AnggaTechI/CVE-2026-3844 CVE-2026-3844 — Unauthenticated Arbitrary File Upload to RCE in Breeze Cache (WordPress). CVSS 9.8 CRITICAL. Mass scanner + auto shell injector with multi-threading. Create: 2026-08-08 11:43:54 +0000 UTC Push: 2026-08-08 11:43:55 +0000 UTC |

BurnSkyup/CVE-2023-30000 A Linux-related vulnerability Create: 2026-08-08 09:11:50 +0000 UTC Push: 2026-08-08 09:11:51 +0000 UTC |

BurnSkyup/CVE-2023-32233-reproduction A Linux-related vulnerability Create: 2026-08-08 09:11:50 +0000 UTC Push: 2026-08-08 10:29:18 +0000 UTC |

HackSpeak/CVE-2026-64638 XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE PoC mirror — WordSec, MIT; for authorized security testing Create: 2026-08-08 08:51:12 +0000 UTC Push: 2026-08-08 08:51:13 +0000 UTC |

4minx/CVE-2026-64638 CVE-2026-64638 (XSS2shell) POC. Create: 2026-08-08 08:48:02 +0000 UTC Push: 2026-08-08 08:48:03 +0000 UTC |

AnggaTechI/CVE-2026-63077 CVE-2026-63077 — Unauthenticated Remote Code Execution in JetBrains TeamCity via agent polling protocol deserialization. CVSS 9.8 CRITICAL. Mass exploitation tool with interactive shell, multi-threading, and real-time result logging. Create: 2026-08-08 06:32:09 +0000 UTC Push: 2026-08-08 06:32:10 +0000 UTC |

yogaGymn/XSS2Shell-CVE-2026-64638 Create: 2026-08-08 06:10:13 +0000 UTC Push: 2026-08-08 06:11:09 +0000 UTC |

sandimfz/CVE-2024-23692 Create: 2026-08-08 04:20:57 +0000 UTC Push: 2026-08-08 04:20:58 +0000 UTC |

ronamosa/CVE-2026-18953 PoC for CVE-2026-18953 — arbitrary file write (CWE-22) in awslabs.aws-transform-mcp-server's get_resource tool via the savePath parameter Create: 2026-08-08 03:41:26 +0000 UTC Push: 2026-08-08 03:41:29 +0000 UTC |

HackSpeak/CVE-2026-64561 Zapscape (CVE-2026-64561) KVM/x86 shadow MMU UAF guest-to-host escape PoC mirror — V4bel/@v4bel, MIT; for authorized security testing Create: 2026-08-08 02:13:23 +0000 UTC Push: 2026-08-08 02:13:55 +0000 UTC |

Saku0512/CVE-2026-71557-poc Create: 2026-08-08 01:52:34 +0000 UTC Push: 2026-08-08 01:52:35 +0000 UTC |

imbas007/CVE-2026-64638-POC CVE-2026-64638: WordPress Pre-auth XSS to RCE (XSS2Shell) PoC Create: 2026-08-08 01:20:11 +0000 UTC Push: 2026-08-08 01:20:15 +0000 UTC |

BoredHackerBlog/teamcity-CVE-2026-63077-pcap teamcity teamcity-CVE-2026-63077 exploitation pcap Create: 2026-08-08 00:10:31 +0000 UTC Push: 2026-08-08 00:10:32 +0000 UTC |

renzi25031469/CVE-2026-64638---WordPress-Core---XSS2Shell Template Nuclei para detecção não-intrusiva do XSS2Shell, um parser differential pré-autenticado no WordPress Core que permite injeção de elementos DOM na página de login, servindo de base para uma cadeia de XSS → RCE. Create: 2026-08-07 23:48:18 +0000 UTC Push: 2026-08-07 23:48:19 +0000 UTC |

renzi25031469/CVE-2026-64638-WordPress-Core-XSS2Shell Template Nuclei para detecção não-intrusiva do XSS2Shell, um parser differential pré-autenticado no WordPress Core que permite injeção de elementos DOM na página de login, servindo de base para uma cadeia de XSS → RCE. Create: 2026-08-07 23:48:18 +0000 UTC Push: 2026-08-07 23:50:40 +0000 UTC |

0xBlackash/CVE-2026-64638 CVE-2026-64638 Create: 2026-08-07 22:44:35 +0000 UTC Push: 2026-08-07 22:44:36 +0000 UTC |

Linuxhackingid-official/XSS2Shell-CVE-2026-64638 Create: 2026-08-07 22:07:13 +0000 UTC Push: 2026-08-07 22:07:25 +0000 UTC |

ZSecur1ty/XSS2Shell-CVE-2026-64638 Create: 2026-08-07 22:02:27 +0000 UTC Push: 2026-08-07 22:03:17 +0000 UTC |

SunandM/poc-h2-CVE-2026-71554 PoC for CVE-2026-71554 — h2 duplicate Host header request smuggling primitive (fixed in 4.4.1) Create: 2026-08-07 21:15:48 +0000 UTC Push: 2026-08-07 21:15:51 +0000 UTC |

0init/CVE-2026-45185 Create: 2026-08-07 21:14:36 +0000 UTC Push: 2026-08-07 21:14:52 +0000 UTC |