amao26/CVE-2026-23744-PoC CVE-2026-23744 is an unauthenticated command injection in MCPJam Inspector ≤1.4.2 via /api/mcp/connect. This POC exploits it by sending a crafted JSON payload to execute arbitrary commands, granting a reverse shell with PTY. Create: 2026-08-10 09:07:16 +0000 UTC Push: 2026-08-10 09:52:16 +0000 UTC |

Mluex0/CVE-2026-23744-PoC CVE-2026-23744 is an unauthenticated command injection in MCPJam Inspector ≤1.4.2 via /api/mcp/connect. This POC exploits it by sending a crafted JSON payload to execute arbitrary commands, granting a reverse shell with PTY. Create: 2026-08-10 09:07:16 +0000 UTC Push: 2026-08-11 01:41:53 +0000 UTC |

DarkLycn1976/CVE-2026-19264 CVE-2026-19264 - Critical unauthenticated path traversal to full instance takeover in Postiz (< 2.22.1). Technical writeup: decode-order bypass, JWT_SECRET escalation, and analysis of the upstream fix. Create: 2026-08-10 08:37:25 +0000 UTC Push: 2026-08-10 08:53:03 +0000 UTC |

LazyBear8372/CVE-2023-31014_Lab Educational Android lab for CVE-2023-31014 implicit intent hijacking Create: 2026-08-10 08:35:06 +0000 UTC Push: 2026-08-10 08:35:10 +0000 UTC |

sonnelon/CVE-2025-59528-PoC The poc of CVE-2025-59528 Create: 2026-08-10 06:54:32 +0000 UTC Push: 2026-08-10 06:54:33 +0000 UTC |

HORKimhab/CVE-2026-20685 CVE-2026-20685 - Draft or TODO Create: 2026-08-10 06:46:13 +0000 UTC Push: 2026-08-10 06:46:16 +0000 UTC |

LazyBear8372/CVE-2020-23349_Lab Educational Android lab for CVE-2020-23349 in Sina Weibo SDK 4.2.7 Create: 2026-08-10 05:07:36 +0000 UTC Push: 2026-08-10 05:07:42 +0000 UTC |

SneakyNachos/CVE-2024-29943-but-with-wasm CVE-2024-29943, but with wasm Create: 2026-08-10 02:34:36 +0000 UTC Push: 2026-08-10 02:34:49 +0000 UTC |

arleyna/CVE-2022-38599 Teleport v3.2.2, Teleport v3.5.6-rc6, and Teleport v3.6.3-b2 was discovered to contain an information leak via the /user/get-role-list web interface. Create: 2026-08-10 02:11:23 +0000 UTC Push: 2026-08-10 02:11:23 +0000 UTC |

MADA0L/CVE-2026-39987-Poc Proof of Concept (PoC) WebSocket client for CVE-2026-39987 (Marimo Pre-Auth RCE), intended for authorized security testing. Create: 2026-08-10 02:08:03 +0000 UTC Push: 2026-08-10 02:08:04 +0000 UTC |

Tobss8/GIGABYTE-H510M-K-V2-BIOS-SMM-Reverse-Engineering-CVE-2025-7026-7027-7028-7029-Research Static reverse-engineering of a GIGABYTE H510M K V2 (`H510MKV2.F3`) BIOS image: full UEFI firmware-volume extraction analysis of the PI-spec SMM Core memory allocator and a targeted hunt for the four SMM memory-corruption vulnerabilities GIGABYTE/Binarly disclosed in 2025 (CVE-2025-7026 CVE-2025-7027 CVE-2025-7028 CVE-2025-7029). Create: 2026-08-09 22:00:09 +0000 UTC Push: 2026-08-09 22:00:09 +0000 UTC |

Boreas37/CVE-2026-69084-PoC CVE-2026-69084/69085 — SiYuan arbitrary SQL execution via searchEmbedBlock + searchDocs SQLi (CVSS 9.9). Verified on v3.7.2, rejected on v3.7.3. Create: 2026-08-09 20:02:45 +0000 UTC Push: 2026-08-09 20:02:49 +0000 UTC |

Cyb3rWitch3r/CVE-2026-26119 WAC RCE - CVE-2026-26119 Windows Admin Center authenticated RCE via WinREST/PowerShell invokeCommand. Create: 2026-08-09 19:50:49 +0000 UTC Push: 2026-08-09 19:40:47 +0000 UTC |

r3vpwnx/CVE-2026-26119 Create: 2026-08-09 18:47:20 +0000 UTC Push: 2026-08-09 18:47:21 +0000 UTC |

Loaxert/CVE-2025-59528-PoC PoC for CVE-2025-59528 used to achieve remote code execution on the Silentium machine at HTB Create: 2026-08-09 18:13:57 +0000 UTC Push: 2026-08-09 18:13:57 +0000 UTC |

gsadagopan/cve-2026-22747-sandbox Create: 2026-08-09 17:08:46 +0000 UTC Push: 2026-08-09 17:08:47 +0000 UTC |

Boreas37/CVE-2026-34910-PoC CVE-2026-34910/34909 — UniFi OS unauth RCE + file read via ..%2f auth bypass (CVSS 10.0, KEV, Mirai ITW) Create: 2026-08-09 16:58:00 +0000 UTC Push: 2026-08-09 16:58:04 +0000 UTC |

Boreas37/CVE-2026-24061-PoC CVE-2026-24061 — GNU Inetutils telnetd remote auth bypass (USER=-f root) to root shell. CVSS 9.8. Verified. Create: 2026-08-09 16:39:10 +0000 UTC Push: 2026-08-09 16:39:14 +0000 UTC |

Polosss/By-Poloss..-..CVE-2026-15038-POC POC 4 CVE-2026-15038 Create: 2026-08-09 15:19:47 +0000 UTC Push: 2026-08-09 15:19:48 +0000 UTC |

eh-amish/CVE-2026-64638-XSS-to-Shell-PoC Create: 2026-08-09 14:38:28 +0000 UTC Push: 2026-08-09 14:38:28 +0000 UTC |