Nxploited/CVE-2026-13714 Realtyna Organic IDX plugin + WPL Real Estate < 5.3.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution Create: 2026-08-02 17:21:27 +0000 UTC Push: 2026-08-02 17:21:28 +0000 UTC |

royaleybovich/CVE-2026-3854-lab Create: 2026-08-02 15:30:22 +0000 UTC Push: 2026-08-02 15:30:23 +0000 UTC |

jasonbernier/CVE-2026-39987 Simple POC for CVE-2026-39987 Create: 2026-08-02 14:22:20 +0000 UTC Push: 2026-08-02 14:22:21 +0000 UTC |

Hurrrraaaa/CVE-2021-21972 Create: 2026-08-02 13:23:53 +0000 UTC Push: 2026-08-02 13:24:48 +0000 UTC |

aj2108/CVE-2026-9809 CVE-2026-9809 is a Stored Cross-Site Scripting (Stored XSS) vulnerability affecting Mautic 7 (versions 7.0.0 through 7.1.1). Create: 2026-08-02 12:21:38 +0000 UTC Push: 2026-08-02 12:21:39 +0000 UTC |

aj2108/CVE-2026-9811 CVE-2026-9811 is a Stored Cross-Site Scripting (Stored XSS) vulnerability affecting Mautic 7 (versions 7.0.0 through 7.1.1). Create: 2026-08-02 11:38:08 +0000 UTC Push: 2026-08-02 11:38:09 +0000 UTC |

gbuyssens/CVE-2026-41651 Local privilege escalation via TOCTOU race condition in PackageKit's. Create: 2026-08-02 10:57:10 +0000 UTC Push: 2026-08-02 10:57:11 +0000 UTC |

gbuyssens/CVE-2026-39987 Marimo exploit prior to 0.23.0. Pre-Auth RCE vulnerability via websocket endpoint : /terminal/ws. Create: 2026-08-02 10:05:44 +0000 UTC Push: 2026-08-02 10:05:45 +0000 UTC |

BridgerAlderson/CVE-2026-58424 A flaw in Gitea Open Source Git Server’s approval‑gate logic allows a pull request that originates from a permanent fork to merge without satisfying the repository’s configured approval gates. Create: 2026-08-02 09:18:27 +0000 UTC Push: 2026-08-02 09:18:28 +0000 UTC |

far00t01/CVE-2026-59941 Dompdf: Denial of Service (DoS) via Resource Exhaustion using Oversized Image Bitmaps Create: 2026-08-02 08:54:53 +0000 UTC Push: 2026-08-02 08:54:54 +0000 UTC |

Mohammad-008/rsfiles-CVE-2026-57827 Unauthenticated File Upload → RCE PoC for CVE-2026-57827 (RSFiles! Joomla < 1.17.12). Authorized security research use only. Create: 2026-08-02 08:21:50 +0000 UTC Push: 2026-08-02 08:21:51 +0000 UTC |

boxiaolanya2008/CVE-2026-43499-Neo11Plus Create: 2026-08-02 08:10:34 +0000 UTC Push: 2026-08-02 08:10:45 +0000 UTC |

Scratchappy/CVE-2025-68937 Create: 2026-08-02 03:14:20 +0000 UTC Push: 2026-08-02 03:14:26 +0000 UTC |

Jenderal92/CVE-2026-49049 Create: 2026-08-02 02:42:32 +0000 UTC Push: 2026-08-02 02:42:33 +0000 UTC |

F7P-H4NN1B4L/CVE-2018-9995-DVR-Credentials-Extractor This project demonstrates the publicly disclosed CVE-2018-9995 vulnerability found in multiple embedded DVR devices. Create: 2026-08-01 22:52:52 +0000 UTC Push: 2026-08-01 22:52:53 +0000 UTC |

1ndev-ui/CVE-2026-43499-S26 Root exploit for exploit for Galaxy S26 Create: 2026-08-01 22:45:30 +0000 UTC Push: 2026-08-01 22:45:31 +0000 UTC |

1ndevelopment/CVE-2026-43499-S26 Root exploit for exploit for Galaxy S26 Create: 2026-08-01 22:45:30 +0000 UTC Push: 2026-08-01 22:45:31 +0000 UTC |

Aqua1214/YellowKey-Bitlocker-CVE-2026-45585 YellowKey BitLocker CVE-2026-45585 - free open-source utility to extract, backup and view BitLocker recovery keys on Windows 10/11. BitLocker bypass vulnerability tool, remediation and mitigation. Tom's Hardware coverage. Check TPM status, protector types, encryption state. Download YellowKey free, portable, no install needed. Create: 2026-08-01 22:37:04 +0000 UTC Push: 2026-08-01 22:37:05 +0000 UTC |

Instructor-Admin/CVE-2026-15964-PoC PoC & checker for CVE-2026-15964 - unauthenticated password change in the WordPress plugin Single Sign On For TNG <= 2.0.0 (CVSS 9.8) Create: 2026-08-01 22:19:05 +0000 UTC Push: 2026-08-01 22:19:05 +0000 UTC |

nitindevelopermca/react-CVE-2018-6341 Create: 2026-08-01 22:01:40 +0000 UTC Push: 2026-08-04 18:03:27 +0000 UTC |