KunalKhandelwal-dev/CVE-2021-41773-Source-Code-Analysis Create: 2026-07-27 06:02:40 +0000 UTC Push: 2026-07-27 06:02:41 +0000 UTC |

hptcybersecurity/CVE-2026 Repo cho năm 2026 Create: 2026-07-27 04:36:54 +0000 UTC Push: 2026-07-27 04:36:54 +0000 UTC |

s-vx/CVE-2026-41179 RCE in rclone Create: 2026-07-27 04:13:43 +0000 UTC Push: 2026-07-27 04:14:13 +0000 UTC |

Dungsocool/CVE-2026-60137_CVE-2026-63030 Create: 2026-07-27 03:13:37 +0000 UTC Push: 2026-07-27 03:13:54 +0000 UTC |

HORKimhab/CVE-2026-4861 CVE-2026-4861 - Draft or Todo Create: 2026-07-27 01:41:09 +0000 UTC Push: 2026-07-27 01:41:12 +0000 UTC |

Procjevt/CVE-2026-58138 Create: 2026-07-27 00:38:25 +0000 UTC Push: 2026-07-27 00:38:44 +0000 UTC |

GlendonNotGlen/certighost-cve-2026-54121-slides Slidev presentation for Certighost (CVE-2026-54121), with Mermaid diagrams and exported assets. Create: 2026-07-26 17:32:06 +0000 UTC Push: 2026-07-26 17:32:17 +0000 UTC |

theopaid/CVE-2026-66752-HTTP-Request-Smuggling-via-Unparsed-Transfer-Encoding-Values-tiny_http- Security Advisory: HTTP Request Smuggling via Unparsed Transfer-Encoding Values (tiny_http) Create: 2026-07-26 17:30:37 +0000 UTC Push: 2026-07-28 23:25:17 +0000 UTC |

theopaid/CVE-2026-66753-HTTP-Header-Injection-via-Unvalidated-CR-and-LF-in-Header-Values-tiny_http- Security Advisory: HTTP Header Injection via Unvalidated CR and LF in Header Values (tiny_http) Create: 2026-07-26 17:28:10 +0000 UTC Push: 2026-07-28 23:24:11 +0000 UTC |

theopaid/CVE-2026-66754-Remote-Denial-of-Service-via-Reachable-Assertion-in-URL-Prefix-Handling-rouille- Security Advisory: Remote Denial of Service via Reachable Assertion in URL Prefix Handling (rouille) Create: 2026-07-26 17:25:04 +0000 UTC Push: 2026-07-28 23:22:17 +0000 UTC |

theopaid/CVE-2026-66746-HTTP-Response-Splitting-via-Unvalidated-Response-Header-Values-rouille- Security Advisory: HTTP Response Splitting via Unvalidated Response Header Values (rouille) Create: 2026-07-26 17:22:47 +0000 UTC Push: 2026-07-28 23:12:31 +0000 UTC |

theopaid/CVE-2026-67181-HTTP-Request-Smuggling-via-Transfer-Encoding-Desynchronization-rouille- Security Advisory: HTTP Request Smuggling via Transfer-Encoding Desynchronization (rouille) Create: 2026-07-26 17:20:43 +0000 UTC Push: 2026-07-28 23:18:37 +0000 UTC |

theopaid/CVE-2026-66754-HTTP-Request-Smuggling-Enables-Front-End-Access-Control-Bypass-rouille- Security Advisory: HTTP Request Smuggling Enables Front-End Access Control Bypass (rouille) Create: 2026-07-26 17:16:53 +0000 UTC Push: 2026-07-28 23:17:15 +0000 UTC |

theopaid/CVE-2026-67182-HTTP-Request-Smuggling-Enables-Front-End-Access-Control-Bypass-rouille- Security Advisory: HTTP Request Smuggling Enables Front-End Access Control Bypass (rouille) Create: 2026-07-26 17:16:53 +0000 UTC Push: 2026-07-28 23:23:13 +0000 UTC |

CerberusMrXi/cPanel-CVE-2026-41940-auth-bypass-exploit Critical authentication bypass exploit for cPanel/WHM CVE-2026-41940. Leverages CRLF injection in cpsrvd daemon to gain root WHM access without credentials. Includes version detection, verbose logging, proxy support, JSON reporting, and post-exploitation account enumeration. For authorized security testing only. Create: 2026-07-26 16:39:42 +0000 UTC Push: 2026-07-26 16:39:43 +0000 UTC |

CerberusMrXi/cPanel-WHM-CVE-2026-41940-auth-bypass-exploit Critical authentication bypass exploit for cPanel/WHM CVE-2026-41940. Leverages CRLF injection in cpsrvd daemon to gain root WHM access without credentials. Includes version detection, verbose logging, proxy support, JSON reporting, and post-exploitation account enumeration. For authorized security testing only. Create: 2026-07-26 16:39:42 +0000 UTC Push: 2026-07-26 16:51:15 +0000 UTC |

theopaid/CVE-2026-67183-Unauthenticated-Memory-Leak-Leads-To-Memory-Exhaustion-TinyWeb- Security Advisory: Unauthenticated Memory Leak Leads To Memory Exhaustion (TinyWeb) Create: 2026-07-26 15:08:19 +0000 UTC Push: 2026-07-28 23:28:01 +0000 UTC |

theopaid/CVE-2026-67184-Unauthenticated-NULL-Pointer-Dereference-Crashes-the-Server-TinyWeb- Security Advisory: Unauthenticated NULL Pointer Dereference Crashes the Server (TinyWeb) Create: 2026-07-26 15:07:08 +0000 UTC Push: 2026-07-28 23:27:13 +0000 UTC |

theopaid/CVE-2026-67185-Unauthenticated-Path-Traversal-Allows-Arbitrary-File-Read-TinyWeb- Security Advisory: Unauthenticated Path Traversal Allows Arbitrary File Read (TinyWeb) Create: 2026-07-26 15:06:23 +0000 UTC Push: 2026-07-28 23:26:40 +0000 UTC |

theopaid/CVE-2026-66750-Insufficient-Access-Controls-Allow-for-Unauthorized-File-Downloads-Let-s-Chat- Security Advisory: Insufficient Access Controls Allow for Unauthorized File Downloads (Let's Chat) Create: 2026-07-26 14:29:32 +0000 UTC Push: 2026-07-28 23:29:54 +0000 UTC |