mfahdk/CVE-2026-39987_RCE_PoC Create: 2026-09-20 12:40:18 +0000 UTC Push: 2026-09-20 12:40:58 +0000 UTC |

api-evangelist/dynamicfeed-ai Dynamic Feed, a product of Fluxdyne Pty Ltd (Australia), is a live-data and machine-evidence layer for AI agents and robots: 94 read-only tools across 20 domains (weather and air quality, natural hazards, space weather and satellite positions, CVEs and actively-exploited vulnerabilities, software versions and EOL, sanctions and Federal Register… Create: 2026-09-20 11:15:25 +0000 UTC Push: 2026-09-20 11:15:47 +0000 UTC |

0Linear/CVE-2026-78844 Create: 2026-09-20 10:24:07 +0000 UTC Push: 2026-09-20 10:24:11 +0000 UTC |

g17hubH4ck/CVE-2026-36213-poc CVE-2026-36213: MEmu Android Emulator 9.2.7.0 Local Privilege Escalation Create: 2026-09-20 09:50:48 +0000 UTC Push: 2026-09-20 09:50:49 +0000 UTC |

TheArtist54/CVE-2023-21554-PoC Create: 2026-09-20 06:55:08 +0000 UTC Push: 2026-09-20 06:55:09 +0000 UTC |

suominen/CVE-2026-53266 Create: 2026-09-20 06:03:40 +0000 UTC Push: 2026-09-20 06:03:41 +0000 UTC |

suominen/CVE-2025-39682 Create: 2026-09-20 05:58:09 +0000 UTC Push: 2026-09-20 05:58:10 +0000 UTC |

suominen/CVE-2025-39964 Create: 2026-09-20 05:55:14 +0000 UTC Push: 2026-09-20 05:55:14 +0000 UTC |

chandrimanath04-hue/CVE-2024-31218-WEBHOOD-LAB Create: 2026-09-20 04:55:20 +0000 UTC Push: 2026-09-20 04:55:21 +0000 UTC |

thrilokh-q123/CVE-2025-23134_fixes_code The ASN1_STRING_set() function takes an `int` length, make sure the argument is not inadvertently truncated when it is called from asn1_ex_c2i(). Create: 2026-09-20 03:00:09 +0000 UTC Push: 2026-09-20 03:00:10 +0000 UTC |

vvsy46/CVE-2026-23111-PoC Create: 2026-09-20 02:53:22 +0000 UTC Push: 2026-09-20 02:53:23 +0000 UTC |

djzzlim/CVE-2026-94036 Create: 2026-09-19 23:17:06 +0000 UTC Push: 2026-09-19 23:18:16 +0000 UTC |

MohammadAliMehri/cve-2021-44790-lab Create: 2026-09-19 22:23:49 +0000 UTC Push: 2026-09-19 22:23:50 +0000 UTC |

saina15/cve-2020-14343-lab Controlled vulnerability research and reproduction lab for CVE-2020-14343 in PyYAML Create: 2026-09-19 20:55:40 +0000 UTC Push: 2026-09-19 20:55:42 +0000 UTC |

abraxas/CVE-2026-77635 CVE-2026-77635 - CakePHP - Critical 9.2 - Unauthenticated GET /?path= - SQL Injection Create: 2026-09-19 20:48:37 +0000 UTC Push: 2026-09-19 20:48:48 +0000 UTC |

abraxas/CVE-2026-79752 CVE-2026-79752 - CakePHP - Critical 9.2 - Unauthenticated GET /?type= - SQL Injection Create: 2026-09-19 20:36:59 +0000 UTC Push: 2026-09-19 20:37:10 +0000 UTC |

murrez/CVE-2026-84434 PoC for CVE-2026-84434: unauthenticated arbitrary file upload in Gravity Forms ≤3.1.0.4 via hidden File Upload fields. Python check/exploit/mass scan. Create: 2026-09-19 20:27:35 +0000 UTC Push: 2026-09-19 20:27:37 +0000 UTC |

murrez/CVE-2026-89274 PoC for CVE-2026-89274: unauthenticated arbitrary shortcode execution in WP Recipe Maker ≤10.8.1 via recipe rating comments (JSON-LD). Python check/exploit/verify. Create: 2026-09-19 20:25:18 +0000 UTC Push: 2026-09-19 20:25:21 +0000 UTC |

murrez/CVE-2026-92229 Description Create: 2026-09-19 20:22:01 +0000 UTC Push: 2026-09-19 20:22:02 +0000 UTC |

abraxas/CVE-2026-81648 CVE-2026-81648 - WordPress - CryptoPayment Gateway - Critical 10.0 - Unauthenticated POST /wp-content/plugins/cryptopayment-gateway/vendor/cryptd/ajax.php - Arbitrary File Deletion Create: 2026-09-19 20:21:48 +0000 UTC Push: 2026-09-19 20:21:49 +0000 UTC |