yym8538/CVE-2026-26980 Create: 2026-08-21 04:18:22 +0000 UTC Push: 2026-08-21 04:18:26 +0000 UTC |

yym8538/CVE-2026-25253 Create: 2026-08-21 04:18:08 +0000 UTC Push: 2026-08-21 04:18:17 +0000 UTC |

yym8538/CVE-2026-21858 Create: 2026-08-21 04:17:57 +0000 UTC Push: 2026-08-21 04:18:01 +0000 UTC |

yym8538/CVE-2026-5027 Create: 2026-08-21 04:17:49 +0000 UTC Push: 2026-08-21 04:17:53 +0000 UTC |

yym8538/CVE-2025-24813 Create: 2026-08-21 04:17:35 +0000 UTC Push: 2026-08-21 04:17:36 +0000 UTC |

HORKimhab/CVE-2026-73570 CVE-2026-73570 Create: 2026-08-21 03:18:23 +0000 UTC Push: 2026-08-21 03:18:26 +0000 UTC |

Baba01hacker666/CVE-2026-33032 Create: 2026-08-21 02:35:42 +0000 UTC Push: 2026-08-21 02:35:43 +0000 UTC |

Junohea/cve-2022-36804 CVE-2022-36804 Bitbucket command execution and file transfer tool Create: 2026-08-21 02:14:29 +0000 UTC Push: 2026-08-21 02:15:01 +0000 UTC |

Stacyy-Were/CVE-2011-2523 The modified source code contained a backdoor in str.c. When a client attempts to log in with a username ending in the smiley face sequence ":)", the daemon opens a listening shell bound to TCP port 6200 with the privileges of the running vsftpd process (typically root). Create: 2026-08-21 00:09:28 +0000 UTC Push: 2026-08-21 00:09:29 +0000 UTC |

SneakyNachos/CVE-2026-2796-and-CVE-2026-2768-escape-the-wasm-box Full Firefox chain: CVE-2026-2796 wasm type confusion -> content-process RCE, plus CVE-2026-2768 parent-process escape analysis (both fixed in Firefox 148) Create: 2026-08-20 22:14:42 +0000 UTC Push: 2026-08-20 22:15:06 +0000 UTC |

Snizi/CVE-2026-18963-Exploit Exploit for KeyCloak CVE-2026-18963 Create: 2026-08-20 22:01:11 +0000 UTC Push: 2026-08-20 22:01:11 +0000 UTC |

n0xdaemon/cve-2026-19478 CVE-2026-19478: GitLab GraphQL Vulnerability PoC Create: 2026-08-20 20:26:54 +0000 UTC Push: 2026-08-20 20:26:55 +0000 UTC |

dodeepsink/CVE-2026-39987.py This python script exploit the vulnerable marimo /terminal/ws endpoint and returns a interactive shell. Create: 2026-08-20 19:25:00 +0000 UTC Push: 2026-08-20 19:25:02 +0000 UTC |

ghostpels/CVE-2026-18366 CVE-2026-18366: Events Manager < 7.4.1 — Unauthenticated Privilege Escalation to Administrator. Write-up and proof-of-concept (poc7.py). Create: 2026-08-20 18:32:56 +0000 UTC Push: 2026-08-20 18:32:57 +0000 UTC |

elkhaoudari/CVE-2018-7600-PoC Create: 2026-08-20 18:21:55 +0000 UTC Push: 2026-08-20 18:21:56 +0000 UTC |

nastar-id/CVE-2026-18315-PoC Proof-of-concept for CVE-2026-18315 (TrueBooker WordPress Plugin): Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover Create: 2026-08-20 17:33:36 +0000 UTC Push: 2026-08-20 17:33:37 +0000 UTC |

llaytynher/cve-2026-0740 Create: 2026-08-20 16:30:18 +0000 UTC Push: 2026-08-20 16:30:19 +0000 UTC |

Hunt-Benito/the-same-key-opens-every-box-cve-2026-71960-hard-coded-jwt-secret-in-cudy-wr3000-mesh-mqtt Create: 2026-08-20 15:22:02 +0000 UTC Push: 2026-08-20 15:22:03 +0000 UTC |

l1m3syc/CVE-2024-4947-PoC Create: 2026-08-20 12:47:51 +0000 UTC Push: 2026-08-20 12:48:34 +0000 UTC |

mhassani97/cve-2026-63030-lab wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain Create: 2026-08-20 12:26:03 +0000 UTC Push: 2026-08-20 12:26:04 +0000 UTC |