polled directory — Camel Spring Boot + Camel Quarkus Create: 2026-10-16 13:08:42 +0000 UTC Push: 2026-10-16 13:08:47 +0000 UTC |

cyfrowesny/exiftool-7.44-12.23-exploit-CVE-2021-22204- ExifToolExploit CVE-2021-22204 \\ Arbitrary Code Execution Create: 2026-10-16 12:49:47 +0000 UTC Push: 2026-10-16 12:49:49 +0000 UTC |

cyfrowesny/exiftool-7.44-12.23-exploit-CVE-2021-22204 ExifToolExploit CVE-2021-22204 \\ Arbitrary Code Execution Create: 2026-10-16 12:49:47 +0000 UTC Push: 2026-10-16 13:01:45 +0000 UTC |

murrez/CVE-2026-89079 CVE-2026-89079 — WordPress Theme My Login multisite unauth password overwrite PoC (check, verify, exploit). Not version-only: requires MS + tml_user_passwords. Create: 2026-10-16 11:44:49 +0000 UTC Push: 2026-10-16 11:44:51 +0000 UTC |

oscerd/CVE-2026-79983 Reproducer for CVE-2026-79983 (Apache Camel camel-ftp): the consumer builds the remote path from the server's directory listing without containment, escaping the polled directory — Camel Spring Boot + Camel Quarkus Create: 2026-10-16 11:39:41 +0000 UTC Push: 2026-10-16 11:39:47 +0000 UTC |

oscerd/CVE-2026-78165 Reproducer for CVE-2026-78165 (Apache Camel camel-spring-redis): default JdkSerializationRedisSerializer deserializes Redis PUBLISH payloads with no ObjectInputFilter (RCE) — Camel Spring Boot + Camel Quarkus Create: 2026-10-16 11:18:39 +0000 UTC Push: 2026-10-16 11:18:45 +0000 UTC |

OppositDeer/Gitlab-RCE-CVE-2026-97229 CVE-2026-97229: GitLab RCE Unauthenticated via CI Lint Create: 2026-10-16 11:10:59 +0000 UTC Push: 2026-10-16 11:11:00 +0000 UTC |

oscerd/CVE-2026-78164 Reproducer for CVE-2026-78164 (Apache Camel HTTP producers): property placeholders resolved on the message-supplied CamelHttpUri/CamelRestHttpUri headers leak secrets into the outbound request — Camel Spring Boot + Camel Quarkus Create: 2026-10-16 11:07:27 +0000 UTC Push: 2026-10-16 11:07:32 +0000 UTC |

Subzero710/CVE-2024-3094-demo Create: 2026-10-16 10:52:51 +0000 UTC Push: 2026-10-16 10:52:53 +0000 UTC |

StefanoAndreatta/CVE-2026-51367-Insecure-Direct-Object-Reference-IDOR- Create: 2026-10-16 10:48:26 +0000 UTC Push: 2026-10-16 11:49:22 +0000 UTC |

StefanoAndreatta/CVE-2026-51367-Insecure-Direct-Object-Reference-IDOR Create: 2026-10-16 10:48:26 +0000 UTC Push: 2026-10-16 11:49:22 +0000 UTC |

StefanoAndreatta/CVE-2026-51366-SQL-Injection-leading-to-Remote-Code-Execution Create: 2026-10-16 10:46:53 +0000 UTC Push: 2026-10-16 11:52:00 +0000 UTC |

oscerd/CVE-2026-78163 Reproducer for CVE-2026-78163 (Apache Camel camel-docling): unvalidated String body input source enables SSRF and local file disclosure in DoclingProducer — Camel Spring Boot + Camel Quarkus Create: 2026-10-16 09:55:19 +0000 UTC Push: 2026-10-16 09:55:25 +0000 UTC |