woshigenm/CVE-2026-98499 Create: 2026-11-07 05:04:14 +0000 UTC Push: 2026-11-07 05:04:16 +0000 UTC |

giki-shergill/CVE-2026-123014---iTerm2-Terminal PoC and research for CVE-2026-123014: iTerm2 x-man-page NUL-byte argument injection. Create: 2026-11-07 00:03:45 +0000 UTC Push: 2026-11-07 00:03:47 +0000 UTC |

Cobrastrike62/CVE-2026-83844-Detection Detection and remediation scripts for CVE-2026-83844, Windows Paint remote code execution (CVSS 8.1) Create: 2026-11-06 21:32:57 +0000 UTC Push: 2026-11-06 21:43:36 +0000 UTC |

lpizziniacofortinet/cve-2026-123158-openssh-musl-lab Automated Terraform lab environment for OpenSSH on Linux with musl libc without PAM (CVE-2026-123158 research) Create: 2026-11-06 20:45:17 +0000 UTC Push: 2026-11-06 20:45:46 +0000 UTC |

fixedbyreboot/CVE-2026-123488-POC POC exploit for CVE-2026-123488 - unauthenticated SQL injection vulnerability in Craft CMS (MySQL/MariaDB backend). Admin takeover. Create: 2026-11-06 20:22:54 +0000 UTC Push: 2026-11-06 20:25:28 +0000 UTC |

ryanmurf/mysql-connector-j-cve-2026-60586-repro Create: 2026-11-06 18:44:48 +0000 UTC Push: 2026-11-06 18:44:55 +0000 UTC |

ryanmurf/mysql-connector-j-cve-2026-60623-repro Create: 2026-11-06 18:38:15 +0000 UTC Push: 2026-11-06 18:38:22 +0000 UTC |

Ghost-Bx1/cve-2026-48356-magento-file-upload-rce CVE-2026-48356 - Adobe Commerce/Magento Unrestricted File Upload RCE | CVSS 9.3 | By Gh0st-Bx1 Create: 2026-11-06 18:34:29 +0000 UTC Push: 2026-11-06 18:34:31 +0000 UTC |

Ghost-Bx1/cve-2025-32433-erlang-ssh-preauth-rce CVE-2025-32433 - Erlang/OTP SSH Pre-Authentication RCE | CVSS 10.0 | By Gh0st-Bx1 Create: 2026-11-06 18:34:24 +0000 UTC Push: 2026-11-06 18:34:26 +0000 UTC |

Ghost-Bx1/cve-2026-97229-gitlab-ci-rce CVE-2026-97229 - GitLab CE/EE CI/CD Integer Overflow RCE | CVSS 10.0 | By Gh0st-Bx1 Create: 2026-11-06 18:34:20 +0000 UTC Push: 2026-11-06 18:34:21 +0000 UTC |

ryanmurf/mysql-connector-j-cve-2026-61082-repro Create: 2026-11-06 18:29:12 +0000 UTC Push: 2026-11-06 18:29:18 +0000 UTC |

Sable-Research/CVE-2026-118423-WP-Libre-Form Sable Research — Analysis of CVE-2026-118423: Unauthenticated Arbitrary File Upload to RCE in WP Libre Form (≤ 1.5.0.1) Create: 2026-11-06 18:22:26 +0000 UTC Push: 2026-11-06 18:22:28 +0000 UTC |

ryanmurf/mysql-connector-j-cve-2026-101678-repro Reproducer for CVE-2026-101678 (MySQL Connector/J <= 26.7.0) - malicious server reporting huge result-set column count Create: 2026-11-06 18:20:02 +0000 UTC Push: 2026-11-06 18:20:09 +0000 UTC |

halilkirazkaya/CVE-2026-123158 sshole (CVE-2026-123158): OpenSSH password bypass on alpine Linux Create: 2026-11-06 18:05:42 +0000 UTC Push: 2026-11-06 18:05:45 +0000 UTC |

hacermuden/CVE-2026-119977 CVE-2026-119977 WordPress Core Upgrade-Window TOCTOU RCE Create: 2026-11-06 17:38:46 +0000 UTC Push: 2026-11-06 17:38:48 +0000 UTC |

crash00xd/CVE-2026-123158_SSHRole_PoC Prova de conceito para exploração da vulnerabilidade CVE-2026-123158. Create: 2026-11-06 17:32:09 +0000 UTC Push: 2026-11-06 17:32:10 +0000 UTC |

hackzuoji/freeswitch-cve-2026-116779-POC Create: 2026-11-06 17:29:28 +0000 UTC Push: 2026-11-06 17:29:29 +0000 UTC |

thiscitze/cve-2026-113615-poc CVE-2026-113615 - GS JWT <= 1.0.0 unauthenticated SQLi to administrator JWT (PoC + exploit by thiscitze) Create: 2026-11-06 16:11:32 +0000 UTC Push: 2026-11-06 16:11:38 +0000 UTC |

mc493/openssh-musl-enterprise--hardening-cve-2026-123158 Create: 2026-11-06 16:03:01 +0000 UTC Push: 2026-11-06 16:03:02 +0000 UTC |

Akshit0203/CVE-2015-1201-wordpress-Reflex-Gallery-plugin-RCE-PoC PoC exploit for CVE-2015-1201 (EDB-36374) — Unauthenticated Arbitrary File Upload to Remote Code Execution in WordPress Reflex Gallery Plugin ≤ 3.1.3. Features interactive webshell, reverse shell mode, and multi-path upload fallback. Create: 2026-11-06 15:48:38 +0000 UTC Push: 2026-11-06 15:48:40 +0000 UTC |