Giangdurian/CVE-2026-21858-and-CVE-2025-68613 Create: 2026-07-31 14:12:47 +0000 UTC Push: 2026-07-31 14:12:47 +0000 UTC |

Harshsanghvi108/CVE-2026-PENDING-AAVISHKAR-1 Aavishkar Institute Management System - Broken Access Control - Full Admin Panel Without Authentication Create: 2026-07-31 13:19:40 +0000 UTC Push: 2026-07-31 13:19:41 +0000 UTC |

Harshsanghvi108/CVE-2026-PENDING-EMS CodeAstro Expense Management System 1.0 - Multiple Vulnerabilities (SQL Injection, Stored XSS) Create: 2026-07-31 12:16:28 +0000 UTC Push: 2026-07-31 12:16:29 +0000 UTC |

AadityaKandel/CVE-2026-43284 This is the compiled version. This is not my program though. This is only for directly downloading the compiled version in labs where there is no gcc Create: 2026-07-31 10:09:15 +0000 UTC Push: 2026-07-31 10:09:16 +0000 UTC |

aj2108/CVE-2026-8347 CVE-2026-8347 is an Insecure Direct Object Reference (IDOR) combined with a wrong authorization level vulnerability in Concrete CMS versions 9.5.0 and earlier. The flaw exists in the Express association Reorder dialog, allowing a user with only view permissions on an Express entry to modify the ordering of associations for another entity. Create: 2026-07-31 08:34:50 +0000 UTC Push: 2026-07-31 08:34:51 +0000 UTC |

KrakenEU/CVE-2026-54121-CertiGhost- CVE-2026-54121(CertiGhost) without MachineAccountQuota POC Create: 2026-07-31 08:04:50 +0000 UTC Push: 2026-07-31 08:04:51 +0000 UTC |

KrakenEU/CVE-2026-54121-CertiGhost CVE-2026-54121(CertiGhost) without MachineAccountQuota POC Create: 2026-07-31 08:04:50 +0000 UTC Push: 2026-07-31 08:04:51 +0000 UTC |

fazilbaig1/CVE-2026-16723 This is N-day patch we releasing by testing our model capabilities Create: 2026-07-31 07:57:12 +0000 UTC Push: 2026-07-31 07:57:13 +0000 UTC |

LuZe0y/pd2425-cve-2026-43499-config Create: 2026-07-31 07:53:51 +0000 UTC Push: 2026-07-31 07:53:52 +0000 UTC |

LazyTitan33/CVE-2026-67599_ClearOS_RCE Authenticated Blind OS Command Injection in ClearOS Create: 2026-07-31 07:27:30 +0000 UTC Push: 2026-07-31 22:49:41 +0000 UTC |

nafiez/Metasploit-CVE-2026-54121-Certighost A Metasploit auxiliary module that escalates from any low-privileged domain user to full domain compromise by abusing the AD CS enrollment "chase" fallback. The CA can be coerced into authenticating back to attacker-controlled infrastructure and then issuing a certificate that impersonates a Domain Controller. Create: 2026-07-31 07:17:36 +0000 UTC Push: 2026-07-31 07:51:05 +0000 UTC |

nabhan-mohy/Dirty-Frag-Research-CVE-2026-43284- Comprehensive technical research on CVE-2026-43284 (Dirty Frag), including Linux kernel internals, root cause analysis, patch analysis, detection engineering, threat hunting, incident response, and Kubernetes security implications. Create: 2026-07-31 05:39:18 +0000 UTC Push: 2026-07-31 05:39:19 +0000 UTC |

HeltonPojo/CVE-2025-32432 Create: 2026-07-30 23:26:46 +0000 UTC Push: 2026-07-30 23:26:47 +0000 UTC |

0xBlackash/CVE-2026-60004 CVE-2026-60004 Create: 2026-07-30 22:24:16 +0000 UTC Push: 2026-07-30 22:24:17 +0000 UTC |

Industri4l-H3ll-Xpl0it3rs/CVE-2026-63030-WP2Shell CVE-2026-63030-WP2Shell | by gr1tx Create: 2026-07-30 22:23:03 +0000 UTC Push: 2026-07-30 22:23:04 +0000 UTC |

shinthink/CVE-2026-65883 Aimy Captcha-Less Form Guard Joomla Component PHP Object Injection RCE. clfgd XOR keystream recovery + unserialize(). CVSS 10.0 | CWE-502 | aimy_captcha-less_form_guard < 20.1 Create: 2026-07-30 22:07:42 +0000 UTC Push: 2026-07-30 22:07:46 +0000 UTC |

andree554/CVE-2022-24903-Heap-based-buffer-overflow-Hand-On-Lab CVE-2022-24903 Heap-based buffer overflow Create: 2026-07-30 21:47:40 +0000 UTC Push: 2026-07-30 21:47:41 +0000 UTC |

rails/rails-forensics-CVE-2026-66066 Create: 2026-07-30 21:06:00 +0000 UTC Push: 2026-07-30 22:26:04 +0000 UTC |

Candisexterior171/CVE-2026-57827 Create: 2026-07-30 20:49:05 +0000 UTC Push: 2026-07-30 20:49:35 +0000 UTC |

shinthink/CVE-2026-61424 CVE-2026-61424: DJ-Classifieds <= 3.11.1 Unauthenticated File Upload RCE (CVSS 10.0) Create: 2026-07-30 20:37:37 +0000 UTC Push: 2026-07-30 20:37:42 +0000 UTC |