jaf0rk/CVE-2026-5281-CVE-2026-11057-fullchain Create: 2026-08-25 03:27:09 +0000 UTC Push: 2026-08-25 03:27:10 +0000 UTC |

Slagzz/CVE-2026-16348 Create: 2026-08-25 02:56:28 +0000 UTC Push: 2026-08-25 02:56:30 +0000 UTC |

tony102741/CVE-2026-15469 CVE-2026-15469 — Hard-coded RSA-512 mesh group private key in TP-Link Deco XE75/XE5300/WE10800 (CWE-321). Advisory, analysis & PoC methodology (EN/KO). Create: 2026-08-25 02:45:37 +0000 UTC Push: 2026-08-25 02:45:38 +0000 UTC |

Anhquan-1508/CVE-2026-18963 Create: 2026-08-25 02:28:04 +0000 UTC Push: 2026-08-25 02:28:04 +0000 UTC |

prot0tw/CVE-2026-18963 Create: 2026-08-25 02:28:04 +0000 UTC Push: 2026-08-25 03:21:10 +0000 UTC |

prot0tw/Keycloak_CVE-2026-18963_PoC This repo is poc of cve-2026-18963. Please use it on legal products (lab, local,...). Create: 2026-08-25 02:28:04 +0000 UTC Push: 2026-08-25 03:58:24 +0000 UTC |

Boreas37/CVE-2026-32475-PoC PoC for CVE-2026-32475: Elementor Pro <=4.2.1 unauthenticated file upload to RCE. Stdlib-only Python. Create: 2026-08-25 01:20:49 +0000 UTC Push: 2026-08-25 01:20:52 +0000 UTC |

SneakyNachos/CVE-2026-12295-UXXS-in-my-wasm Firefox content->parent srcdoc forge (N-day, bug 2040160): forged PDocumentChannel with SrcdocData on a non-about:srcdoc URI -> attacker HTML served at victim origin (UXSS), via mojo-port send-path injection from a compromised content process Create: 2026-08-25 00:27:22 +0000 UTC Push: 2026-08-25 00:27:33 +0000 UTC |

Red-Darkin/CVE-2026-18963-keycloak Create: 2026-08-24 23:40:17 +0000 UTC Push: 2026-08-24 23:40:23 +0000 UTC |

xAL6/cve-2026-64638-banner-poc Create: 2026-08-24 23:17:23 +0000 UTC Push: 2026-08-24 23:17:50 +0000 UTC |

CuteeCat/CVE-2026-77806 CVE-2026-77806漏洞检测代码 Create: 2026-08-24 22:22:05 +0000 UTC Push: 2026-08-24 22:22:24 +0000 UTC |

SneakyNachos/CVE-2026-74939-escape-the-mac-n-cheese-box Firefox content-to-parent IPDL privilege escalation (N-day, bug 2054416): forged PDocumentChannel with RemoteTypeOverride -> privilegedabout process placement, via mojo-port send-path injection from a compromised content process Create: 2026-08-24 20:07:18 +0000 UTC Push: 2026-08-24 20:25:59 +0000 UTC |

Boreas37/CVE-2026-43914-PoC PoC for CVE-2026-43914: Vaultwarden <1.35.4 email-2FA brute-force bypass password oracle. Stdlib-only Python. Create: 2026-08-24 18:15:35 +0000 UTC Push: 2026-08-24 18:15:37 +0000 UTC |

hacbs-release-tests/collectors-no-cve-200c6c45 Create: 2026-08-24 17:19:23 +0000 UTC Push: 2026-08-24 17:19:57 +0000 UTC |

SebasPV27/Explotaci-n-RCE-Pentesting-BlueKeep-CVE-2019-0708- Demostración práctica y bitácora técnica de explotación de BlueKeep (CVE-2019-0708) en RDP usando Nmap y Metasploit, documentando la resolución de errores en el entorno virtual. Create: 2026-08-24 17:14:40 +0000 UTC Push: 2026-08-24 17:14:42 +0000 UTC |

SebasPV27/Explotacion-RCE-Pentesting-BlueKeep-CVE-2019-0708- Demostración práctica y bitácora técnica de explotación de BlueKeep (CVE-2019-0708) en RDP usando Nmap y Metasploit, documentando la resolución de errores en el entorno virtual. Create: 2026-08-24 17:14:40 +0000 UTC Push: 2026-08-24 17:16:05 +0000 UTC |

samarthop2011/PoC-for-CVE-2025-46359 PoC CVE-2025-46359 Create: 2026-08-24 17:07:40 +0000 UTC Push: 2026-08-24 17:07:41 +0000 UTC |

oscerd/CVE-2026-63039 Reproducer for CVE-2026-63039 (Apache InLong AuditAlertRule MyBatis ORDER BY SQL injection via orderField/orderType) Create: 2026-08-24 16:34:41 +0000 UTC Push: 2026-08-24 16:34:44 +0000 UTC |

oscerd/CVE-2026-28672 Reproducer for CVE-2026-28672 (Apache Ranger UnixUserGroupBuilder OS command injection via username in the unixusersync module) Create: 2026-08-24 16:29:12 +0000 UTC Push: 2026-08-24 16:29:13 +0000 UTC |

oscerd/CVE-2026-78329 Reproducer for CVE-2026-78329 (Apache Camel camel-undertow header filter strategy not applied, websocket.* injection) — Camel Spring Boot Create: 2026-08-24 15:59:32 +0000 UTC Push: 2026-08-24 15:59:36 +0000 UTC |