villager1314/CVE-2026-64560-Analysis This is a Use-After-Free vulnerability in Linux kernel posix-cpu-timers (race condition between exec() of a non-leader thread and timer_delete()) Create: 2026-08-03 12:31:27 +0000 UTC Push: 2026-08-03 12:31:28 +0000 UTC |

HackSpeak/CVE-2026-66066 CVE-2026-66066 (KindaRails2Shell) PoC - Rails Active Storage/libvips arbitrary file read to RCE; for authorized security testing Create: 2026-08-03 12:31:12 +0000 UTC Push: 2026-08-04 10:56:44 +0000 UTC |

johnnygreeme/CVE-2023-36874 Educational Proof of Concept (PoC) for CVE-2023-36874 — Windows Error Reporting (WER) Local Privilege Escalation vulnerability. Create: 2026-08-03 11:53:44 +0000 UTC Push: 2026-08-03 11:54:25 +0000 UTC |

siboy17/CVE-2022-21907-http.sys Create: 2026-08-03 11:39:18 +0000 UTC Push: 2026-08-03 11:39:18 +0000 UTC |

aj2108/CVE-2026-9848 CVE-2026-9848 is an Unauthenticated SQL Injection (SQLi) vulnerability affecting the WP Ticket (Customer Support Ticket System & Helpdesk) plugin for WordPress up to and including version 6.0.4. Create: 2026-08-03 11:39:12 +0000 UTC Push: 2026-08-03 11:39:13 +0000 UTC |

Donalhighnecked528/YellowKey-Bitlocker-CVE-2026-45585 Create: 2026-08-03 11:32:18 +0000 UTC Push: 2026-08-03 11:32:43 +0000 UTC |

HackSpeak/CVE-2026-64531 CVE-2026-64531 (OVSwrap) PoC - Linux kernel Open vSwitch LPE; for patch validation and security research Create: 2026-08-03 11:25:09 +0000 UTC Push: 2026-08-04 10:56:41 +0000 UTC |

rahulreddykarne/CVE-2026-43637-cornac Path traversal (Tar Slip) in Cornac via _extract_archive (CVE-2026-43637) Create: 2026-08-03 11:12:45 +0000 UTC Push: 2026-08-03 11:12:46 +0000 UTC |

rahulreddykarne/CVE-2026-63720-datamodel-code-generator Code injection (RCE) in datamodel-code-generator via unvalidated customBasePath (CVE-2026-63720) Create: 2026-08-03 10:36:03 +0000 UTC Push: 2026-08-03 10:36:04 +0000 UTC |

rahulreddykarne/CVE-2026-65321-pyathena SQL injection in PyAthena via DefaultParameterFormatter (CVE-2026-65321) Create: 2026-08-03 09:47:45 +0000 UTC Push: 2026-08-03 09:47:46 +0000 UTC |

AdarshThakur14777-cyber/CVE-2026-60137 wpsqli full SQLi extractor + dumper for CVE-2026-60137 Create: 2026-08-03 08:39:55 +0000 UTC Push: 2026-08-03 08:39:56 +0000 UTC |

expday/CVE-2026-12250 Create: 2026-08-03 08:23:56 +0000 UTC Push: 2026-08-03 10:43:13 +0000 UTC |

HORKimhab/CVE-2026-17583 CVE-2026-17583 - Draft Create: 2026-08-03 08:12:10 +0000 UTC Push: 2026-08-03 08:12:14 +0000 UTC |

imbas007/CVE-2026-60004-POC Create: 2026-08-03 07:48:39 +0000 UTC Push: 2026-08-03 07:48:40 +0000 UTC |

Wind010/CVE-2026-39987_PoC A proof-of-concept for CVE-2026-39987 Create: 2026-08-03 06:32:49 +0000 UTC Push: 2026-08-03 06:32:50 +0000 UTC |

c0gnit00/CVE-2026-33937 Python POC, Exploit for Handlebars.js AST Injection RCE, Handlebars.js versions 4.0.0 through 4.7.8 are affected. CVSS score: 9.8 Critical. Create: 2026-08-03 06:27:58 +0000 UTC Push: 2026-08-03 06:27:58 +0000 UTC |

TreasureBoy520/cve-2026-poc-collection Restored from anonymous99-Rise Create: 2026-08-03 05:06:49 +0000 UTC Push: 2026-08-03 05:06:50 +0000 UTC |

BiiTts/CVE-2026-52887-NocoBase-SQLi-RCE CVE-2026-52887 — NocoBase SQL injection -> PostgreSQL-superuser RCE (myInAppChannels:list filter, CVSS 10.0). Author PoC + source analysis + docker lab. Create: 2026-08-03 03:54:35 +0000 UTC Push: 2026-08-03 03:54:38 +0000 UTC |

imbas007/CVE-2026-63223-POC Create: 2026-08-03 03:37:35 +0000 UTC Push: 2026-08-03 03:37:36 +0000 UTC |

BiiTts/CVE-2026-12940-Langflow-Unauth-RCE CVE-2026-12940 — Langflow OSS <=1.10.1 unauthenticated RCE via MCP stdio environment-variable injection (SHELLOPTS/PS4). Author PoC + source analysis + lab. Create: 2026-08-03 03:11:39 +0000 UTC Push: 2026-08-03 03:11:41 +0000 UTC |