thrilokh-q123/CVE-2025-23134_fixes_code The ASN1_STRING_set() function takes an `int` length, make sure the argument is not inadvertently truncated when it is called from asn1_ex_c2i(). Create: 2026-09-20 03:00:09 +0000 UTC Push: 2026-09-20 03:00:10 +0000 UTC |

vvsy46/CVE-2026-23111-PoC Create: 2026-09-20 02:53:22 +0000 UTC Push: 2026-09-20 02:53:23 +0000 UTC |

djzzlim/CVE-2026-94036 Create: 2026-09-19 23:17:06 +0000 UTC Push: 2026-09-19 23:18:16 +0000 UTC |

MohammadAliMehri/cve-2021-44790-lab Create: 2026-09-19 22:23:49 +0000 UTC Push: 2026-09-19 22:23:50 +0000 UTC |

Hasyros/CVE-2026-93661-events-manager-ticket-idor IDOR/BOLA in Events Manager <= 7.4.3 REST ticket update endpoint — CVE-2026-93661 Create: 2026-09-19 21:16:57 +0000 UTC Push: 2026-10-07 16:15:25 +0000 UTC |

Hasyros/CVE-2026-93661-idor-events-manager IDOR/BOLA in Events Manager <= 7.4.3 REST ticket update endpoint — CVE-2026-93661 Create: 2026-09-19 21:16:57 +0000 UTC Push: 2026-10-07 16:15:25 +0000 UTC |

saina15/cve-2020-14343-lab Controlled vulnerability research and reproduction lab for CVE-2020-14343 in PyYAML Create: 2026-09-19 20:55:40 +0000 UTC Push: 2026-09-19 20:55:42 +0000 UTC |

abraxas/CVE-2026-77635 CVE-2026-77635 - CakePHP - Critical 9.2 - Unauthenticated GET /?path= - SQL Injection Create: 2026-09-19 20:48:37 +0000 UTC Push: 2026-09-19 20:48:48 +0000 UTC |

abraxas/CVE-2026-79752 CVE-2026-79752 - CakePHP - Critical 9.2 - Unauthenticated GET /?type= - SQL Injection Create: 2026-09-19 20:36:59 +0000 UTC Push: 2026-09-19 20:37:10 +0000 UTC |

murrez/CVE-2026-84434 PoC for CVE-2026-84434: unauthenticated arbitrary file upload in Gravity Forms ≤3.1.0.4 via hidden File Upload fields. Python check/exploit/mass scan. Create: 2026-09-19 20:27:35 +0000 UTC Push: 2026-09-19 20:27:37 +0000 UTC |

murrez/CVE-2026-89274 PoC for CVE-2026-89274: unauthenticated arbitrary shortcode execution in WP Recipe Maker ≤10.8.1 via recipe rating comments (JSON-LD). Python check/exploit/verify. Create: 2026-09-19 20:25:18 +0000 UTC Push: 2026-09-19 20:25:21 +0000 UTC |

murrez/CVE-2026-92229 Description Create: 2026-09-19 20:22:01 +0000 UTC Push: 2026-09-19 20:22:02 +0000 UTC |

abraxas/CVE-2026-81648 CVE-2026-81648 - WordPress - CryptoPayment Gateway - Critical 10.0 - Unauthenticated POST /wp-content/plugins/cryptopayment-gateway/vendor/cryptd/ajax.php - Arbitrary File Deletion Create: 2026-09-19 20:21:48 +0000 UTC Push: 2026-09-19 20:21:49 +0000 UTC |

abraxas/CVE-2026-81294 CVE-2026-81294 - WordPress - Paul Ryan - Critical 9.8 - Unauthenticated GET /wp-login.php?external=oauth2 - Privilege Escalation Create: 2026-09-19 20:03:54 +0000 UTC Push: 2026-09-19 20:04:03 +0000 UTC |

abraxas/CVE-2026-13447 CVE-2026-13447 - WordPress - inspireui - Critical 9.8 - Unauthenticated POST /wp-json/api/flutter_user/firebase_sms_v2 - Authentication Bypass Create: 2026-09-19 19:33:32 +0000 UTC Push: 2026-09-19 19:33:44 +0000 UTC |

abraxas/CVE-2026-19952 CVE-2026-19952 - DynamiApps - High 7.5 - Unauthenticated POST /wp-admin/admin-ajax.php - Arbitrary File Deletion Create: 2026-09-19 19:12:17 +0000 UTC Push: 2026-09-19 19:12:36 +0000 UTC |

abraxas/CVE-2026-75816 CVE-2026-75816 - shabti - Critical 9.8 - Unauthenticated POST /wp-admin/admin-ajax.php - Account Takeover Create: 2026-09-19 18:58:33 +0000 UTC Push: 2026-09-19 18:58:58 +0000 UTC |

JonasChen0103/CVE-2026-33439-PoC CVE-2026-33439 OpenAM pre-auth RCE PoC Create: 2026-09-19 17:33:44 +0000 UTC Push: 2026-09-19 19:33:16 +0000 UTC |

abraxas/CVE-2026-78159 CVE-2026-78159 - stellarwp - Critical 9.8 - Unauthenticated POST /wp-comments-post.php - Remote Code Execution Create: 2026-09-19 16:52:24 +0000 UTC Push: 2026-09-19 16:52:51 +0000 UTC |

0xBlackash/CVE-2026-74469 CVE-2026-74469 Create: 2026-09-19 16:31:50 +0000 UTC Push: 2026-09-19 16:31:52 +0000 UTC |