abraxas/CVE-2026-75827 CVE-2026-75827 - getgrav - High 8.8 - Unauthenticated GET /poc-form - Arbitrary File Write Create: 2026-09-18 17:57:47 +0000 UTC Push: 2026-09-18 17:58:17 +0000 UTC |

abraxas/CVE-2026-82226 CVE-2026-82226 - Tickera - Critical 9.8 - Unauthenticated POST /cart/ - PHP Object Injection Create: 2026-09-18 17:37:42 +0000 UTC Push: 2026-09-18 17:37:50 +0000 UTC |

damnkrishna/CVE-2025-32433-LAB A Flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials in the Erlang/OTP SSH server Create: 2026-09-18 17:13:52 +0000 UTC Push: 2026-09-18 17:13:54 +0000 UTC |

abraxas/CVE-2026-84753 CVE-2026-84753 - WPFunnels - Critical 9.8 - Unauthenticated POST /?rest_route=/mint-mail/v1/mint-form-... - PHP Object Injection Create: 2026-09-18 16:51:02 +0000 UTC Push: 2026-09-18 16:51:13 +0000 UTC |

ghoxtbyte/CVE-2026-18464 Security advisory and research notes for CVE-2026-18464 affecting the WP Maps Pro WordPress plugin. Create: 2026-09-18 16:50:06 +0000 UTC Push: 2026-09-18 16:50:08 +0000 UTC |

ghoxtbyte/CVE-2026-16265 Security advisory and research notes for CVE-2026-16265 affecting the WP Maps WordPress plugin. Create: 2026-09-18 16:44:59 +0000 UTC Push: 2026-09-18 16:45:00 +0000 UTC |

abraxas/CVE-2026-77991 CVE-2026-77991 - joomlaeventmanager.net - Critical - Privileged POST /administrator/index.php - Remote Code Execution Create: 2026-09-18 16:25:53 +0000 UTC Push: 2026-09-18 16:25:57 +0000 UTC |

RMDycz/K80Pro-miro-CVE-2026-64560 Device-bound CVE-2026-64560 adaptation for RedMi K80pro miro OS 3.0.304.0 Create: 2026-09-18 06:54:32 +0000 UTC Push: 2026-09-18 06:54:33 +0000 UTC |

Faceless0x7/CVE-2026-93453 Create: 2026-09-18 06:40:15 +0000 UTC Push: 2026-09-18 06:40:16 +0000 UTC |

suominen/CVE-2026-81642 Create: 2026-09-18 04:22:42 +0000 UTC Push: 2026-09-18 04:22:43 +0000 UTC |

Squ1shification/Grafana-Plugin-Enumerator-CVE-2021-43798 Enumerate Grafana plugin enumeration PoC for CVE-2021-43798 Create: 2026-09-18 03:45:53 +0000 UTC Push: 2026-09-18 03:59:59 +0000 UTC |

HORKimhab/CVE-2026-18574 CVE-2026-18574 - Draft or TODO Create: 2026-09-18 01:58:06 +0000 UTC Push: 2026-09-18 01:58:10 +0000 UTC |

HORKimhab/CVE-2026-91843 CVE-2026-91843 - Draft or TODO Create: 2026-09-18 01:56:24 +0000 UTC Push: 2026-09-18 01:56:28 +0000 UTC |

HORKimhab/CVE-2026-77179 CVE-2026-77179 - Draft or TODO Create: 2026-09-18 01:55:38 +0000 UTC Push: 2026-09-18 01:55:42 +0000 UTC |

hacbs-release-tests/collectors-no-cve-ee206206 Create: 2026-09-18 00:59:48 +0000 UTC Push: 2026-09-18 00:59:51 +0000 UTC |

abraxas/CVE-2026-87796 CVE-2026-87796 - Multi Uploader for Gravity Forms <= 1.1.9 Create: 2026-09-17 23:28:23 +0000 UTC Push: 2026-09-17 23:28:27 +0000 UTC |

duranereloise-hash/cve20687-ipa Create: 2026-09-17 21:35:48 +0000 UTC Push: 2026-09-17 21:35:53 +0000 UTC |

K3ysTr0K3R/CVE-2026-32604 Create: 2026-09-17 20:48:21 +0000 UTC Push: 2026-09-17 20:48:23 +0000 UTC |

duranereloise-hash/cve20637-ipa Create: 2026-09-17 20:43:23 +0000 UTC Push: 2026-09-17 20:43:28 +0000 UTC |

kalnux/CVE-2026-1961-foreman-poc PoC for CVE-2026-1961 — command injection in Foreman's WebSocket proxy (lib/ws_proxy.rb) via unsanitized compute resource hostname, leading to RCE as the foreman user. Responsibly disclosed and patched. Create: 2026-09-17 19:16:49 +0000 UTC Push: 2026-09-17 19:16:50 +0000 UTC |